Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/0TiP9QnZq-zwwc5asIx4c1HSk8M.roa
File: 0TiP9QnZq-zwwc5asIx4c1HSk8M.roa (raw, json)
Hash identifier: NdwvkgeRXdY92Kbxd2zPZ8ir7hfc0M+mNSMzgrTZ1s4=
Subject key identifier: D1:38:8F:F5:09:D9:AB:EC:F0:C1:CE:5A:B0:8C:78:73:51:D2:93:C3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 104C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/0TiP9QnZq-zwwc5asIx4c1HSk8M.roa
Signing time: Wed 03 Apr 2024 10:22:47 +0000
ROA not before: Wed 03 Apr 2024 10:22:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4172 (0x104c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 10:22:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D1388FF509D9ABECF0C1CE5AB08C787351D293C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:78:04:fc:6b:b4:99:78:c4:6e:a2:20:76:
03:8d:80:b5:71:94:af:a3:ec:18:33:8b:94:2e:26:
4b:61:c3:d3:ff:85:03:11:28:1a:cd:b4:7f:97:e4:
6f:e0:da:39:47:af:2c:24:e8:b1:78:a6:6d:6f:a9:
71:0f:2b:d1:8b:ae:95:5b:22:47:22:38:da:11:78:
c4:59:9a:ab:9d:9b:20:bd:28:3b:9f:9e:fa:54:9f:
ad:9c:68:39:42:79:53:68:86:af:63:a6:2f:dc:58:
87:91:82:6a:38:b7:de:eb:11:0a:c8:a3:ad:ff:1e:
3a:3e:44:2f:2b:b0:00:1b:b6:e4:ec:f0:77:ed:49:
4e:fc:c0:81:1f:3c:f8:c5:4a:70:cb:11:19:06:6f:
9c:1f:e3:6b:00:4f:1d:48:32:5c:ff:ed:36:5f:4e:
db:c7:ae:f7:75:a2:03:14:91:07:fa:48:2e:45:a5:
e6:5f:00:61:1c:b2:92:0a:72:37:ba:2c:81:0f:b0:
c2:fb:9b:12:20:9d:ba:e6:3d:c0:e9:1a:de:3f:0f:
01:fd:1a:b5:ca:4e:9f:d2:17:16:04:f8:ad:17:58:
5a:89:01:85:0d:aa:0e:9c:4d:65:f0:4e:00:ad:a1:
9c:5e:b2:cc:a2:a8:d6:eb:fb:ab:d5:99:af:44:5b:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:38:8F:F5:09:D9:AB:EC:F0:C1:CE:5A:B0:8C:78:73:51:D2:93:C3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/0TiP9QnZq-zwwc5asIx4c1HSk8M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:51:2b:ee:08:63:86:24:37:9f:15:18:4a:a4:c6:5e:3e:d4:
a2:aa:28:6c:74:50:e4:8e:c7:2a:f9:b4:e6:cb:65:f1:10:a3:
be:05:e8:e2:ca:e4:96:54:ee:c4:a7:99:d9:0d:30:04:83:98:
c4:0a:11:e6:9b:8f:f3:dd:ec:99:de:f5:78:40:10:c5:42:95:
a5:07:2c:15:cc:ae:fc:b7:ca:71:6d:75:2c:5d:0a:3c:21:3a:
8d:5c:59:55:6a:3c:cd:3e:4c:8a:dc:c7:3a:b2:cb:4e:06:91:
96:35:4a:d5:60:5f:fc:81:34:62:10:72:b1:05:5f:2c:56:e9:
2c:08:86:c8:68:e5:33:62:05:cc:09:3b:6d:e9:6c:f6:f7:a0:
e0:9e:84:60:93:f5:f6:6d:15:45:4e:f2:42:25:33:bc:61:ad:
3a:7f:fd:95:60:1c:1c:ba:5e:41:09:56:3f:0d:37:85:e6:1b:
77:22:15:f4:38:eb:17:33:24:ea:bc:99:60:54:90:d0:16:b8:
f7:20:f8:24:22:92:a9:1a:94:b6:11:af:b7:f4:7d:de:00:f7:
f0:cc:df:4d:6f:f1:f1:01:47:a7:fa:e6:48:74:c8:8d:51:e7:
69:2e:1c:a2:4a:9b:21:e6:25:db:be:3e:bc:6c:e8:70:c4:85:
e2:78:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 16:33:21 2024 by rpki-client on console.sobornost.net