Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/53xEkUYGNSRxIB-NfT7H24sAFiE.roa
File: 53xEkUYGNSRxIB-NfT7H24sAFiE.roa (raw, json)
Hash identifier: mMeeqw0FOc8TQNdbLYBhPxipadcb1YHOO2agXYeab6E=
Subject key identifier: E7:7C:44:91:46:06:35:24:71:20:1F:8D:7D:3E:C7:DB:8B:00:16:21
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1740
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/53xEkUYGNSRxIB-NfT7H24sAFiE.roa
Signing time: Sun 21 Apr 2024 23:23:43 +0000
ROA not before: Sun 21 Apr 2024 23:23:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5952 (0x1740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 21 23:23:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E77C44914606352471201F8D7D3EC7DB8B001621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:ed:b9:fc:e0:3d:df:47:02:87:5a:dc:69:
5e:6b:a2:18:3b:60:50:64:24:7c:dd:00:6e:9b:53:
0b:ac:2e:aa:df:2c:a4:d8:78:31:bb:41:6d:41:b2:
e3:79:af:53:da:6b:3b:49:3e:5b:14:0b:05:cb:f4:
35:3e:06:cb:1b:e6:6a:fc:51:92:7d:e3:f3:57:cb:
6b:a9:70:73:df:3c:fd:d0:b6:90:fd:8e:9c:ea:08:
2b:51:0f:96:92:ef:bc:f0:71:a9:51:7e:57:95:9b:
d5:07:d8:ed:22:16:66:dc:8c:f2:49:0b:1b:da:86:
60:6a:75:92:91:9c:76:43:c7:9c:e9:8c:d8:94:38:
77:20:22:dd:15:d5:81:9e:38:66:09:d7:ff:47:99:
ca:a6:96:6b:3b:2e:c1:55:f6:c5:c3:08:9c:22:8c:
55:6b:4a:53:8d:5f:f5:21:27:d8:b2:e8:39:20:b4:
92:d4:cc:43:f9:7e:b0:6e:ad:8d:29:15:05:38:0b:
48:69:8e:02:b4:6f:5a:c1:98:06:cf:81:ea:5c:8a:
43:ae:07:16:b4:7b:0b:a4:36:93:86:72:ae:ee:41:
3c:ad:93:a3:11:a1:28:6d:fb:af:7c:6d:62:2d:fa:
85:63:29:1a:ba:cb:b5:ea:f5:74:d1:a1:9c:d5:c5:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7C:44:91:46:06:35:24:71:20:1F:8D:7D:3E:C7:DB:8B:00:16:21
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/53xEkUYGNSRxIB-NfT7H24sAFiE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:dc:70:07:14:f4:d8:f2:c0:eb:0a:0e:51:b6:77:79:20:f5:
0a:9e:45:7e:a6:3c:6a:76:f5:65:da:e9:0a:4a:60:aa:19:38:
8f:f7:a2:be:94:d1:a7:63:93:8f:8d:ab:23:31:dc:63:ca:47:
88:88:e8:12:6a:52:41:ea:29:c5:69:bc:9e:71:f0:df:05:fb:
18:3f:0c:bd:11:c2:3c:93:1d:e6:8e:f6:c5:f7:c6:63:64:5d:
3a:9e:be:8c:cc:61:34:15:4a:a4:b3:de:50:4c:78:f9:7f:07:
d4:e6:2d:e5:86:bb:53:ae:8b:6e:d2:de:a1:75:09:c9:e5:e9:
73:82:be:89:82:f3:ee:42:d6:4b:fb:2c:f2:d4:37:30:1d:f5:
3f:91:f4:7e:e9:a7:37:20:06:77:82:1f:4e:af:d0:c5:d5:6b:
de:1f:87:cb:9d:34:5d:75:17:27:24:34:9f:41:de:8b:d7:5e:
2b:10:43:56:44:a5:0a:09:b1:be:e0:1c:9f:a4:59:69:e5:06:
ea:b9:54:2d:29:87:63:c6:47:8f:34:52:11:d9:20:cb:37:1f:
6a:b3:db:ae:f0:aa:9e:21:a2:bf:3f:33:a6:e7:76:12:52:3e:
a7:29:3d:fa:b5:25:90:37:e5:5d:11:06:c2:54:48:3f:f6:49:
43:03:98:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:15:13 2024 by rpki-client on console.sobornost.net