Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2802/4ST2bGFJIVQhLfshJMjA_0T1-XU.roa
File: 4ST2bGFJIVQhLfshJMjA_0T1-XU.roa (raw, json)
Hash identifier: 86DCOMm1rNU10PEiJrsqQm8yOs5+XHOXTmiCXL+l7Gs=
Subject key identifier: E1:24:F6:6C:61:49:21:54:21:2D:FB:21:24:C8:C0:FF:44:F5:F9:75
Certificate issuer: /CN=FFC0255DBE0663C1594BCEED37FA796BFDF3DD98
Certificate serial: 4410
Authority key identifier: FF:C0:25:5D:BE:06:63:C1:59:4B:CE:ED:37:FA:79:6B:FD:F3:DD:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_8AlXb4GY8FZS87tN_p5a_3z3Zg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/4ST2bGFJIVQhLfshJMjA_0T1-XU.roa
Signing time: Wed 13 Mar 2024 01:22:34 +0000
ROA not before: Wed 13 Mar 2024 01:22:34 +0000
ROA not after: Tue 17 Sep 2024 08:06:57 +0000
asID: 9392
IP address blocks: 103.122.240.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17424 (0x4410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFC0255DBE0663C1594BCEED37FA796BFDF3DD98
Validity
Not Before: Mar 13 01:22:34 2024 GMT
Not After : Sep 17 08:06:57 2024 GMT
Subject: CN=E124F66C61492154212DFB2124C8C0FF44F5F975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:f8:c9:81:ea:20:20:1d:35:75:1f:ad:bc:
1d:35:ac:cb:68:b5:59:c0:9d:24:ff:86:f2:d3:54:
68:92:0c:aa:4b:ae:d9:69:0f:31:b0:82:cf:60:63:
06:5d:12:dc:e7:39:fb:97:4a:42:43:98:9f:d3:ce:
e8:66:e1:d6:97:42:01:e2:1c:b3:11:5a:76:8c:6a:
db:3e:51:8c:d2:55:1f:3f:57:44:f3:54:31:52:04:
41:75:13:08:1b:51:47:8f:fd:eb:c2:62:91:c5:51:
c5:ff:24:10:e3:68:52:b1:f5:8d:41:54:95:f1:2e:
a3:64:19:c7:4c:5f:84:d1:4d:21:12:c3:12:95:2b:
37:0e:a5:9b:e9:86:9a:9e:27:2a:b6:94:7d:97:33:
d5:a5:dd:31:0f:f1:0c:78:ed:7f:c8:8a:91:73:1c:
47:f9:63:0a:40:6d:e3:a5:65:9e:6e:56:af:8e:1b:
f2:c9:12:f1:1d:dd:5d:a3:f9:36:4d:ac:1d:35:de:
30:f2:fa:9c:ef:d1:74:48:87:3a:cd:42:86:6f:68:
81:91:20:d6:94:f1:c3:74:a9:4d:f7:f2:94:d9:92:
a0:53:a2:e9:2e:ee:da:5e:48:e1:65:1d:2d:d6:02:
5c:aa:d3:e4:8b:ff:49:c9:79:2c:9e:fe:7e:3b:ff:
49:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:F6:6C:61:49:21:54:21:2D:FB:21:24:C8:C0:FF:44:F5:F9:75
X509v3 Authority Key Identifier:
keyid:FF:C0:25:5D:BE:06:63:C1:59:4B:CE:ED:37:FA:79:6B:FD:F3:DD:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/_8AlXb4GY8FZS87tN_p5a_3z3Zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_8AlXb4GY8FZS87tN_p5a_3z3Zg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/4ST2bGFJIVQhLfshJMjA_0T1-XU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7b:be:08:8e:50:39:6c:4f:f5:2b:9c:eb:ff:e7:9c:59:cf:
fb:3c:23:75:92:ba:26:33:21:b2:eb:d9:14:bb:13:2a:4e:be:
00:47:9a:29:80:63:43:9a:ca:7a:84:2d:39:8d:9e:a0:23:f5:
8d:09:10:fb:14:04:01:cb:05:e9:38:ec:3a:77:82:a1:7f:32:
c2:c8:e3:07:be:6b:3e:10:6e:be:4f:f7:26:20:0f:e8:ce:f3:
73:8f:ff:c4:68:44:2a:00:69:f3:6c:25:00:c0:5a:d7:5e:19:
88:bc:65:90:d6:b3:f5:bd:ff:aa:34:25:7e:75:83:dc:86:12:
16:61:eb:c2:bd:d7:90:78:c1:3a:12:a9:ea:6d:69:a1:e0:e3:
43:07:ac:bd:60:f6:a1:8f:50:91:23:d7:c9:66:fd:5d:30:00:
d0:42:01:40:8e:f8:72:5c:69:dc:52:6d:a8:80:db:3a:b1:15:
e7:66:87:00:4f:ab:b2:04:0b:ee:24:3c:9f:5e:f5:22:0b:67:
52:71:71:64:08:0c:91:57:08:a7:06:9b:cf:d2:49:fc:42:43:
e9:3a:2b:2c:5f:d4:50:f5:36:b0:bf:1f:94:f1:b8:a2:2c:cd:
1a:a6:66:1a:b8:98:86:15:55:f7:bf:40:e3:e4:0b:c1:bf:07:
58:36:c9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 09:41:17 2024 by rpki-client on console-fra.rpki-client.org