Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Jk4i0Wiios8QfPeMLjs6Ek0_6_E.roa
File: Jk4i0Wiios8QfPeMLjs6Ek0_6_E.roa (raw, json)
Hash identifier: PvEkoq3h4KiaTaDHLtYwvr7qtpQVVB4qO2IK6q6l0ic=
Subject key identifier: 26:4E:22:D1:68:A2:A2:CF:10:7C:F7:8C:2E:3B:3A:12:4D:3F:EB:F1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0DC6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Jk4i0Wiios8QfPeMLjs6Ek0_6_E.roa
Signing time: Wed 27 Mar 2024 16:52:35 +0000
ROA not before: Wed 27 Mar 2024 16:52:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3526 (0xdc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 27 16:52:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=264E22D168A2A2CF107CF78C2E3B3A124D3FEBF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:28:5b:87:a3:df:eb:7e:50:af:c3:aa:86:
0f:46:88:22:51:a0:e6:f6:a8:28:02:98:e5:a8:65:
59:1e:0c:dc:c4:ca:a0:a8:57:1f:3c:7a:53:ca:42:
50:e9:c5:bd:40:d3:0f:f5:6c:bc:72:24:a9:cc:60:
9e:6f:30:d2:e7:c5:87:bf:59:6f:b5:de:9f:8e:2f:
c3:87:f5:13:79:dc:bd:8a:e4:8b:0d:30:7a:cd:bc:
01:3a:f5:a2:0e:af:65:40:8c:15:3c:fa:9f:a4:fe:
7e:70:cf:cd:30:52:49:25:4f:94:9d:9a:36:ef:93:
f9:c6:12:60:f2:b3:b4:35:b8:3e:ae:b4:82:46:5d:
95:d4:58:4e:34:c8:85:d5:a6:0c:a0:3b:4d:11:d4:
1f:65:b9:6f:3d:01:e7:b7:12:4f:67:c6:55:04:ce:
ed:48:97:3c:2e:14:e2:55:60:b7:41:2d:c0:b1:a3:
16:f6:d9:fc:aa:e1:f5:41:f2:af:f9:9e:7e:dc:e9:
d6:68:44:55:28:ee:a1:72:d7:bc:05:8f:ec:0e:17:
e8:68:74:f6:dc:cb:24:34:05:10:d4:74:7d:ea:cb:
4f:bc:66:74:4b:45:ad:87:d7:a9:b4:58:06:80:be:
8a:df:9e:51:69:32:cd:9d:a1:66:b7:4f:7f:12:58:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:22:D1:68:A2:A2:CF:10:7C:F7:8C:2E:3B:3A:12:4D:3F:EB:F1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Jk4i0Wiios8QfPeMLjs6Ek0_6_E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:08:d9:ff:02:e2:82:de:fe:67:38:fd:80:aa:2a:80:4b:bf:
f8:7b:a8:e3:6b:97:01:98:fc:d9:0f:e7:45:03:17:62:ec:fa:
7c:e1:9b:26:eb:72:4c:4f:bb:37:32:4d:9a:57:8f:51:10:33:
7a:b3:71:72:fb:ec:2b:6d:cb:1b:2b:63:14:af:f0:18:3b:f3:
70:1b:fc:9a:c8:b6:23:00:76:52:cb:4e:85:24:89:d8:1e:9c:
2a:2b:61:c5:ae:14:8e:32:b5:e8:c5:e4:7b:e6:87:51:09:de:
72:d8:c3:5d:70:f1:01:b7:a2:c4:76:53:f6:66:c2:48:17:e2:
da:d4:95:b7:88:1a:c8:c6:e4:b3:c9:32:f9:67:e0:1e:90:98:
19:7a:3c:1c:73:bf:07:12:4a:0e:7b:74:00:d2:18:be:72:d4:
17:6a:36:62:d7:eb:6f:97:d1:cb:58:a2:dc:4b:ff:f5:24:29:
8b:36:15:e5:d6:17:f4:06:d6:47:77:a7:59:4a:0c:15:6a:f4:
49:a0:b0:8e:bb:44:90:0c:a4:bd:ba:b4:38:38:1b:c4:05:72:
36:09:b0:0a:e6:c5:af:cd:14:2b:ad:e2:4b:d9:cd:02:58:8c:
40:10:a7:04:03:0b:a4:88:42:10:8c:19:b9:c8:1e:4a:0e:f1:
ac:d7:95:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 23:44:25 2024 by rpki-client on console.sobornost.net