Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/20ZsV58_J6PvO0ZxUpOLy1atZVM.roa
File: 20ZsV58_J6PvO0ZxUpOLy1atZVM.roa (raw, json)
Hash identifier: 84pYtUnZ2alTzNPQxhhj1kAwTWGjGkDIblXZ6JXRMZU=
Subject key identifier: DB:46:6C:57:9F:3F:27:A3:EF:3B:46:71:52:93:8B:CB:56:AD:65:53
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1546
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/20ZsV58_J6PvO0ZxUpOLy1atZVM.roa
Signing time: Tue 16 Apr 2024 16:54:17 +0000
ROA not before: Tue 16 Apr 2024 16:54:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5446 (0x1546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 16:54:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DB466C579F3F27A3EF3B467152938BCB56AD6553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:b7:f6:68:de:f6:99:fb:9a:9a:29:48:05:
f9:c4:46:2d:fe:74:25:cb:76:df:a7:98:b4:13:c2:
b8:c2:1a:76:c5:55:30:14:f7:6b:f1:1f:05:5c:61:
bf:07:bb:be:fc:6f:5f:32:33:2b:4b:12:6d:93:c5:
aa:9b:91:68:6c:ba:94:74:61:82:a9:58:dd:ff:68:
1d:df:a3:c6:4d:24:e3:b5:0d:d2:54:d6:4f:7f:b9:
be:f8:7e:c9:23:c3:1b:aa:b9:1c:de:d0:2e:2c:99:
e1:bf:a5:9f:00:99:19:b5:64:25:02:b5:1c:5d:ec:
41:7d:54:18:33:fa:64:09:3a:89:a4:58:37:65:e3:
0d:78:85:13:25:ce:d4:88:51:1c:49:76:ce:24:b3:
ff:bf:2a:ec:29:97:bd:48:6e:46:e3:65:22:2b:bd:
34:ab:03:3b:66:6d:15:83:1f:29:fc:45:6b:3f:d1:
1f:ce:d6:cd:4d:48:ae:28:3a:c7:cb:d9:05:87:fa:
e7:0f:1a:3f:2c:30:26:c4:80:13:08:ce:b0:3c:05:
c1:c4:d4:0b:63:7e:cf:b3:67:e7:01:e8:ed:d2:92:
33:58:68:f5:3b:9e:15:45:3e:24:3a:aa:94:ef:68:
50:df:b5:02:df:73:50:b0:81:5c:5c:22:0d:41:13:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:46:6C:57:9F:3F:27:A3:EF:3B:46:71:52:93:8B:CB:56:AD:65:53
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/20ZsV58_J6PvO0ZxUpOLy1atZVM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:e5:54:03:d6:de:31:08:4e:37:0c:dc:21:f2:39:77:45:87:
30:e5:d5:54:ed:2c:df:ab:e1:21:86:d0:ec:c6:a1:32:b9:c0:
e0:20:2b:ba:0b:74:5f:40:64:89:48:78:19:a7:27:90:57:f6:
ce:fb:e7:46:85:b5:6b:a5:c4:a9:3e:b9:bf:36:2c:46:2b:a5:
b5:1d:90:21:97:27:f5:25:a5:24:a3:cb:02:3c:34:35:50:6b:
d6:77:cf:ee:07:01:b1:7d:25:2a:51:9b:dd:24:62:9c:ff:62:
b2:dc:f9:5a:49:1a:29:92:34:0d:d2:72:91:48:e0:04:dd:fe:
09:16:35:95:43:fd:75:70:cb:c3:7b:4d:8a:9a:3a:89:8d:c7:
3e:ea:cf:79:84:24:c3:58:b5:d2:b3:90:9c:7f:ad:3f:cd:e3:
d7:30:1f:41:0e:30:06:5b:32:6c:b7:3f:c2:64:61:13:51:6a:
2b:2b:02:8f:ff:05:68:8a:f8:36:6d:54:30:d5:2f:54:14:c3:
75:14:03:a4:44:7f:79:09:cb:2c:7e:0f:09:2b:8a:6d:8e:69:
9c:c0:89:12:86:5c:b5:33:fd:42:9d:43:ac:34:5e:37:d1:9a:
3a:9a:95:ee:b5:8d:19:5c:c7:3b:2d:c4:14:c2:06:48:7a:9a:
40:4b:1b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 00:34:03 2024 by rpki-client on console.sobornost.net