Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/mYzaMvVbTi5iWbZ6HsV6bhAOV50.roa
File: mYzaMvVbTi5iWbZ6HsV6bhAOV50.roa (raw, json)
Hash identifier: ZJOdac6fL711XleGCigIs6lcy63Bin6iInB7UalgfhE=
Subject key identifier: 99:8C:DA:32:F5:5B:4E:2E:62:59:B6:7A:1E:C5:7A:6E:10:0E:57:9D
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 0CDB
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mYzaMvVbTi5iWbZ6HsV6bhAOV50.roa
Signing time: Wed 13 Mar 2024 01:21:57 +0000
ROA not before: Wed 13 Mar 2024 01:21:57 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139076
IP address blocks: 103.221.48.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3291 (0xcdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Mar 13 01:21:57 2024 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=998CDA32F55B4E2E6259B67A1EC57A6E100E579D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:b3:7d:99:4f:4f:54:02:72:21:da:1a:3b:
f3:f4:c8:18:98:44:db:2e:ec:26:a5:59:7b:c7:36:
5e:71:e8:f1:88:44:f1:ae:d3:2c:de:b2:64:b7:52:
e8:6d:b9:3c:3b:dd:8e:42:a4:8a:c4:86:a7:40:1b:
30:c3:51:42:80:b2:e5:cc:a6:97:58:2b:93:25:0b:
a2:4a:a7:a5:97:62:82:68:1a:93:3f:f9:7c:85:c8:
44:fb:14:36:4e:0e:a2:fc:80:31:44:6f:3b:e8:86:
77:fd:da:e0:ca:70:9b:90:e2:b5:1b:dc:0d:58:06:
a4:27:dd:ef:44:41:fa:e1:22:d5:ca:49:9c:a4:39:
8a:5d:57:23:92:70:8b:4b:b0:5a:fd:d7:d7:6e:92:
d8:ea:f1:36:be:ae:c7:7b:c3:ff:f2:92:5d:3c:c1:
4b:5f:9f:32:2a:e8:da:c9:c6:c0:f7:a6:a3:0e:07:
d5:a2:4d:b7:46:01:5f:33:aa:f7:e6:1c:ad:4f:f9:
a9:3d:5f:28:d9:d8:45:d5:ab:0d:33:11:cd:f8:b3:
44:bf:e4:e7:10:11:be:7c:46:bb:3c:88:26:eb:7d:
47:92:01:fe:52:b7:ca:c0:03:2b:97:db:0f:16:f5:
e0:87:e7:9d:3c:b8:e5:f3:b3:30:fe:6e:84:cd:cc:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8C:DA:32:F5:5B:4E:2E:62:59:B6:7A:1E:C5:7A:6E:10:0E:57:9D
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mYzaMvVbTi5iWbZ6HsV6bhAOV50.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.48.0/24
Signature Algorithm: sha256WithRSAEncryption
47:23:22:be:b6:e1:99:23:3c:8f:56:55:54:e8:1a:34:bf:f1:
78:92:c3:92:d9:68:67:5e:3b:f9:17:77:96:80:e9:1a:09:41:
7a:1b:eb:ae:ff:20:b4:3c:6f:5f:b8:6e:9d:34:3d:89:d6:e1:
ca:98:13:60:cc:dc:af:d3:f7:23:9a:91:f3:76:98:f6:00:98:
de:0c:9b:91:a4:31:76:4a:eb:df:f5:ec:d1:29:84:ec:85:3e:
28:7d:4a:ff:e7:d2:e1:b5:ec:1c:d0:32:c3:03:b5:e0:1f:b9:
e7:34:82:14:cd:fb:64:69:bc:ee:27:ef:e0:6d:bc:42:c9:8d:
80:e7:36:67:c0:03:ca:ca:5b:1f:36:71:62:19:c2:d7:32:d6:
59:7f:21:19:b1:cd:0b:2d:18:65:10:9c:bf:0a:b3:4c:ce:f3:
ea:7b:ff:58:59:74:ea:a9:48:58:f8:5d:bf:99:60:55:72:98:
70:87:f6:60:fc:bf:ed:24:a0:6f:bd:fb:53:e2:97:d6:b5:a4:
26:b4:7a:2b:d1:bf:4b:52:a4:8d:a8:7c:68:de:ba:31:39:ef:
63:67:3a:a0:03:2a:83:61:f9:59:50:d1:c1:9e:b9:8a:84:70:
72:78:63:f4:45:6d:57:2d:1c:90:ae:d3:bf:7f:bb:ec:54:42:
33:6e:39:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 04:05:12 2024 by rpki-client on console-ams.rpki-client.org