Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/FdrWyT1YrzA6KtI60aLydyXlpW4.roa
File: FdrWyT1YrzA6KtI60aLydyXlpW4.roa (raw, json)
Hash identifier: AfdUtKvB7ygfZlLYVJPryTZpg0dREpJlAwQes5Y9L8w=
Subject key identifier: 15:DA:D6:C9:3D:58:AF:30:3A:2A:D2:3A:D1:A2:F2:77:25:E5:A5:6E
Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial: 11ED
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/FdrWyT1YrzA6KtI60aLydyXlpW4.roa
Signing time: Sat 26 Apr 2025 13:19:06 +0000
ROA not before: Sat 26 Apr 2025 13:19:06 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 23853
IP address blocks: 211.147.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4589 (0x11ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Validity
Not Before: Apr 26 13:19:06 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=15DAD6C93D58AF303A2AD23AD1A2F27725E5A56E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:41:e2:bb:99:2c:e7:80:a9:15:85:c1:ef:
96:eb:3b:a3:3e:f7:74:46:0d:30:9d:fd:31:30:72:
e2:e1:c1:11:6a:89:45:fc:d5:4b:f7:af:9e:72:8e:
9f:17:45:6a:de:66:27:21:b7:bc:c0:bc:f0:e6:8a:
54:76:2f:37:3d:ba:f7:9f:ad:3e:e3:a7:39:e9:4b:
f6:ea:b8:cf:79:0c:70:63:dd:cc:d8:8c:78:fb:35:
fc:c2:e9:9e:30:d6:6c:84:54:28:e0:99:8c:6a:06:
90:94:c8:02:0c:6c:cf:04:26:2f:ee:74:7c:74:64:
67:98:64:96:11:a0:5b:60:b5:65:f6:c6:bd:ac:37:
39:fd:50:a4:29:f8:ee:51:99:ed:e5:dd:bc:fb:6f:
73:32:d6:1c:ba:4b:83:27:46:06:52:21:56:fa:c1:
a1:e1:6c:e3:14:48:58:23:57:ea:76:7e:07:1a:4f:
31:44:cc:82:66:e2:a2:7f:6e:99:97:34:bf:b3:38:
0c:3d:f5:a0:54:f9:6a:f3:3e:dd:53:26:4c:5e:fd:
72:e5:78:73:8e:a7:a0:c8:d3:47:12:f7:6f:7c:2c:
61:56:1a:ef:b2:48:4a:26:19:32:cb:04:6a:45:c1:
de:b3:12:76:56:8b:8e:24:5e:61:d3:d0:e0:b5:af:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DA:D6:C9:3D:58:AF:30:3A:2A:D2:3A:D1:A2:F2:77:25:E5:A5:6E
X509v3 Authority Key Identifier:
keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/FdrWyT1YrzA6KtI60aLydyXlpW4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.147.64.0/20
Signature Algorithm: sha256WithRSAEncryption
57:7b:63:f7:bf:e3:b3:97:20:b1:c1:f2:5f:9f:8c:0d:3f:3b:
bd:88:0c:9a:1a:f7:27:7a:cc:1c:84:eb:65:a2:37:83:ea:b2:
5f:e5:96:d7:ba:b9:07:09:41:2b:3b:77:8c:ad:11:e1:f8:71:
e0:bb:77:ba:b4:53:56:4d:ee:4b:1b:2c:e9:b7:e2:be:ab:1a:
ea:9a:35:6e:45:c2:eb:eb:3d:28:65:48:5a:7d:6d:a8:96:38:
52:47:28:13:55:90:3d:33:69:e7:03:20:78:18:06:af:38:cb:
30:03:d0:c5:08:e8:a8:ae:60:d9:b2:38:80:24:97:4a:40:de:
d4:d6:c3:89:96:4c:be:a4:43:78:11:8e:f7:58:27:01:a1:38:
fd:1d:29:31:ff:48:f1:01:65:2d:bc:08:54:0a:21:8a:d2:31:
03:f2:90:2e:31:7f:e8:27:09:87:4e:a9:ab:f4:a2:94:4b:c4:
c2:e0:41:1a:3a:c5:7b:4e:27:88:ce:7c:d4:39:cf:a9:d0:df:
e0:05:05:bb:66:ea:97:09:19:6b:3f:35:21:13:cd:ef:dd:cb:
6e:7c:c4:cb:64:18:48:e3:12:7f:69:f0:41:21:07:d3:b9:ca:
a5:d1:5b:0b:f4:8e:2d:8a:24:1c:e6:56:9a:e3:80:1c:86:40:
a3:fa:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:49 2025 by rpki-client on console.sobornost.net