Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2802/ErRi9eKAUzDw-L5ljbYQxPTuU7s.roa
File: ErRi9eKAUzDw-L5ljbYQxPTuU7s.roa (raw, json)
Hash identifier: V+H7EpkHA8F2PTs5fNEe+CEdTJHafQvfpMYgSb+LT9A=
Subject key identifier: 12:B4:62:F5:E2:80:53:30:F0:F8:BE:65:8D:B6:10:C4:F4:EE:53:BB
Certificate issuer: /CN=FFC0255DBE0663C1594BCEED37FA796BFDF3DD98
Certificate serial: 440F
Authority key identifier: FF:C0:25:5D:BE:06:63:C1:59:4B:CE:ED:37:FA:79:6B:FD:F3:DD:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_8AlXb4GY8FZS87tN_p5a_3z3Zg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/ErRi9eKAUzDw-L5ljbYQxPTuU7s.roa
Signing time: Wed 13 Mar 2024 01:22:34 +0000
ROA not before: Wed 13 Mar 2024 01:22:34 +0000
ROA not after: Tue 17 Sep 2024 08:06:57 +0000
asID: 9392
IP address blocks: 103.122.241.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17423 (0x440f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFC0255DBE0663C1594BCEED37FA796BFDF3DD98
Validity
Not Before: Mar 13 01:22:34 2024 GMT
Not After : Sep 17 08:06:57 2024 GMT
Subject: CN=12B462F5E2805330F0F8BE658DB610C4F4EE53BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:d7:66:9d:8a:1a:3b:63:8a:05:a0:4e:6b:
9f:16:bb:51:94:54:c9:8d:d2:a1:0d:28:8d:64:c6:
d2:b3:e0:1e:8d:d5:fa:30:f5:a5:80:5a:c6:23:02:
b3:28:9b:76:28:b4:89:b6:bb:d0:26:f1:3f:fc:6a:
dd:11:e2:5c:0d:79:0b:53:d6:36:5f:f9:f0:96:e7:
f8:ae:43:00:33:81:99:f1:a2:66:b3:ce:04:33:f2:
b4:bc:4b:a5:0b:22:4e:6c:ff:49:52:e1:23:e8:bc:
04:17:9b:84:e1:9d:57:48:a6:15:db:5c:8e:f2:c7:
5a:e2:68:62:b5:ea:d4:cb:65:fe:17:f1:37:77:ad:
c4:b2:4f:e9:81:e3:49:3c:eb:00:79:e8:ce:bc:e8:
52:62:5f:b8:d5:c0:eb:ee:bd:c8:ca:e4:af:79:0d:
4e:18:ee:68:58:d2:d1:89:22:e7:a8:87:2f:25:72:
59:ff:17:68:68:99:b4:69:a5:dd:c9:7d:9b:49:c4:
97:96:e3:e0:4a:86:3b:ea:be:52:e1:a5:66:9c:ad:
7f:f2:de:94:96:b4:4b:91:20:1c:1f:03:66:79:18:
20:e0:51:1c:2c:ad:07:c6:a8:99:d5:e8:7b:2a:b0:
65:be:3f:7a:39:48:a0:20:ef:ad:12:a2:7a:55:4d:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B4:62:F5:E2:80:53:30:F0:F8:BE:65:8D:B6:10:C4:F4:EE:53:BB
X509v3 Authority Key Identifier:
keyid:FF:C0:25:5D:BE:06:63:C1:59:4B:CE:ED:37:FA:79:6B:FD:F3:DD:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/_8AlXb4GY8FZS87tN_p5a_3z3Zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_8AlXb4GY8FZS87tN_p5a_3z3Zg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/ErRi9eKAUzDw-L5ljbYQxPTuU7s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.241.0/24
Signature Algorithm: sha256WithRSAEncryption
10:70:47:55:e1:d7:27:14:56:4d:13:e5:92:9b:3e:38:23:a2:
2b:39:0e:ee:ce:1d:87:84:3a:a7:c4:48:18:bc:e0:2c:29:b7:
a3:d4:13:c5:1c:80:09:58:26:ce:69:c9:dd:bf:11:cd:65:e2:
44:fb:72:56:e4:f5:07:ca:52:cb:6d:10:24:99:f6:73:81:8d:
22:27:a5:a8:c6:d7:34:a8:8e:96:22:a7:9a:ac:2b:eb:92:56:
92:ee:8d:20:1a:34:39:be:ce:07:e0:e8:6f:22:12:de:cc:1b:
5f:9d:f5:6e:b6:28:56:e8:1a:fd:6f:7c:83:d3:11:79:b5:41:
85:49:f2:91:2a:b0:ec:00:35:18:2a:24:22:60:1e:c2:3c:f3:
7f:32:f0:8d:b2:57:80:46:77:2f:d3:9d:84:8a:de:bd:ba:56:
a5:4d:76:ac:f2:49:a5:82:39:0d:1e:ac:97:f9:51:6d:31:28:
58:35:64:89:93:e1:b8:86:df:7e:74:10:ab:d4:47:14:75:96:
fb:b8:e4:e6:09:53:bd:0d:04:b4:d5:61:4f:bc:0e:a4:66:2e:
a9:35:45:00:c8:27:d1:21:88:b9:1c:71:09:d2:aa:dc:e5:bb:
32:cc:cf:2d:f2:45:68:40:35:7d:bf:ed:6d:ef:a3:22:11:02:
a0:7f:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 09:41:17 2024 by rpki-client on console-fra.rpki-client.org