Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/dehnZT7WynVSuqPgVPT60NPmYfI.roa
File: dehnZT7WynVSuqPgVPT60NPmYfI.roa (raw, json)
Hash identifier: GkKex5KucznCpBFxilb40uDJY+DsjPVXxtCtghruIoU=
Subject key identifier: 75:E8:67:65:3E:D6:CA:75:52:BA:A3:E0:54:F4:FA:D0:D3:E6:61:F2
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 7A
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/dehnZT7WynVSuqPgVPT60NPmYfI.roa
Signing time: Wed 23 Apr 2025 14:50:22 +0000
ROA not before: Wed 23 Apr 2025 14:50:22 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 208242
IP address blocks: 45.248.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 23 14:50:22 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=75E867653ED6CA7552BAA3E054F4FAD0D3E661F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:44:eb:5e:8a:46:27:d8:bc:0b:54:a2:b5:
57:c0:a9:07:14:35:d2:f8:0f:d3:9b:65:21:54:b3:
eb:57:dd:a8:d1:06:18:82:97:94:ac:1c:92:3b:87:
04:73:a6:10:1b:82:4d:a3:31:88:11:95:ac:bf:11:
15:5c:ff:dd:91:08:f1:51:34:2a:bb:66:f2:28:e8:
16:70:40:ec:d8:d9:28:9e:f2:df:1e:1f:a3:64:9c:
62:f7:3c:f7:6a:91:1c:b8:7c:83:46:d0:f3:87:e5:
a0:7e:b0:70:f6:ec:c4:7a:97:36:ce:fd:42:98:ba:
39:0b:ca:8a:2c:4d:20:b5:34:f2:b1:81:1a:9f:b7:
d6:c3:6e:83:8b:c4:0c:6f:ba:8d:c9:80:d8:36:15:
1d:e1:b6:68:0d:17:74:87:02:a8:c5:bd:09:b9:d6:
45:11:53:32:56:1f:c2:3f:97:39:55:5d:d9:3c:fb:
44:67:04:10:12:d8:b9:50:37:0c:16:02:36:29:56:
8a:0c:83:11:5b:ec:1f:55:34:96:32:37:16:42:f7:
d0:64:a7:2a:fb:de:cc:53:f2:86:1b:4f:34:ba:ba:
59:ca:86:86:2f:92:e0:eb:dc:88:7e:64:87:28:81:
e9:7f:ee:e8:fe:0f:07:61:d0:71:39:4c:66:ca:fa:
08:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E8:67:65:3E:D6:CA:75:52:BA:A3:E0:54:F4:FA:D0:D3:E6:61:F2
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/dehnZT7WynVSuqPgVPT60NPmYfI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.88.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:72:70:83:c1:cf:d3:ed:57:74:9a:57:fe:c0:f8:3e:65:26:
a4:c2:83:52:60:ab:db:cd:82:07:a7:b5:22:a7:b7:18:44:85:
93:7b:46:2d:5a:74:2a:2d:d5:04:e6:06:76:18:58:96:cb:05:
1d:e1:b2:2b:0b:0a:63:17:a0:97:52:c6:2d:03:1b:a0:42:5f:
c5:20:72:81:37:03:2d:4a:e2:0a:a6:0a:d1:ad:48:ef:9f:53:
72:de:67:04:f5:a5:fb:fe:2f:13:b3:4d:ad:23:f2:b5:7b:0d:
9d:e4:12:7a:0e:1c:b7:a4:cf:d5:03:42:c4:6d:cb:af:9a:48:
ee:89:93:05:a5:88:94:20:16:ce:02:d2:ed:ee:61:28:49:15:
33:cd:9e:bb:12:10:92:02:ef:1e:5d:28:c3:84:7f:c0:df:10:
c3:e6:7e:9a:9d:bf:ab:8a:c9:29:66:0a:ab:ba:47:db:b8:fb:
9c:97:b2:05:80:db:6b:a0:0c:88:df:76:e5:c3:67:6e:71:bc:
e7:da:92:ac:f8:1c:d2:08:4f:b3:a1:aa:51:f6:77:ee:b6:1e:
a9:26:a7:cd:6b:92:44:d8:c2:41:3c:63:50:6d:05:32:1b:22:
84:34:84:12:c7:34:e9:e5:68:41:93:bc:c0:40:c4:fd:62:bb:
6c:13:b8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:19:36 2025 by rpki-client