Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/1IE0cD1mpO-YzFM0v9-oZIjpBRE.roa
File: 1IE0cD1mpO-YzFM0v9-oZIjpBRE.roa (raw, json)
Hash identifier: 93kN+3VfvtQWoG0v2RRv2BCx4Lk+qPAA9FAdSXx28m0=
Subject key identifier: D4:81:34:70:3D:66:A4:EF:98:CC:53:34:BF:DF:A8:64:88:E9:05:11
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1536
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/1IE0cD1mpO-YzFM0v9-oZIjpBRE.roa
Signing time: Tue 16 Apr 2024 12:53:23 +0000
ROA not before: Tue 16 Apr 2024 12:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5430 (0x1536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 12:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D48134703D66A4EF98CC5334BFDFA86488E90511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:57:3f:d0:f1:50:61:a3:27:dd:10:83:03:
90:ce:c6:e5:14:bd:35:95:05:b4:98:90:07:3d:0a:
39:1b:c7:e5:76:65:db:9f:50:dd:ef:45:a0:66:e1:
23:ad:51:49:fd:c9:5c:6c:9d:8c:1b:f1:13:1b:4d:
52:d9:43:9a:43:c0:69:2b:79:ed:65:87:67:89:ab:
1c:ea:7f:14:86:e3:52:d1:d2:aa:04:47:47:36:0d:
c3:eb:d1:f1:d1:26:34:c4:69:88:68:2a:3e:0a:8a:
55:ba:de:d5:51:71:d6:11:9a:6d:72:19:2d:f0:6c:
db:28:10:bf:7d:5c:d7:9e:ad:94:f9:cc:c3:4f:8d:
20:c4:96:be:8e:f2:12:94:cb:53:67:ff:1e:4a:17:
2f:90:b3:e0:2d:37:dd:e8:ad:0b:c4:6d:26:de:e1:
9c:93:21:7f:8a:14:dd:54:79:89:23:5a:d5:66:ce:
8b:cb:1b:7b:b9:b7:7a:00:50:a5:5a:13:35:82:5a:
e8:65:bc:bb:72:46:1f:b5:25:60:1e:8a:e6:33:83:
a1:a7:10:b6:12:1c:71:0b:09:f2:3f:2f:33:78:eb:
7c:13:4e:21:5d:fb:e1:17:f5:b8:87:db:93:13:4e:
dd:e3:55:59:9b:16:19:6d:b5:05:a6:75:21:f7:c6:
2c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:81:34:70:3D:66:A4:EF:98:CC:53:34:BF:DF:A8:64:88:E9:05:11
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/1IE0cD1mpO-YzFM0v9-oZIjpBRE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:cf:06:23:25:58:62:5f:d0:4f:7f:6c:d5:ba:57:3b:41:71:
f9:fa:d5:2a:7a:5d:df:59:e7:69:1f:a0:90:95:de:00:7f:ad:
28:31:d4:4a:cd:14:80:d8:82:ca:1a:13:df:28:18:6a:65:06:
ef:3d:8f:3b:c0:f1:13:bd:45:c7:71:de:47:f7:ab:26:b3:82:
76:1a:5e:b0:05:c7:5f:b9:21:f6:18:b5:2e:44:58:66:1d:6e:
84:dc:18:4b:77:e6:10:c3:14:71:e3:61:7e:b7:6e:45:42:48:
f1:e3:d9:41:f5:3a:a5:e0:42:f6:9e:60:47:e6:bb:94:8c:bc:
9f:d7:c0:cb:d7:1c:42:2d:32:c6:e6:ab:64:cb:a5:0e:32:62:
07:0c:dd:bb:cf:18:94:f8:eb:84:8e:6a:6b:fe:3f:23:d6:47:
64:76:03:63:5e:37:32:81:9d:65:6e:58:6a:40:5a:ee:e2:72:
d3:d0:64:aa:19:d7:a3:a5:11:d7:d8:3b:52:d4:61:c5:f4:9b:
41:0c:f0:b2:9f:be:ca:6f:b1:2f:18:70:e3:30:bd:42:50:a7:
56:42:0b:65:05:63:26:01:6d:3c:6f:2f:06:c1:a3:33:f2:e5:
19:38:b9:d9:9e:be:57:a4:d2:c0:0c:10:81:68:be:83:73:dc:
b6:19:fe:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 19:57:01 2024 by rpki-client on console.sobornost.net