Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/3VRs4WW0S_kKQsDxKvxTir2V9nU.roa
File: 3VRs4WW0S_kKQsDxKvxTir2V9nU.roa (raw, json)
Hash identifier: 824A4d4q1mOIO03Rr4Ad380+mS5dLIq0L53V1svJ3rc=
Subject key identifier: DD:54:6C:E1:65:B4:4B:F9:0A:42:C0:F1:2A:FC:53:8A:BD:95:F6:75
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 170C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/3VRs4WW0S_kKQsDxKvxTir2V9nU.roa
Signing time: Sun 21 Apr 2024 10:23:31 +0000
ROA not before: Sun 21 Apr 2024 10:23:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5900 (0x170c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 21 10:23:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DD546CE165B44BF90A42C0F12AFC538ABD95F675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:39:af:7a:85:54:34:cb:9e:e3:ff:b2:91:
18:47:0b:dc:ea:f7:f9:0b:4c:c8:5c:92:42:db:e3:
ab:d0:4f:68:68:d4:2a:cb:ca:d0:4f:0f:c0:55:63:
12:2d:14:6c:7d:00:38:d3:fa:2d:87:27:6b:8f:53:
ad:fa:99:27:4a:35:dd:44:03:4b:00:30:06:75:00:
c6:60:43:f3:0a:94:fc:cd:52:29:8b:0f:53:06:88:
f5:11:c0:c7:8f:3d:9a:69:31:0d:0d:59:d6:94:18:
13:31:b5:b5:fe:48:b7:5d:cc:13:b9:dd:77:8c:09:
f3:77:94:18:22:ba:0d:de:48:70:f9:9b:c2:c7:89:
e7:05:cd:02:91:53:02:56:78:da:fa:8d:47:d3:64:
ed:b9:a4:d7:bf:5a:7c:4f:9c:5a:1e:4a:07:6a:2e:
fa:dc:ad:a7:91:57:df:fb:bc:cd:3e:bf:ff:f2:28:
1b:80:71:82:13:b9:c6:d2:6c:c1:de:be:b3:ed:57:
87:ec:c4:26:ad:09:a5:80:dc:51:15:fe:6e:ee:8e:
35:f4:e9:4c:c0:07:4a:29:27:1b:ea:bf:2e:f5:d3:
11:00:e2:4b:cb:d6:5d:74:58:c4:b3:49:d2:ce:1f:
20:d5:fa:32:93:0f:1d:4b:7b:8c:dc:48:dd:5e:53:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:54:6C:E1:65:B4:4B:F9:0A:42:C0:F1:2A:FC:53:8A:BD:95:F6:75
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/3VRs4WW0S_kKQsDxKvxTir2V9nU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
dc:b4:96:75:59:63:1a:b9:a8:cf:4f:f2:79:f8:ae:38:55:ba:
5a:ae:60:76:e8:87:c4:3b:3d:ae:18:89:f4:4c:4e:9b:57:92:
f0:cb:04:ea:5a:2c:64:59:48:46:01:98:0e:35:3a:42:2a:4c:
99:9b:82:b7:92:81:80:b3:01:da:eb:fc:70:7d:22:01:25:76:
44:e0:41:6a:67:79:ca:73:35:51:ba:d2:e2:ca:58:68:f0:78:
dc:62:f4:63:49:1b:bc:fa:ca:70:7a:69:64:f6:2d:e2:4c:51:
90:5b:ee:c5:f8:47:e2:bb:6f:4a:c9:03:bb:46:6c:51:e6:77:
76:4a:45:4e:3f:d2:7d:2b:97:a3:f9:6b:4a:ba:49:8b:9d:98:
72:7d:81:cd:13:43:a4:64:54:b2:b9:5c:b7:01:3e:49:1f:14:
54:9c:c6:65:a6:d7:47:a4:a2:5e:d3:b4:49:6d:16:f9:79:aa:
73:ab:0c:d5:d8:36:7b:8b:40:9f:e3:ad:6e:af:3b:86:08:89:
01:63:a3:4d:a5:18:ce:cc:24:7f:ae:51:ce:bd:4f:8e:c3:04:
04:ff:0a:43:fc:d0:9c:fd:fd:eb:3f:9e:81:74:da:55:0b:7a:
51:5e:81:67:f9:13:16:01:33:7e:2f:4e:fe:d3:7a:7c:15:64:
56:96:d2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 17:47:08 2024 by rpki-client on console.sobornost.net