Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/LMydYFAsDsaM6p2fUfCmcNWuB_w.roa
File: LMydYFAsDsaM6p2fUfCmcNWuB_w.roa (raw, json)
Hash identifier: AiyTdAsSe32oF98jHWRle11nXnDtXVzxcGlo+FHsXyg=
Subject key identifier: 2C:CC:9D:60:50:2C:0E:C6:8C:EA:9D:9F:51:F0:A6:70:D5:AE:07:FC
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14C6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LMydYFAsDsaM6p2fUfCmcNWuB_w.roa
Signing time: Mon 15 Apr 2024 08:53:22 +0000
ROA not before: Mon 15 Apr 2024 08:53:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5318 (0x14c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 08:53:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2CCC9D60502C0EC68CEA9D9F51F0A670D5AE07FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a0:d7:48:c9:95:56:a6:d6:77:ff:d2:23:a1:
ac:c1:70:7d:d6:32:b8:57:98:2d:75:a7:5a:37:84:
5b:0f:f3:7d:53:4b:13:ba:d1:35:31:42:2b:ed:7d:
9c:a3:a1:14:62:92:62:2e:9a:99:29:1b:ba:51:2f:
d1:84:f0:a4:9e:20:11:0d:10:3d:2a:f9:07:51:2a:
9a:35:9e:05:eb:eb:77:36:95:f8:6a:da:36:d0:40:
46:43:28:08:a6:57:27:83:39:6b:a5:f1:be:16:85:
ef:c5:6e:04:1f:47:b8:b3:53:05:75:34:36:6a:41:
0d:70:66:e6:b9:f4:8c:db:18:64:89:0e:89:ea:3e:
32:05:7b:94:35:2b:52:8d:4c:ab:ce:e2:98:4b:ee:
37:23:85:4b:04:76:ab:d7:5c:d5:6c:ae:df:b4:f1:
6b:ea:21:a4:e2:99:8e:8d:58:81:91:7c:0d:6f:e7:
ae:78:0d:87:aa:f0:f7:f9:97:f1:b4:cc:37:c0:0b:
ba:22:6c:3b:b4:a0:bb:e3:57:cd:b2:a2:57:ac:43:
83:62:ff:ca:3d:c6:0a:7b:4a:2f:3e:de:89:92:85:
eb:6f:d8:0f:db:bf:4c:75:14:ae:7e:bb:78:b9:a3:
14:ea:97:cd:20:23:f5:3c:5f:28:71:66:c7:55:4b:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CC:9D:60:50:2C:0E:C6:8C:EA:9D:9F:51:F0:A6:70:D5:AE:07:FC
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LMydYFAsDsaM6p2fUfCmcNWuB_w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:94:b6:e0:52:c6:b2:ae:9f:37:06:2e:07:d3:c8:7e:c3:51:
4c:4b:db:e6:e1:f5:d8:45:31:c3:67:7c:92:a9:a3:b4:92:aa:
3f:28:c9:70:96:0c:8d:dd:04:98:99:27:42:4d:b3:a5:7e:92:
93:31:9b:39:d8:bb:67:06:78:72:d4:13:07:e1:39:62:aa:c1:
e9:6c:a9:fd:b5:18:c6:24:3c:02:25:e3:f8:86:b0:e0:6e:2c:
0a:6f:e1:9e:06:e1:f8:e9:b1:1f:23:89:98:96:28:8c:e9:0b:
34:74:02:b3:4f:c1:b4:f7:8c:3c:6d:12:1b:79:c5:9d:6b:b1:
42:8e:c1:88:71:0c:c1:4c:ed:c2:fa:50:19:c0:8b:6e:82:ff:
03:f5:b7:71:a5:83:0e:bb:fd:be:c0:d7:d0:40:27:30:35:e9:
a1:a7:a3:39:ed:72:0f:79:b7:06:35:1f:01:44:8d:22:b5:19:
dc:32:0b:04:0a:3c:41:27:20:16:c7:9d:2b:a7:22:31:04:11:
44:6b:f4:6f:e5:41:c6:8a:d1:38:96:c4:2a:6a:b6:82:71:0d:
ba:b2:81:94:be:90:69:66:fd:65:8a:0c:88:1d:fe:74:5d:45:
bd:d8:bf:ef:46:54:68:a9:1c:4f:03:c6:b7:fa:62:22:de:c8:
5b:08:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:29:25 2024 by rpki-client on console.sobornost.net