Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/1qJXRfo9jERRu395QHg89JKqznk.roa
File: 1qJXRfo9jERRu395QHg89JKqznk.roa (raw, json)
Hash identifier: vwtg3ngkk6mDGJvKHYUN2mtvHK745WRj7syL5TrJGzs=
Subject key identifier: D6:A2:57:45:FA:3D:8C:44:51:BB:7F:79:40:78:3C:F4:92:AA:CE:79
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1900
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/1qJXRfo9jERRu395QHg89JKqznk.roa
Signing time: Fri 26 Apr 2024 15:23:48 +0000
ROA not before: Fri 26 Apr 2024 15:23:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6400 (0x1900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 26 15:23:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D6A25745FA3D8C4451BB7F7940783CF492AACE79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:3e:38:e6:4a:2a:15:55:17:c5:82:4b:7e:
7b:35:eb:ef:33:f7:6a:bd:b8:56:2e:fe:56:ca:4e:
40:56:d8:b1:74:25:42:b7:2f:20:d9:51:a1:af:29:
03:af:65:be:35:f1:b4:34:64:b6:c5:a2:b8:d9:e9:
6a:80:e1:41:75:fc:17:39:40:de:e2:bd:13:8e:1b:
34:94:ad:6a:9f:53:70:36:9a:ad:b7:e5:b6:22:7b:
4e:cb:14:88:5a:96:17:14:74:70:5d:e6:08:9c:6e:
4b:e3:59:d0:ae:69:25:19:99:d2:61:92:15:24:fe:
f4:aa:c6:f5:62:6f:a7:ed:df:07:34:8f:69:1a:b0:
c1:a9:e0:ed:1e:3d:c9:f5:5c:c9:1b:6a:bf:9b:49:
4e:59:68:d1:75:ea:98:84:85:d6:a8:b7:06:4c:ef:
b0:a1:f8:f0:e7:64:b2:21:3a:ef:f8:18:9f:95:0f:
26:f8:3b:75:c8:49:42:35:59:8a:d6:2c:69:47:3f:
20:3b:2a:64:10:fe:2a:40:9d:5d:01:1f:b0:59:12:
0e:c3:eb:a3:e1:cf:27:77:a7:9e:8c:93:49:36:ea:
de:8a:dc:18:bb:db:c3:e5:81:f7:8b:15:06:4e:38:
b9:8c:34:99:49:c4:de:10:a6:e1:29:f0:77:4c:90:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A2:57:45:FA:3D:8C:44:51:BB:7F:79:40:78:3C:F4:92:AA:CE:79
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/1qJXRfo9jERRu395QHg89JKqznk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:6f:cb:89:be:ad:14:97:72:63:bc:60:91:bc:08:2a:aa:33:
85:3b:ca:4c:2c:a5:75:ad:ec:94:bb:b6:df:c7:5f:99:b7:2a:
e9:9f:f3:76:ca:7d:e1:02:c8:9d:ff:db:ad:c5:c5:d4:cf:91:
e6:da:ec:92:90:a7:d0:19:09:44:60:9e:fc:91:1d:30:91:00:
37:1b:01:c2:f4:ff:37:fb:e2:95:2a:ba:13:cf:8f:08:51:9c:
bf:6c:44:3f:4d:ed:14:d0:83:c0:44:19:33:f6:63:55:09:78:
cc:83:54:f1:1c:1c:24:bd:10:fe:f1:c6:c1:c9:62:70:cb:1c:
42:eb:a9:e8:d0:f2:20:6c:1d:b0:e9:35:11:8d:18:6c:9e:ed:
d2:07:6c:b6:c6:ae:e3:04:94:bf:7b:43:17:d1:b3:4a:6c:10:
bf:4d:ac:1f:65:00:4b:7c:ed:c8:0f:e9:88:c0:0f:e8:7a:f4:
f6:b1:fd:c3:e4:ab:3f:fc:09:3d:77:10:81:f2:7a:51:0a:d7:
73:e6:22:b8:e4:1e:10:0a:e0:3d:c6:dc:6f:90:9c:0e:73:6c:
63:3c:a8:f7:1e:c5:72:ea:d3:8d:ef:8a:15:be:82:d7:32:0a:
be:93:0c:96:cd:cf:dd:58:35:f7:ed:7a:95:5a:6f:94:9c:46:
75:c9:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 22:47:19 2024 by rpki-client on console.sobornost.net