Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/BOFNK5R3X1VtZv-vR1llrC0Hl10.roa
File: BOFNK5R3X1VtZv-vR1llrC0Hl10.roa (raw, json)
Hash identifier: 5CTO1DMChdKi5IOk7H1TVDhyOoO2JAJ/6WsyjAjQ93s=
Subject key identifier: 04:E1:4D:2B:94:77:5F:55:6D:66:FF:AF:47:59:65:AC:2D:07:97:5D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 122A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/BOFNK5R3X1VtZv-vR1llrC0Hl10.roa
Signing time: Mon 08 Apr 2024 09:53:50 +0000
ROA not before: Mon 08 Apr 2024 09:53:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4650 (0x122a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 8 09:53:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=04E14D2B94775F556D66FFAF475965AC2D07975D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:67:ef:79:bd:35:f6:6d:22:d9:ae:49:0c:
6b:43:0d:45:bd:42:26:0e:72:e8:ec:c4:83:89:1b:
4b:1f:5b:06:c3:b9:e1:90:f2:7f:92:d2:71:bf:68:
76:8d:2d:6e:25:bb:c4:b7:9f:26:6a:60:a3:3b:a3:
93:a9:a3:ec:66:46:02:c1:63:7a:86:38:aa:56:5b:
f4:b6:84:80:1f:fe:f7:cd:d1:97:a8:52:cb:2d:71:
c3:4f:14:2b:82:ec:1e:2a:42:f2:4a:f8:0f:cf:73:
b7:76:d7:e5:3d:54:46:e7:99:8e:c1:7e:07:75:78:
45:63:33:5b:8a:c1:53:94:b8:2d:9b:aa:d6:4c:93:
18:a2:9a:83:85:3e:bb:a1:65:96:b0:53:30:45:06:
ee:67:a1:19:68:58:23:22:53:42:6c:f4:34:06:c8:
3b:70:b7:71:b8:34:a1:f2:6f:e7:dd:af:ed:ab:ed:
99:80:c5:df:0d:08:9b:36:26:91:f8:f5:da:85:99:
c5:fb:7e:19:0f:74:fb:3c:41:a1:74:d5:59:47:6c:
74:ff:39:8b:2d:37:45:33:00:d5:e0:72:97:bb:89:
c2:0b:26:6f:aa:2d:ae:1a:58:af:70:33:4d:bb:c5:
6f:05:9c:aa:96:ba:02:86:c9:91:1c:49:b1:5b:1f:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E1:4D:2B:94:77:5F:55:6D:66:FF:AF:47:59:65:AC:2D:07:97:5D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/BOFNK5R3X1VtZv-vR1llrC0Hl10.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:bb:5d:1e:5b:54:81:29:67:91:f8:d4:2b:02:f1:d8:e9:2b:
27:d4:a8:5e:bd:47:54:34:95:3c:7f:6d:87:37:5e:7b:3c:25:
0b:b9:4c:72:65:28:6d:56:61:d6:39:14:03:b6:fb:87:89:26:
86:81:a7:6b:b3:79:a9:f1:3d:4d:af:fb:80:9d:92:bb:e6:1d:
6a:d7:e0:e9:00:6b:32:f8:78:fc:b9:5c:39:b9:7c:51:72:c2:
fc:72:93:ad:31:7f:da:f9:43:44:2d:d2:a1:e7:12:a5:75:b9:
22:82:2b:ff:9d:ce:da:84:e9:18:b3:91:94:7e:27:95:40:03:
c5:cc:fe:04:3c:ae:ea:97:f0:fa:d1:9b:2a:30:42:c5:b1:f3:
66:c0:0f:67:b0:45:f8:c8:02:0d:01:24:e5:f0:fd:7f:13:db:
ef:a7:db:ea:b7:32:a2:a3:c3:b3:2f:3c:58:fe:a3:22:be:f2:
0d:1e:a9:d7:d9:b5:f6:55:ad:f9:95:62:20:f5:d5:b2:08:a9:
b9:9e:23:03:02:0e:ba:8e:81:ac:0b:a0:b3:7d:d2:7a:48:16:
29:ae:39:66:6f:98:df:ec:57:43:c7:50:57:57:31:61:2e:b3:
59:0f:54:b2:10:00:88:ce:17:c4:9c:2c:71:e7:5d:f6:46:2b:
72:ed:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 16:31:00 2024 by rpki-client on console.sobornost.net