Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/EBI2EnToujdksVDaPlfdzoJrB00.roa
File: EBI2EnToujdksVDaPlfdzoJrB00.roa (raw, json)
Hash identifier: kWcCwUtcFXv4o8hm0xyI77dis8JGRBeeNcBaPcyu19I=
Subject key identifier: 10:12:36:12:74:E8:BA:37:64:B1:50:DA:3E:57:DD:CE:82:6B:07:4D
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 23B7
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/EBI2EnToujdksVDaPlfdzoJrB00.roa
Signing time: Mon 09 Jun 2025 05:08:59 +0000
ROA not before: Mon 09 Jun 2025 05:08:59 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9143 (0x23b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 9 05:08:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1012361274E8BA3764B150DA3E57DDCE826B074D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:ce:25:69:5d:6b:81:80:d0:a1:9a:da:0e:
0b:dc:0b:39:a8:68:a9:f9:04:97:bf:6b:e0:2b:1e:
a0:95:74:c5:72:00:d8:c1:8d:d2:ae:80:17:b9:91:
18:ae:68:9d:ff:1c:89:f7:11:50:21:59:50:2f:14:
7e:38:bb:96:b8:f0:24:e6:63:9c:fb:39:c8:bb:69:
55:43:70:e8:dd:d9:7e:40:4c:52:33:b5:f9:1b:0a:
d8:de:e5:99:9d:19:b6:14:a8:61:81:90:8a:d1:e5:
ce:c2:52:a9:3e:e8:7e:df:d9:1c:90:14:8c:15:07:
4f:0e:2f:ec:44:76:93:21:9f:48:1c:ca:4b:15:e0:
b4:4b:5c:42:8d:1b:6a:7c:61:b4:7e:3b:cc:d6:51:
35:18:d1:e9:ef:52:29:a9:1e:5e:d4:fd:7a:f0:a8:
4b:d4:f3:5d:87:c7:71:9b:66:5b:2e:57:a3:c8:7c:
9f:71:ff:36:1c:f3:bd:7e:a2:ba:af:ed:05:9b:e0:
81:65:0d:37:e9:6d:17:4a:73:55:f9:fe:68:72:5a:
8f:2d:2e:70:76:a3:cc:89:ae:99:b5:0d:87:a2:1c:
0f:7e:5c:02:d8:3a:7d:b7:7e:c4:53:14:ad:b7:b6:
e5:b9:5f:cc:e1:22:d0:9a:66:4d:72:20:92:0b:04:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:12:36:12:74:E8:BA:37:64:B1:50:DA:3E:57:DD:CE:82:6B:07:4D
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/EBI2EnToujdksVDaPlfdzoJrB00.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
a4:5c:3e:48:4f:be:6b:9f:fe:3c:52:28:e6:11:1c:32:d1:1d:
44:11:ff:5f:66:b7:6d:74:b6:e7:ff:33:c2:76:52:48:fb:4a:
61:30:f5:ee:d4:c7:69:47:1b:be:38:92:df:30:9a:eb:b2:2b:
ca:cc:6c:89:98:a1:fe:b0:92:fe:e2:27:8e:b2:82:3b:ec:4e:
f3:08:04:8a:c3:27:28:7e:a0:3d:05:a3:36:75:7b:71:f7:8d:
f4:e5:8b:e6:36:d9:0e:03:4d:86:b1:05:4b:4f:32:21:0c:99:
96:ca:2d:fa:09:e4:77:2c:45:e9:b9:71:63:c3:2b:69:32:26:
48:26:86:12:bb:6e:aa:23:fb:8a:4f:27:2b:f7:70:98:74:70:
9e:44:ea:57:31:f0:d1:5c:2f:64:54:d4:fa:99:fc:e5:e6:6b:
92:34:8d:5d:9f:e2:6d:4e:05:d8:03:ad:0e:ac:1d:37:70:32:
5e:07:b0:a9:38:1f:cf:96:21:74:d1:48:0b:59:b1:65:a2:76:
9f:e9:d6:eb:ae:4f:cb:5e:c4:4c:7a:6f:e2:b8:a2:df:7b:3e:
67:58:72:b2:7c:52:b2:6f:60:a2:be:f4:86:89:3b:b9:a8:d5:
7c:4f:ec:bc:73:4c:0f:e5:47:3a:29:d6:28:ae:82:a4:9d:25:
db:4c:ba:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:46:09 2025 by rpki-client