Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/T1qJkMelAH5BDDXM2O_7G3hQtek.roa
File: T1qJkMelAH5BDDXM2O_7G3hQtek.roa (raw, json)
Hash identifier: 6Dgu5HFLUyjuGDgvq7uDKM/uTcIWm6vVC7Nt5rbPCSs=
Subject key identifier: 4F:5A:89:90:C7:A5:00:7E:41:0C:35:CC:D8:EF:FB:1B:78:50:B5:E9
Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial: 11EC
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/T1qJkMelAH5BDDXM2O_7G3hQtek.roa
Signing time: Sat 26 Apr 2025 13:19:05 +0000
ROA not before: Sat 26 Apr 2025 13:19:05 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 23853
IP address blocks: 211.147.92.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4588 (0x11ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Validity
Not Before: Apr 26 13:19:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4F5A8990C7A5007E410C35CCD8EFFB1B7850B5E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:90:ce:22:70:f8:49:40:18:73:38:c0:1a:
4b:e0:63:4f:09:59:10:29:7e:e7:cb:97:f6:78:8e:
83:db:e6:0d:5e:52:6c:57:bc:5d:6f:5c:fb:31:97:
2b:0a:56:ad:4c:54:76:53:d9:75:11:f2:6d:9d:18:
51:fe:11:44:15:a9:30:8d:03:c0:31:62:55:66:90:
eb:fd:de:77:6e:5b:fd:24:4b:74:71:82:92:b3:93:
12:b3:11:05:5a:0a:c7:a0:c2:ad:00:d4:ce:83:b8:
4f:e5:24:0b:3d:70:b1:39:52:cf:d9:4d:bd:32:87:
58:1d:9b:8a:f2:86:29:d7:65:1b:57:cb:f7:a1:1c:
a1:2c:b1:b3:91:21:39:0d:ca:e4:86:d9:c6:ea:d6:
a0:1d:0f:48:64:7f:1e:97:4b:c0:78:d7:48:c2:79:
28:ff:b1:01:fb:bd:82:65:ab:0e:e8:eb:e5:6f:aa:
c6:21:4a:98:e8:28:fc:07:d2:bd:86:b4:86:b1:51:
5d:10:a3:36:15:fc:94:09:d1:94:c0:94:30:4d:a9:
6e:d7:a0:f0:a1:9c:a4:fe:a9:ee:d8:4b:f5:cf:d5:
54:be:91:a0:3f:e7:fe:b5:48:5a:da:e5:c6:29:d7:
4f:61:cb:df:0a:ac:a6:df:93:b9:6e:d1:d5:eb:19:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5A:89:90:C7:A5:00:7E:41:0C:35:CC:D8:EF:FB:1B:78:50:B5:E9
X509v3 Authority Key Identifier:
keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/T1qJkMelAH5BDDXM2O_7G3hQtek.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.147.92.0/24
Signature Algorithm: sha256WithRSAEncryption
de:fe:fc:cb:7b:e0:02:63:1a:7d:b4:1a:6c:f5:44:ae:01:de:
8b:1a:fa:93:3f:4f:16:d2:32:31:d4:91:5e:c6:8b:48:00:d8:
6d:aa:4b:83:0a:04:4d:78:d8:0d:6c:d9:9b:91:e5:2a:eb:9a:
aa:89:ea:ec:16:70:95:3a:7d:61:e0:c7:65:8e:fc:47:1c:91:
a6:d8:f6:83:66:8b:4e:8a:a1:82:d4:d5:24:b7:4b:05:e4:08:
46:53:f5:81:c0:a0:fb:d7:5e:f2:96:bb:29:12:f4:e3:f4:17:
f3:af:59:f4:7b:dd:43:d0:3e:cb:03:3f:48:08:95:e6:4d:0a:
32:38:23:86:1e:d7:82:0e:e1:96:1c:8d:9b:e7:a7:b1:6e:37:
78:a7:78:79:61:ab:3f:90:15:ed:a3:e7:4e:a8:89:f7:13:fc:
ee:36:cf:4a:25:68:e5:1d:1e:17:10:c0:5d:05:c7:dd:0e:e5:
9e:6c:75:0b:bc:6b:ec:9d:84:e7:43:10:e1:de:6d:14:f1:0c:
43:f2:0f:a0:a8:7f:8d:35:51:9a:f6:53:e3:6a:f0:26:0a:23:
31:8d:83:4a:74:5f:ba:b8:73:38:9e:98:e8:2e:a9:44:cb:ca:
76:a7:f0:8e:37:51:60:1f:91:9d:da:48:9f:f5:af:7f:7c:9c:
2f:09:24:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:49 2025 by rpki-client on console.sobornost.net