Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/g6dvdPPpijOkcmRmRTZnT-y14Tk.roa
File: g6dvdPPpijOkcmRmRTZnT-y14Tk.roa (raw, json)
Hash identifier: CB2d6yyYQRrRoAdL2nEn/Kl5Yw9asCUF8Gr2w7kfsrs=
Subject key identifier: 83:A7:6F:74:F3:E9:8A:33:A4:72:64:66:45:36:67:4F:EC:B5:E1:39
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/g6dvdPPpijOkcmRmRTZnT-y14Tk.roa
Signing time: Wed 09 Apr 2025 07:08:24 +0000
ROA not before: Wed 09 Apr 2025 07:08:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Apr 9 07:08:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=83A76F74F3E98A33A47264664536674FECB5E139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:ed:a3:08:ff:37:40:8f:8e:dd:04:26:68:
ac:96:9f:c2:df:62:ed:52:97:92:69:41:f0:da:3b:
51:0c:f0:53:fc:c2:a1:fa:ec:8f:2f:7f:42:23:6f:
f0:a5:28:cd:10:34:7f:58:6e:c8:29:4b:57:90:1c:
49:44:b2:56:35:d5:55:14:d3:80:75:8e:eb:49:bf:
6a:47:f0:e6:6e:4e:ec:e7:d1:f3:e1:64:1e:51:b7:
f1:84:f9:4c:63:f5:10:cb:34:f5:b6:96:6e:e0:cc:
a6:c4:7a:ed:6f:69:5e:21:71:c6:88:a2:a1:17:18:
3b:c8:cb:ea:b3:63:62:d1:f0:23:0d:d5:91:5a:48:
33:ce:0b:71:e9:db:9f:24:17:4b:0a:7a:3a:06:12:
71:bc:01:b6:be:42:a4:2d:8e:d4:23:cc:1c:17:f5:
0e:38:72:c3:25:3c:09:3c:3d:4c:a3:45:3c:f8:e1:
ca:8e:e3:19:d2:43:0d:f5:5b:19:12:d5:34:4f:0b:
a1:2a:56:00:04:08:d0:45:1e:87:e4:55:13:30:79:
b8:fc:0b:f5:c6:df:5b:df:21:05:8b:15:fb:1e:50:
6c:c1:e3:eb:6d:54:7d:cd:c2:96:53:b2:3b:40:7f:
47:95:7d:fd:99:9d:ef:33:07:b9:13:81:7f:65:29:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A7:6F:74:F3:E9:8A:33:A4:72:64:66:45:36:67:4F:EC:B5:E1:39
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/g6dvdPPpijOkcmRmRTZnT-y14Tk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:7d:09:9a:bc:94:d8:ee:5d:6a:90:75:db:55:73:0e:72:84:
d8:92:30:c8:ec:59:65:ad:5b:0e:6e:a6:21:05:da:ff:d4:39:
bc:d8:c8:31:8f:0e:b9:70:24:45:a7:ae:4a:b1:50:7e:3f:77:
0e:5f:6a:91:8b:7f:6c:99:b6:cc:c7:cd:e8:a5:4e:ae:2d:53:
f4:26:e3:ae:f9:df:f6:9f:7a:ec:fe:4a:8d:15:6d:88:c4:ff:
e6:3a:be:05:87:76:c4:bb:5c:2b:6a:df:62:99:2e:b3:be:65:
c7:91:52:01:b0:ca:c3:2f:1d:8e:c4:8f:9a:73:93:20:36:f5:
32:13:15:4d:2a:e8:68:55:a1:ba:76:1f:c4:fc:20:db:f0:73:
eb:b4:47:70:e0:a6:52:04:49:f0:f0:d1:19:14:5e:80:29:05:
62:54:cb:1b:a1:8f:6a:d4:e6:24:6a:7d:f5:d8:01:c9:c5:7b:
db:2f:ac:05:a3:b9:fe:04:d6:d9:db:7d:d5:b5:d6:65:12:2f:
66:bb:67:c2:32:ec:4c:2b:55:44:65:3d:e0:1c:0f:c3:0e:52:
d6:2a:5f:fd:e3:fe:58:26:5f:a2:d9:cf:8d:14:95:ba:b1:6c:
bc:f6:a0:9b:df:2e:e0:94:aa:9b:1a:71:3c:b5:e4:96:f9:59:
ac:eb:b1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:10:50 2025 by rpki-client