Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/DMnc_B_QSF1hsVI1-tBItQtfFgw.roa
File: DMnc_B_QSF1hsVI1-tBItQtfFgw.roa (raw, json)
Hash identifier: nQCxy3EjgiGpUf7rGmS/c+brU/edsXMktWgs/neLDec=
Subject key identifier: 0C:C9:DC:FC:1F:D0:48:5D:61:B1:52:35:FA:D0:48:B5:0B:5F:16:0C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19E8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/DMnc_B_QSF1hsVI1-tBItQtfFgw.roa
Signing time: Mon 29 Apr 2024 01:23:55 +0000
ROA not before: Mon 29 Apr 2024 01:23:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6632 (0x19e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 29 01:23:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0CC9DCFC1FD0485D61B15235FAD048B50B5F160C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:e4:95:73:40:74:62:b1:0c:0e:98:49:5c:
af:56:d5:50:99:13:7b:15:c4:26:82:68:8d:64:45:
02:e2:de:5c:6f:08:79:76:73:a6:02:97:c3:eb:8f:
ce:e7:64:67:c2:69:2a:90:8b:eb:d9:e8:e8:35:f4:
4a:0a:db:aa:8a:50:50:56:bd:08:02:24:b3:bf:48:
9c:4f:58:5b:59:50:29:b0:bc:5f:23:bc:ea:f8:7e:
00:15:bc:62:b6:8c:e5:5a:1b:b4:b7:41:85:c8:53:
bb:a8:14:06:04:2b:76:7d:3e:a1:c3:67:90:38:4c:
db:2b:ee:41:e4:ee:23:2b:21:45:94:ab:47:77:bd:
75:c8:e7:f0:05:94:28:17:d0:ee:ea:80:ba:80:5f:
e7:54:6d:0d:d1:47:a7:29:5d:85:cd:ff:ea:86:d7:
06:1e:6e:fb:ad:a2:79:43:42:04:ad:df:f2:49:24:
a1:90:13:72:08:be:17:31:01:a5:59:6c:cd:f9:36:
17:4c:74:e2:a4:32:42:c6:e8:b4:22:62:4a:f4:26:
34:26:84:20:34:14:0e:a9:44:93:c0:4c:c4:a5:05:
9e:e7:11:a8:d3:67:6b:d2:80:5e:1e:7d:1a:a8:b8:
73:be:8a:98:7e:86:3d:bb:3e:7c:b4:3e:24:3b:36:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C9:DC:FC:1F:D0:48:5D:61:B1:52:35:FA:D0:48:B5:0B:5F:16:0C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/DMnc_B_QSF1hsVI1-tBItQtfFgw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:04:2f:47:c2:26:79:39:32:80:b7:53:dd:77:6f:6d:5c:53:
b6:d1:ae:1e:b7:ae:cb:f6:2e:b2:a1:1e:5e:f1:45:ce:a6:5c:
c8:8c:25:0c:17:67:9f:05:fe:f5:1a:d5:a9:df:62:ea:4e:d8:
aa:8e:69:78:de:6f:6d:0f:e9:e7:fe:b7:a6:ee:9d:aa:ed:e6:
40:4d:3d:2b:79:d5:68:01:cb:03:cb:a4:a3:4c:d5:cb:66:fc:
e1:59:4e:f3:b2:d9:be:dd:4e:c4:8b:e1:2c:d7:ae:72:f6:f3:
1b:1f:b0:a1:72:7c:b1:c2:75:18:9d:fa:85:f3:fb:57:e3:d7:
52:cd:a2:6b:79:7c:9d:85:c8:7f:39:63:81:65:9d:48:c1:ae:
85:d8:16:fa:bd:8f:f0:3a:2a:9d:99:6c:26:54:a2:60:62:8f:
71:05:42:bb:55:43:5d:16:7b:c5:0b:a5:59:0d:dd:b6:d9:d1:
a7:bf:5d:86:6c:54:44:51:37:e4:00:23:5a:06:b4:ab:d4:e4:
f4:a6:ed:9f:c7:e5:a8:a6:0a:17:9a:d3:44:a6:72:56:38:8b:
b6:bc:ed:d7:fc:5b:e2:e7:1f:d1:74:5f:9c:4f:c2:ee:1a:3b:
77:ad:cb:1d:5f:6e:b3:df:36:d7:ed:f6:43:34:90:d1:da:d8:
5f:da:2f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 06:28:43 2024 by rpki-client on console.sobornost.net