Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/8zy3Zn4fjWAs5Peue_Ak0H7vObA.roa
File: 8zy3Zn4fjWAs5Peue_Ak0H7vObA.roa (raw, json)
Hash identifier: nSQHVvAXY31V+QibbKWDvwD5qYJRzMZcaFsOlZR5T8g=
Subject key identifier: F3:3C:B7:66:7E:1F:8D:60:2C:E4:F7:AE:7B:F0:24:D0:7E:EF:39:B0
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 7B
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/8zy3Zn4fjWAs5Peue_Ak0H7vObA.roa
Signing time: Wed 23 Apr 2025 14:50:22 +0000
ROA not before: Wed 23 Apr 2025 14:50:22 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 211392
IP address blocks: 45.248.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 23 14:50:22 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=F33CB7667E1F8D602CE4F7AE7BF024D07EEF39B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:39:14:38:42:79:fa:3a:70:18:be:bb:78:
51:b7:55:7e:c2:f8:29:e1:7f:68:c4:13:bc:23:ea:
51:a5:32:b5:78:74:f3:af:47:d5:5f:19:a8:93:07:
13:58:9d:78:8c:41:75:99:98:e5:f7:e5:c0:9c:1b:
f1:3b:f6:20:b6:73:c4:a4:39:a7:2e:27:b1:21:78:
2f:a2:a5:56:44:c2:b2:f4:5e:25:58:ea:73:80:cd:
38:cf:f2:f9:49:42:18:c7:92:39:ca:d1:a2:4a:03:
9c:ac:22:37:57:41:cc:f7:63:85:7f:77:c5:1b:13:
ce:70:b9:45:a8:a0:97:ae:1a:62:61:f4:60:fc:f3:
60:33:36:99:8e:ec:15:b1:47:39:b5:4b:ae:e1:2f:
80:94:b8:54:4d:62:57:df:81:cd:3a:ff:fd:aa:c3:
78:56:5f:88:73:8f:c8:4e:ba:1e:16:4a:c5:73:3e:
09:54:95:ee:30:9c:58:15:a8:b8:40:5a:0f:3d:e2:
f8:33:a1:ce:b9:95:92:e0:ea:d1:1b:6a:e9:0a:05:
1c:4d:d4:b5:f1:dc:f3:a5:27:99:d0:12:96:b3:74:
1b:c5:c7:48:17:ee:ba:1f:63:86:f6:a9:76:5b:82:
4d:72:82:a4:e7:de:e8:e5:bd:6e:c7:fb:2f:0c:55:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3C:B7:66:7E:1F:8D:60:2C:E4:F7:AE:7B:F0:24:D0:7E:EF:39:B0
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/8zy3Zn4fjWAs5Peue_Ak0H7vObA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:54:6b:8a:65:5a:04:57:be:15:9d:fc:49:7f:b9:18:7f:fa:
34:15:63:63:40:17:2e:03:05:1e:9f:48:70:72:4c:3a:1d:2d:
c4:da:96:09:04:80:3b:8e:95:61:cb:20:e7:f0:36:39:ad:a1:
b8:b6:49:d5:9e:79:01:57:1e:47:df:fc:81:9f:be:ea:b5:2a:
d3:6c:d2:6d:69:a0:1c:69:27:eb:a6:d2:4b:08:c5:10:e8:a5:
31:79:0d:d8:cd:f6:44:27:d2:04:ee:a0:c0:9c:5d:4b:44:88:
e8:3b:c4:41:e9:02:4a:20:e9:f9:5a:54:b6:11:56:a8:92:14:
79:52:b7:bc:e8:b2:a4:07:f2:c2:eb:8a:95:91:77:e4:aa:08:
37:17:36:36:d5:19:ca:3c:95:b3:ce:69:86:1d:84:0b:dc:eb:
f2:93:0e:16:45:93:68:68:cd:7f:f2:b1:db:52:02:9c:0a:64:
d6:04:5d:65:4d:40:2a:1c:f6:6d:fb:a5:17:49:03:e8:1d:37:
a5:34:45:f4:c7:15:d6:0a:13:d9:28:50:7e:af:5a:36:9c:95:
d8:f3:db:b4:56:ae:58:f0:86:da:06:43:fc:76:3e:d5:74:af:
21:b5:31:f2:96:c5:0d:e2:47:e3:b4:be:1e:37:61:8f:ae:bd:
31:6a:c8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:19:34 2025 by rpki-client