Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/wUqXxRFOtd1NvrSzDZL71l4Bw80.roa
File: wUqXxRFOtd1NvrSzDZL71l4Bw80.roa (raw, json)
Hash identifier: ZOvPmBpyBmHqDLmdbAhs4IwJWT9nHrfLrdHGpR4YATE=
Subject key identifier: C1:4A:97:C5:11:4E:B5:DD:4D:BE:B4:B3:0D:92:FB:D6:5E:01:C3:CD
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: B5
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/wUqXxRFOtd1NvrSzDZL71l4Bw80.roa
Signing time: Fri 06 Jun 2025 02:24:55 +0000
ROA not before: Fri 06 Jun 2025 02:24:55 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:40c2:10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 02:24:55 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=C14A97C5114EB5DD4DBEB4B30D92FBD65E01C3CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:27:26:47:31:f2:1e:bc:0d:93:41:cb:f0:ac:
8d:8b:b0:56:f8:24:3d:d9:c3:ff:36:61:32:2d:48:
97:17:7d:28:01:b7:ad:ac:8d:00:c1:85:75:7e:f5:
c1:7c:ec:25:77:a9:81:b2:73:81:f2:b5:ea:c6:47:
77:4e:34:86:7e:e9:54:13:2f:40:16:51:b2:b9:18:
ac:18:95:59:71:e6:57:f6:00:39:80:06:75:78:8f:
1a:e7:0c:96:5e:85:92:5d:c7:fc:13:d5:e6:5e:39:
df:8c:d6:28:c9:f1:cb:8e:dd:d4:24:ff:bb:12:af:
94:5c:b5:74:8d:b1:ac:67:b1:11:b5:85:96:0c:32:
2c:f8:fb:85:7f:9f:9e:ff:47:cf:cc:fe:51:86:99:
a6:94:07:e1:30:8e:b5:22:96:5f:1e:64:b0:67:af:
66:f3:27:a9:cc:76:97:fa:25:54:b0:59:2c:31:af:
ab:cf:46:af:61:d6:0c:5e:7b:7c:19:27:f1:13:21:
a9:a0:2d:7c:b7:38:a5:50:7f:6c:e5:20:1d:11:a7:
0a:09:9b:09:a2:c2:c2:59:24:20:c8:1f:46:3e:bd:
0d:61:ee:10:58:f5:57:3a:f3:1d:08:1c:bd:00:1b:
c4:56:ae:41:f3:e6:a3:c2:86:ab:57:ab:0c:d9:db:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4A:97:C5:11:4E:B5:DD:4D:BE:B4:B3:0D:92:FB:D6:5E:01:C3:CD
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/wUqXxRFOtd1NvrSzDZL71l4Bw80.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:40c2:10::/44
Signature Algorithm: sha256WithRSAEncryption
d9:84:57:b9:08:7b:9e:85:8d:85:86:4b:b7:5b:95:1e:8b:ab:
b7:e4:86:d3:d9:d7:29:1f:f0:e9:07:77:b2:90:57:d5:d6:11:
fe:26:a9:92:32:0e:cf:63:cc:ea:e8:76:65:dd:00:7a:a5:b0:
55:e8:55:7f:44:43:82:79:01:d8:e2:0b:7d:01:db:f2:14:6e:
46:cc:40:1c:e3:dc:d8:34:38:7b:c3:51:68:bf:a1:3e:17:20:
0a:ac:d9:53:b3:41:1e:7a:f8:09:02:ac:f9:4b:d3:1c:a1:e6:
aa:ab:71:1b:cf:df:e9:59:0c:8c:35:17:3d:32:6a:91:fd:b3:
9d:6e:0e:8e:b6:fa:85:2e:8e:14:d9:6a:66:f3:f7:3b:8f:2b:
49:69:39:72:3a:8f:9a:38:43:b9:e0:1a:d1:c1:89:1d:32:56:
44:e1:65:44:1a:65:b6:d1:c8:58:86:ec:8b:c8:c9:eb:07:af:
e2:ae:0d:54:42:44:04:17:08:95:fb:a4:63:67:a7:96:f7:89:
1e:e8:8e:d3:67:c0:a9:80:f2:b5:8d:8f:c2:92:9e:95:4b:33:
02:1b:00:a6:89:5d:f2:c8:49:c1:c3:ed:79:bc:d1:f7:ee:8f:
a3:ab:b4:1d:88:cf:e5:70:13:a2:9b:eb:24:f8:e7:3e:0f:96:
36:7d:d8:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:06:07 2025 by rpki-client