Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/4sKU87lUOVzP9acfr70bWPzWEx4.roa
File: 4sKU87lUOVzP9acfr70bWPzWEx4.roa (raw, json)
Hash identifier: 3Wstgexm79ZD5MfJChkIaiJ9cHysb1RRGK5UDlIajPk=
Subject key identifier: E2:C2:94:F3:B9:54:39:5C:CF:F5:A7:1F:AF:BD:1B:58:FC:D6:13:1E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0DD4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4sKU87lUOVzP9acfr70bWPzWEx4.roa
Signing time: Wed 27 Mar 2024 20:22:30 +0000
ROA not before: Wed 27 Mar 2024 20:22:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3540 (0xdd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 27 20:22:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E2C294F3B954395CCFF5A71FAFBD1B58FCD6131E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:4c:f1:1b:1e:b7:91:54:ca:a8:ac:31:5c:
0c:06:1a:02:35:85:64:ed:5f:db:10:bb:88:11:e6:
25:52:70:a9:2d:15:68:6d:ee:73:e1:ee:13:57:ff:
26:8c:ec:91:c5:f0:86:44:10:c6:12:60:fb:77:14:
07:82:ec:ee:69:f0:bc:8a:c4:28:eb:b6:5f:53:34:
64:84:43:59:b9:ba:32:10:25:52:2d:5a:22:df:ba:
83:6b:d5:2e:80:4a:b1:a2:2b:c4:e5:a9:d3:d7:cb:
5a:a5:15:04:3d:86:78:fb:12:76:14:a8:de:12:aa:
1e:1a:89:15:ef:eb:65:cc:c5:91:8e:2c:37:ad:4d:
89:7d:d9:07:57:30:9c:b8:d2:30:a4:48:4b:cb:19:
fa:03:6e:bc:bd:15:32:5e:eb:6b:fc:10:93:75:f3:
8b:97:d4:75:71:45:ca:60:44:82:0a:fb:16:07:ca:
17:75:aa:4f:c4:02:28:a7:b6:69:5e:bd:2a:cc:4c:
f3:39:0d:a1:e6:9d:12:46:1a:a3:33:ee:89:5c:77:
c1:bc:61:98:22:3f:76:25:fd:14:e7:cd:34:f7:ce:
41:0c:56:78:06:4b:15:e6:ae:fc:03:70:78:ea:d7:
dc:0c:9d:2f:b4:11:92:a6:27:e9:25:b0:b7:be:c3:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C2:94:F3:B9:54:39:5C:CF:F5:A7:1F:AF:BD:1B:58:FC:D6:13:1E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4sKU87lUOVzP9acfr70bWPzWEx4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:24:e6:49:a4:da:ef:72:bd:64:17:cc:bd:2c:8e:9d:af:3e:
bc:f4:57:5a:02:d3:fb:3a:8e:7a:b0:a7:5f:b8:e5:03:af:3f:
f6:44:e1:20:e6:30:b2:61:de:00:27:8c:ff:87:ca:af:a2:e0:
0c:b6:16:ca:e6:40:aa:60:83:51:db:06:c8:cf:47:3d:e6:1b:
e0:39:07:6c:40:b2:41:d2:92:5b:f8:20:bf:c9:8e:5d:22:d8:
0c:55:67:01:31:26:8d:9c:72:f3:8e:73:e5:3d:86:84:c9:f3:
0c:58:d2:d7:22:1c:3d:5c:6d:d0:e2:9a:e6:a2:16:17:4d:31:
13:56:e0:01:b7:ff:5c:c2:cd:8e:21:e1:32:16:c5:bb:3d:d3:
fe:6d:3c:5d:64:95:f6:97:e2:09:c9:32:58:cb:cd:c4:7d:0e:
79:02:55:dd:5a:f8:1f:78:42:8f:d6:6e:c8:95:b2:b7:c8:89:
45:c0:cc:d3:41:5a:dd:58:e0:8c:65:25:84:50:23:52:19:ad:
de:f6:eb:8e:fd:ed:30:6c:3f:0f:6a:65:91:a1:17:b7:59:d2:
c9:82:ca:0a:89:94:50:96:3b:66:a1:42:e6:47:97:1f:00:63:
54:7a:80:a5:02:8d:4a:6d:8b:a6:87:60:f6:63:89:d7:60:54:
8b:2a:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 07:01:10 2024 by rpki-client on console.sobornost.net