Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/YyhKthcstRYuxEk3vjZ1r9l9QLU.roa
File: YyhKthcstRYuxEk3vjZ1r9l9QLU.roa (raw, json)
Hash identifier: q/lDyBbaaNfLnxkYm+vwzCtroSsOL+Bif2m9eBvik+0=
Subject key identifier: 63:28:4A:B6:17:2C:B5:16:2E:C4:49:37:BE:36:75:AF:D9:7D:40:B5
Certificate issuer: /CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Certificate serial: 0B29
Authority key identifier: DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/YyhKthcstRYuxEk3vjZ1r9l9QLU.roa
Signing time: Wed 09 Apr 2025 06:48:13 +0000
ROA not before: Wed 09 Apr 2025 06:48:13 +0000
ROA not after: Thu 09 Apr 2026 06:41:00 +0000
asID: 63567
IP address blocks: 43.248.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2857 (0xb29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Validity
Not Before: Apr 9 06:48:13 2025 GMT
Not After : Apr 9 06:41:00 2026 GMT
Subject: CN=63284AB6172CB5162EC44937BE3675AFD97D40B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:49:37:d5:d3:0d:18:58:ad:39:07:61:4e:
20:e8:ad:15:63:e2:a7:8a:7b:04:cb:28:e7:1d:61:
c3:5f:e6:23:3c:fc:9a:aa:75:f2:be:da:9d:3d:e3:
73:b4:23:ff:03:11:46:34:bf:67:27:3a:57:97:d3:
02:3b:2c:13:44:4a:58:3c:d2:42:79:46:d5:78:c1:
23:0a:9b:4c:b9:76:1b:35:46:7f:d1:0d:ac:15:d7:
4a:de:c5:d0:d1:3a:c3:71:db:77:fe:37:36:e3:21:
1d:4a:fd:09:ee:37:c9:be:13:ea:0c:40:53:fc:e6:
2f:f8:ef:03:a4:e5:57:16:e7:7c:be:b2:fc:96:d4:
73:14:21:8d:a4:96:ae:96:13:a5:5e:cc:b6:b2:d9:
99:57:df:33:45:97:4f:ae:d9:55:cd:f7:4f:d0:a3:
da:42:67:08:66:64:d4:30:b1:7f:c5:72:bb:45:27:
75:0a:1e:94:c4:76:ff:74:24:c7:90:9f:b2:19:aa:
e3:95:b2:82:76:d3:86:46:bc:0d:36:2f:e9:26:a3:
6a:6d:7e:ee:ca:d3:27:0f:03:af:de:a9:3f:99:d5:
7a:5f:11:9b:9e:0e:10:fc:b8:72:ae:2d:82:c8:4b:
ae:b1:83:c8:e7:c2:2b:28:2f:74:ac:1b:47:18:26:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:28:4A:B6:17:2C:B5:16:2E:C4:49:37:BE:36:75:AF:D9:7D:40:B5
X509v3 Authority Key Identifier:
keyid:DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/YyhKthcstRYuxEk3vjZ1r9l9QLU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.80.0/20
Signature Algorithm: sha256WithRSAEncryption
60:aa:07:95:08:52:ee:14:9a:9e:22:e8:e5:c6:3c:7d:fd:bf:
22:05:d6:ae:30:99:b7:01:13:53:0d:75:4c:0e:49:92:bf:94:
7e:8e:26:d3:60:ba:d6:0d:fc:0b:4f:01:3e:89:53:6d:4a:1c:
bb:73:4e:9c:84:8b:03:3b:4d:f7:5e:10:bc:c7:f4:02:ae:5d:
91:a7:c8:38:d3:af:10:6d:e6:54:f9:5a:49:df:08:6c:d9:90:
1b:b6:0e:8b:4c:57:af:03:0a:eb:bd:19:45:16:31:5f:a7:58:
19:92:f9:76:0b:b0:a0:fd:e1:39:76:57:42:30:00:c5:b5:52:
e0:9c:4a:8b:86:d6:e1:7c:e8:23:20:63:d5:30:ab:e6:9a:ac:
e4:14:c8:e6:cf:03:64:eb:ca:5f:e5:15:8d:e3:e1:a2:db:4e:
ec:13:15:e7:ef:4f:c9:1d:d7:68:3e:bd:c1:09:22:96:0a:a9:
56:26:be:23:72:d0:22:60:f7:a1:3d:dc:e5:2c:cd:2c:b7:81:
87:8b:f0:5e:f7:f3:84:df:b0:94:c1:1f:98:0a:04:35:26:39:
41:84:26:69:e7:1e:37:b4:4c:fd:26:a6:6f:ed:f0:b5:bb:fb:
e1:50:53:f3:f5:4f:b6:8b:4b:4e:fa:61:57:18:91:32:67:14:
21:78:b3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:50 2025 by rpki-client on console.sobornost.net