Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/fqhuozlBrtff98veExy-YwUrTw0.roa
File: fqhuozlBrtff98veExy-YwUrTw0.roa (raw, json)
Hash identifier: SoW5KqNHxhcvKBUoWhDGCxvWss3O5ILfwqepBJsOlPk=
Subject key identifier: 7E:A8:6E:A3:39:41:AE:D7:DF:F7:CB:DE:13:1C:BE:63:05:2B:4F:0D
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0663
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/fqhuozlBrtff98veExy-YwUrTw0.roa
Signing time: Tue 04 Mar 2025 07:59:56 +0000
ROA not before: Tue 04 Mar 2025 07:59:56 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7641
IP address blocks: 211.146.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1635 (0x663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: Mar 4 07:59:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7EA86EA33941AED7DFF7CBDE131CBE63052B4F0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:3c:25:b1:1f:ae:b5:53:59:cc:4d:37:05:
23:99:63:3a:cc:9f:83:69:28:0a:bc:96:b9:ef:61:
5e:5c:12:c3:6b:92:8d:d3:f4:1a:48:cf:d2:fb:74:
bd:d5:e7:df:f0:12:fa:d9:88:ca:98:ee:4d:ab:44:
2c:86:62:71:bf:7a:88:83:a3:20:0a:1d:ed:03:b9:
c4:da:00:56:5b:17:7e:d2:f0:57:09:a0:07:f8:89:
41:de:85:73:4f:bf:76:4b:ec:8d:e0:c6:38:2b:73:
75:e8:68:4b:13:a7:b3:cd:b2:04:7b:a3:56:25:f3:
65:97:a4:52:2b:64:fb:f8:a4:29:72:7e:49:75:07:
23:2e:c2:73:80:07:7b:7e:87:31:5c:18:7a:de:4b:
d8:5f:c3:d9:51:14:56:63:3f:5d:b7:1f:7e:e2:be:
7f:85:3f:2e:ab:7d:b3:ce:ac:dd:82:1e:d9:33:64:
05:54:19:74:59:ec:a2:e3:c6:bf:07:3a:04:d5:0e:
4b:df:10:8b:89:39:75:fe:6e:ff:25:e9:ef:f7:18:
56:7a:78:2c:06:7b:46:6e:04:96:9c:69:1d:c1:c9:
c7:c8:8e:48:bc:6f:8c:4e:cf:ab:85:13:d5:d2:66:
89:e3:cf:d5:be:67:ca:f8:0f:21:b5:f8:50:d6:9d:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A8:6E:A3:39:41:AE:D7:DF:F7:CB:DE:13:1C:BE:63:05:2B:4F:0D
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/fqhuozlBrtff98veExy-YwUrTw0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.146.20.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:0b:0f:1b:25:38:95:4f:5c:cf:90:b4:2c:77:d2:3a:09:1e:
e5:e2:32:f7:b2:f6:6c:86:5f:b4:f8:e9:45:0f:1d:1f:de:24:
14:90:d5:b8:5d:8a:d4:19:f9:9a:69:c9:7f:7d:55:86:05:8d:
56:5a:00:c9:39:f7:c3:74:b1:b2:cf:1e:ed:34:fc:81:98:bf:
ac:bf:0f:01:83:74:a4:76:84:42:74:70:c3:c9:e0:f2:41:65:
f1:e2:50:96:7d:51:9f:54:92:d7:09:07:e7:e1:94:8b:5b:ac:
52:40:25:fe:a7:be:6f:a1:8c:80:f9:d9:8a:86:ea:fb:aa:ba:
bc:e9:9a:4b:d1:8f:1a:6f:59:46:58:80:49:cb:dd:58:03:cd:
58:46:f3:95:97:fd:e8:1f:29:e0:e1:2e:64:7f:e6:ab:72:8e:
8d:2a:74:62:00:af:2d:3c:96:38:72:c1:ce:ab:c3:0a:97:cc:
f5:0a:ed:c9:31:60:7b:e3:b2:59:7e:a2:cd:14:85:46:52:63:
4e:85:c7:88:c6:be:62:5c:8c:08:38:37:f1:00:11:84:c6:f1:
e6:f4:f7:00:98:27:4f:b4:e5:cb:27:7a:14:21:ed:09:42:56:
e4:e0:43:bd:7a:bb:c9:0d:85:56:d8:e9:49:48:1d:90:c8:5e:
ce:cc:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:46 2025 by rpki-client on console.sobornost.net