Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/4O0xHd7Sk0bojsGMzBoTJNr9r9I.roa
File: 4O0xHd7Sk0bojsGMzBoTJNr9r9I.roa (raw, json)
Hash identifier: uwD/I61IgYOuheOB38w4nF/KTV1OLx5VmHFssB9AyHw=
Subject key identifier: E0:ED:31:1D:DE:D2:93:46:E8:8E:C1:8C:CC:1A:13:24:DA:FD:AF:D2
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1254
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4O0xHd7Sk0bojsGMzBoTJNr9r9I.roa
Signing time: Mon 08 Apr 2024 20:22:59 +0000
ROA not before: Mon 08 Apr 2024 20:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4692 (0x1254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 8 20:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E0ED311DDED29346E88EC18CCC1A1324DAFDAFD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:d0:79:b1:c6:01:4a:02:a5:64:81:a7:f0:
3d:73:97:86:59:e9:81:4a:9d:3e:de:50:1d:bc:ea:
ec:13:ba:dd:f3:1b:cb:6a:e2:b2:df:43:e3:60:e9:
6f:d1:fe:75:c5:4c:cf:16:26:7b:80:c9:88:b1:97:
bd:fa:36:36:58:68:98:9c:ab:60:2d:6a:f5:de:2e:
b2:f5:41:0e:8c:a1:62:59:3b:29:cc:33:08:4c:9e:
24:bc:05:35:a3:21:86:93:1f:4a:bc:38:4d:7f:7f:
c3:5b:05:e0:41:67:19:30:71:c7:62:75:c0:13:25:
ed:e8:69:7b:a2:da:cd:0d:c1:7b:07:d0:6e:21:ec:
cf:11:97:fc:c7:43:7b:10:e7:ef:d2:b8:a8:5c:bf:
70:46:53:00:f3:3f:8f:eb:36:4c:22:41:47:99:62:
5b:58:46:ea:41:0b:4e:3d:e7:28:02:97:b5:18:50:
28:5b:64:a9:3a:1a:67:ad:a1:4b:79:48:38:6a:4c:
bf:12:ae:66:90:11:d4:13:00:0c:fa:08:a1:df:38:
a0:0e:f6:cc:23:83:a2:56:b9:90:87:22:b3:90:8c:
d0:f6:f8:d8:a6:d3:36:6d:3e:38:c6:6f:15:e9:a9:
27:eb:b6:ff:f2:1c:5f:2a:ef:49:8c:96:85:5a:8d:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:ED:31:1D:DE:D2:93:46:E8:8E:C1:8C:CC:1A:13:24:DA:FD:AF:D2
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4O0xHd7Sk0bojsGMzBoTJNr9r9I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c1:1c:65:89:f7:b3:57:64:00:8a:31:0e:46:9c:61:dc:40:0c:
42:16:94:57:f3:06:81:21:3e:6b:44:5c:69:d7:e6:b1:58:f2:
04:11:52:64:29:b5:3c:ce:aa:34:74:96:57:0b:67:0c:97:17:
f0:b3:a8:2a:c9:0f:f9:1c:0a:49:14:8b:e8:96:20:08:3b:28:
1a:25:d9:1e:1f:83:ad:13:45:94:77:77:83:05:55:bc:1f:a2:
78:8e:20:1d:7f:f0:d6:ab:cb:98:9d:22:13:f4:d9:b7:f3:d1:
e1:79:d4:d4:db:fb:63:54:d5:55:17:36:ad:c2:72:d9:53:34:
75:95:a3:32:0c:2d:33:f9:fe:68:cb:9e:70:d8:38:36:07:74:
8b:a9:69:b2:8f:e7:71:97:0b:b4:23:6a:65:f2:a3:ba:70:b5:
1b:c9:a2:c9:92:a6:d9:8d:fb:c0:b8:f2:14:2e:2f:3c:57:82:
c8:43:19:30:f6:28:96:75:81:b8:62:bf:06:38:0c:5c:5c:67:
d9:59:db:13:bb:c9:59:38:6b:a7:52:d8:cc:a0:65:0a:88:80:
7d:a2:03:78:1e:47:53:7b:8c:a1:07:e0:04:fd:f1:3d:4b:a9:
8e:bf:fa:8d:f5:2d:0f:8b:8d:59:81:86:67:d8:5d:a1:44:86:
6f:3f:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 06:31:46 2024 by rpki-client on console.sobornost.net