Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/Zf0KaO2lvAqTZzRNnzm_99ii-aI.roa
File: Zf0KaO2lvAqTZzRNnzm_99ii-aI.roa (raw, json)
Hash identifier: Rt65UKUI1MIChaQ4kid1nM0Cmb+I+LuUZ5rVsZCJ5zk=
Subject key identifier: 65:FD:0A:68:ED:A5:BC:0A:93:67:34:4D:9F:39:BF:F7:D8:A2:F9:A2
Certificate issuer: /CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Certificate serial: 17C0
Authority key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/Zf0KaO2lvAqTZzRNnzm_99ii-aI.roa
Signing time: Tue 24 Sep 2024 00:18:53 +0000
ROA not before: Tue 24 Sep 2024 00:18:53 +0000
ROA not after: Sat 20 Sep 2025 07:41:26 +0000
asID: 136958
IP address blocks: 43.255.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6080 (0x17c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Validity
Not Before: Sep 24 00:18:53 2024 GMT
Not After : Sep 20 07:41:26 2025 GMT
Subject: CN=65FD0A68EDA5BC0A9367344D9F39BFF7D8A2F9A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ed:6a:16:eb:22:70:42:88:4f:29:49:75:14:
41:e3:e8:71:8b:be:70:de:97:1d:19:77:7b:7c:cd:
51:5f:88:3f:08:4d:ce:37:99:4c:cb:eb:11:bd:26:
9d:41:26:06:c0:ef:36:19:ca:8f:16:d8:1b:bd:8f:
f4:a6:96:19:72:9a:0b:32:be:d2:1a:38:1e:ab:ba:
58:6c:e9:8d:e5:5a:d3:fe:b6:df:31:02:bf:9f:1f:
bb:ac:c6:b5:b1:ad:48:fe:46:44:8c:3f:de:a3:07:
53:89:35:75:b7:73:bd:91:1f:71:1e:00:5d:e8:e6:
22:44:31:39:92:c4:f0:4f:be:33:3b:ee:9e:f1:ee:
93:44:79:61:d4:d4:65:5d:3b:33:30:62:0f:8a:93:
66:d2:30:02:28:c9:f8:94:3d:c5:37:0a:49:4b:55:
30:66:16:1a:48:e9:d5:05:d7:36:2c:b9:7e:c3:5a:
63:85:a8:af:75:7a:ae:b1:a6:fd:8e:0e:b3:04:d4:
85:e9:35:d9:56:2f:77:6a:75:f3:59:a5:b5:dd:99:
a4:35:3d:0a:df:e8:76:b0:ff:f1:3d:61:41:4a:11:
4f:b3:05:4d:42:e7:08:ce:55:e1:6a:44:69:3e:63:
8a:1e:0c:8f:4b:be:be:d2:6d:c5:74:28:af:ea:54:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FD:0A:68:ED:A5:BC:0A:93:67:34:4D:9F:39:BF:F7:D8:A2:F9:A2
X509v3 Authority Key Identifier:
keyid:EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/Zf0KaO2lvAqTZzRNnzm_99ii-aI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.212.0/22
Signature Algorithm: sha256WithRSAEncryption
62:1f:40:d4:ea:b6:43:1c:60:73:e9:52:74:ee:03:eb:a9:30:
1f:72:47:17:95:2f:6c:a1:ba:b5:09:a2:ea:25:01:d1:bd:fa:
29:c8:73:56:c9:8c:86:80:40:1f:c7:99:2b:49:b5:18:4e:51:
31:21:70:6a:9e:a5:f8:89:75:84:a6:a0:7c:a3:29:f5:5f:55:
d5:1f:27:64:5b:9f:e8:78:b4:1c:fb:d5:35:13:b0:68:be:70:
16:73:47:64:0e:31:d1:ae:ba:32:9d:bd:7f:5c:0a:6c:8a:f6:
e9:2b:13:9d:28:c8:c0:71:83:81:e6:d7:04:cc:58:bd:a9:53:
91:ce:66:66:f9:8d:2f:a9:3f:38:77:16:8c:c3:8c:ac:46:5c:
85:c0:56:ca:38:93:d9:27:ab:33:c7:0c:03:81:ae:67:0b:57:
70:5f:11:ff:97:92:c7:b0:4f:e7:fa:d5:49:7a:64:62:ab:7b:
6a:cc:d6:1c:03:d9:3e:7e:14:8c:7a:23:ab:80:fe:22:27:e9:
8b:68:6e:9a:9d:32:15:3f:d8:ea:39:d5:3a:8d:b5:ea:c5:cd:
b4:61:c3:bf:2b:b4:fa:b9:2b:24:cc:70:41:90:db:3c:f0:25:
e9:47:47:df:86:b8:de:34:04:2f:53:d0:6f:d6:3a:40:8d:16:
06:dc:57:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:26:31 2025 by rpki-client