Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/rwBk-9sUQbua0LWTAEiH19YzcxU.roa
File: rwBk-9sUQbua0LWTAEiH19YzcxU.roa (raw, json)
Hash identifier: Y3OUwGAvLHC3OBtnCBETyVlyRYQjCRWMfxm74m46ycw=
Subject key identifier: AF:00:64:FB:DB:14:41:BB:9A:D0:B5:93:00:48:87:D7:D6:33:73:15
Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Certificate serial: 100D
Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/rwBk-9sUQbua0LWTAEiH19YzcxU.roa
Signing time: Fri 19 May 2023 05:53:58 +0000
ROA not before: Fri 19 May 2023 05:53:58 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 398704
IP address blocks: 103.72.120.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4109 (0x100d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Validity
Not Before: May 19 05:53:58 2023 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=AF0064FBDB1441BB9AD0B593004887D7D6337315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:ae:43:56:d4:c1:e9:07:74:25:d9:e8:28:
11:34:8e:7a:2d:e3:7a:fb:27:c6:24:1d:a0:72:9f:
4d:a7:d4:c5:4a:53:45:7e:2e:95:c7:eb:a5:83:7b:
08:dd:c4:2d:57:88:4f:2b:39:e4:78:e2:12:8e:ae:
dd:a7:ae:de:8b:7c:17:42:d6:35:ac:b6:b9:e9:05:
d9:02:d5:93:7c:43:9b:28:d6:cc:6d:3f:ab:bf:11:
2f:31:76:2b:77:6c:59:90:1d:ed:a4:a7:c0:80:e9:
c8:31:99:12:17:f0:fb:6c:c0:6a:ab:43:65:3c:f2:
6f:cd:d2:d7:6b:52:88:c9:1f:0e:76:fd:d3:5a:0c:
39:2f:f4:0e:c2:5f:02:3d:21:fe:ae:c7:60:54:71:
63:39:08:2e:7b:a2:44:f1:69:16:57:f2:15:37:33:
61:3f:59:09:df:c1:d0:f8:29:5c:30:a9:d5:73:f9:
c0:61:b2:8f:34:47:c9:66:1d:2e:16:1f:7c:6d:3d:
a1:66:9e:8f:c4:75:ae:3e:91:4b:36:0f:3e:e8:6d:
1e:ac:30:72:79:19:93:2e:e7:2e:60:e4:9e:ad:a6:
d6:9a:9c:7d:66:fc:a8:56:cf:d0:60:e2:35:99:14:
b4:e8:15:87:a6:ec:bd:65:a5:92:93:d0:ca:b3:41:
d8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:64:FB:DB:14:41:BB:9A:D0:B5:93:00:48:87:D7:D6:33:73:15
X509v3 Authority Key Identifier:
keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/rwBk-9sUQbua0LWTAEiH19YzcxU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:da:82:e3:6c:75:47:c0:a9:48:4a:af:b6:16:86:34:f7:17:
1a:68:fe:57:0c:3b:5f:82:d6:ea:40:a0:03:60:f5:2e:4a:ad:
7a:e9:25:50:82:4b:f1:42:42:f5:60:2e:54:3f:70:e7:a3:c0:
98:69:64:3b:d4:ad:0b:f6:08:64:d4:5b:18:5b:8d:1d:60:b4:
3c:72:31:ec:59:9d:de:f5:e7:2a:9c:b1:ed:1d:d1:9d:f5:bc:
e1:7a:f6:db:36:0f:26:25:9f:3c:a6:f4:1e:48:31:2f:57:dd:
f3:79:63:cb:ff:fe:c4:7e:bd:1a:6e:6a:d8:25:e5:df:a8:b1:
6f:81:41:a4:9c:9d:e1:24:2f:02:a8:8b:e8:42:49:db:67:00:
77:a3:6a:53:5a:e1:8c:c8:2e:c0:9c:61:0f:0a:0f:4d:1b:47:
08:11:9d:03:c5:45:dd:93:54:f1:72:0d:dc:53:8e:6f:e2:3f:
15:4d:0a:94:72:c6:3b:65:07:f7:d0:12:e7:b2:ae:e5:37:de:
2c:8e:b1:c3:50:96:5e:2e:aa:92:a0:f1:2e:06:ce:bf:c7:cf:
30:35:f3:9f:89:3a:2a:6e:be:1b:6b:7d:5a:99:b3:3e:e2:73:
5b:f8:c2:be:f0:63:b7:25:e8:17:dc:ae:f8:07:5b:e1:95:f3:
25:81:59:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 04:28:29 2023 by rpki-client on console-fra.rpki-client.org