Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/i4fA8DR37zxs6roi3rnh-5gz02g.roa
File: i4fA8DR37zxs6roi3rnh-5gz02g.roa (raw, json)
Hash identifier: CXR6eEL8esSmAPX04fE1O/sRhyyZo4YX8Lydm6Ciy9c=
Subject key identifier: 8B:87:C0:F0:34:77:EF:3C:6C:EA:BA:22:DE:B9:E1:FB:98:33:D3:68
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 0CD6
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/i4fA8DR37zxs6roi3rnh-5gz02g.roa
Signing time: Wed 13 Mar 2024 01:21:55 +0000
ROA not before: Wed 13 Mar 2024 01:21:55 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 13444
IP address blocks: 103.221.92.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3286 (0xcd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Mar 13 01:21:55 2024 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=8B87C0F03477EF3C6CEABA22DEB9E1FB9833D368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:18:60:c7:6e:a8:b7:db:27:55:75:8b:37:55:
f8:a0:3b:df:13:49:b6:11:b7:97:70:f8:ab:ca:cb:
49:3d:19:05:af:58:f6:09:8a:b2:04:17:7f:71:1f:
24:34:ca:5e:94:f3:3b:5c:82:cd:2c:12:88:2a:a2:
ad:2a:3c:84:dc:d3:dc:f1:f1:be:ee:21:2f:b1:e4:
16:af:ee:1f:a5:1b:61:bc:19:ff:f3:96:bf:76:43:
81:3f:1e:92:43:fe:5d:2c:5f:30:7d:d9:02:08:29:
18:2d:e9:d1:01:37:20:53:db:dd:76:20:06:57:81:
b7:89:23:a7:ee:ab:02:1a:8d:4b:d8:d2:2e:e4:07:
79:bd:3b:bf:06:e1:74:3f:80:33:00:da:20:e2:86:
a2:c2:03:a5:0a:4b:45:33:c8:9c:93:ed:61:b3:17:
9b:92:0e:8d:93:40:59:12:7f:cd:45:2b:82:f9:8d:
8c:93:31:4f:82:36:59:e6:6f:8b:97:15:d5:34:b7:
1c:96:f1:aa:91:aa:e2:7b:ce:06:98:32:2d:7f:2c:
af:f6:58:c3:89:59:a5:0a:7f:46:78:92:25:df:a1:
59:f7:ea:2b:78:c5:e6:2c:4d:05:12:97:93:b0:9a:
a0:da:5c:13:9f:4f:e7:b0:8f:15:6a:0b:ff:b3:99:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:87:C0:F0:34:77:EF:3C:6C:EA:BA:22:DE:B9:E1:FB:98:33:D3:68
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/i4fA8DR37zxs6roi3rnh-5gz02g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
24:c1:62:a0:a7:5e:fa:eb:90:69:f3:dc:e6:e7:14:a6:e6:f7:
cf:fd:6a:df:47:e5:e9:54:b9:85:3a:18:6f:83:fb:0c:e2:f2:
f2:e5:44:dc:77:d4:9c:79:cd:ab:f9:12:c8:5e:07:6c:66:a3:
91:5b:4b:c7:2e:b7:02:68:05:19:e0:3b:e2:dd:9c:b5:41:88:
5f:6f:d4:e2:40:67:04:b7:e7:04:a1:36:49:86:fe:df:e2:0b:
28:3f:02:13:85:ec:85:f3:9b:6d:3e:43:37:13:61:76:4a:b5:
76:07:b8:5a:da:ba:1f:6f:a3:99:37:27:7c:e3:02:b7:e8:c4:
84:05:3f:16:23:50:a2:69:51:30:21:1b:6d:5e:22:f2:f7:9b:
ad:21:3a:04:9a:ec:48:e4:7c:07:3b:59:0d:fa:9d:3e:22:9e:
2a:4f:04:c5:bb:1f:0d:c2:aa:9d:f2:a8:24:d2:98:93:f1:8d:
98:89:b8:0f:74:33:0f:7e:04:24:f3:b0:46:bd:27:d3:d0:a3:
04:69:83:98:53:54:bf:c2:c5:53:53:30:23:75:bc:34:bc:dd:
4d:45:41:87:9f:4b:15:cd:d0:c7:36:db:6d:29:38:2a:60:75:
0f:d2:78:db:47:20:18:a9:24:10:80:83:d3:66:04:a1:ad:a2:
b5:0f:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 03:29:12 2024 by rpki-client on console-fra.rpki-client.org