Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/UJOyOphSKYh11vThQ0_iW9sJMW8.roa
File: UJOyOphSKYh11vThQ0_iW9sJMW8.roa (raw, json)
Hash identifier: nSF3GUFV478SD378DMrV+kCtuZQlWMKVRcDjRwWCOlg=
Subject key identifier: 50:93:B2:3A:98:52:29:88:75:D6:F4:E1:43:4F:E2:5B:DB:09:31:6F
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 0CDF
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UJOyOphSKYh11vThQ0_iW9sJMW8.roa
Signing time: Wed 13 Mar 2024 01:21:59 +0000
ROA not before: Wed 13 Mar 2024 01:21:59 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 24373
IP address blocks: 2406:1e80::/48 maxlen: 64
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3295 (0xcdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Mar 13 01:21:59 2024 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=5093B23A9852298875D6F4E1434FE25BDB09316F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:34:8c:bc:33:aa:f8:04:e9:06:e1:0a:b8:
14:be:e1:67:af:f9:f8:c4:d1:a1:4c:8c:7b:1b:7f:
c9:06:dd:1b:1c:1b:4f:1b:2c:70:28:74:b5:2d:1c:
80:31:7d:d3:36:b4:b5:dc:bc:90:be:78:fe:20:2d:
fb:10:59:00:1e:15:71:4c:82:22:12:ac:54:96:b0:
9e:b1:c0:6f:69:c1:03:7d:24:1b:d7:37:9c:a7:b5:
2d:16:4d:f6:66:8b:90:11:e2:43:03:65:a4:65:55:
7d:a9:e3:a1:33:83:69:7a:be:2a:2a:69:44:de:7f:
53:73:b5:4d:92:c3:05:1e:f9:1f:c1:5a:34:f9:1a:
56:4d:c0:50:26:a0:fe:03:d1:a1:4b:d2:74:c9:3c:
9a:42:33:a8:52:10:e6:c2:e4:91:f9:2d:74:9d:b4:
80:bb:41:19:4f:ba:ee:74:3a:f5:be:57:f8:50:a0:
c6:1a:14:83:6a:8b:4b:ac:46:ab:08:1a:5e:ad:d7:
76:03:e0:52:56:35:5d:f1:18:15:4e:c6:fa:62:4a:
f2:fd:da:6a:e0:48:02:b0:02:37:a3:3d:85:b2:bb:
fe:b5:f5:18:34:46:e9:a2:b0:fa:7a:fe:c6:8b:b7:
b9:a9:1f:fe:8d:f7:84:0c:f8:ad:53:22:ab:96:8a:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:93:B2:3A:98:52:29:88:75:D6:F4:E1:43:4F:E2:5B:DB:09:31:6F
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UJOyOphSKYh11vThQ0_iW9sJMW8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:1e80::/48
Signature Algorithm: sha256WithRSAEncryption
57:ec:9e:48:9c:e2:b8:16:79:ea:3c:a2:c9:e5:7a:c7:ff:c3:
ff:6f:22:60:6e:27:98:14:36:c6:6c:46:cb:74:23:35:91:53:
43:89:0a:cd:34:bd:40:a8:b8:f5:c3:37:30:21:f1:97:1d:9d:
9d:54:e8:a2:42:aa:a3:da:16:75:18:64:2d:b3:7b:62:8d:12:
77:3c:b3:f0:f9:3b:7a:7a:ee:fb:48:32:50:e0:db:c6:d1:0d:
8b:04:c2:40:5c:56:2f:fe:8a:92:89:1b:08:b5:b2:24:ba:34:
e2:00:ee:b6:20:20:0e:f7:da:04:2f:c7:24:35:56:16:ca:25:
91:a4:9a:ef:7c:8f:11:37:91:70:c5:94:88:a1:41:2f:d7:5e:
ad:73:d3:66:1f:74:b8:72:a3:16:b1:94:ec:aa:1b:e6:63:00:
01:2f:56:e1:91:5f:63:7c:04:45:e9:b2:88:3b:77:2c:f3:3b:
8d:e5:e7:1b:5a:4f:fa:f4:e1:5d:58:24:14:4a:91:fd:a5:81:
65:cb:d5:b2:aa:9c:38:12:43:d6:23:a4:e1:60:ae:e6:29:6d:
7d:53:70:1d:7c:f9:66:d1:1b:d6:d9:3d:72:b3:56:b6:dc:50:
4d:42:1f:46:a9:b3:15:aa:71:12:04:64:3f:9a:7f:fb:66:15:
85:32:c5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 03:29:12 2024 by rpki-client on console-fra.rpki-client.org