Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/M4liXaT9jSOjTcPd_pBPRVbNaxg.roa
File: M4liXaT9jSOjTcPd_pBPRVbNaxg.roa (raw, json)
Hash identifier: tMN91Mg1cdnWrZ/WiY+K+OpQjyQQwCM2IPHEb/ryGmA=
Subject key identifier: 33:89:62:5D:A4:FD:8D:23:A3:4D:C3:DD:FE:90:4F:45:56:CD:6B:18
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19DA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/M4liXaT9jSOjTcPd_pBPRVbNaxg.roa
Signing time: Sun 28 Apr 2024 21:54:04 +0000
ROA not before: Sun 28 Apr 2024 21:54:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6618 (0x19da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 21:54:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3389625DA4FD8D23A34DC3DDFE904F4556CD6B18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:c5:14:81:0e:a0:e1:ab:99:8c:2d:da:be:
c2:94:5f:35:0e:9d:14:50:ce:c8:af:88:2b:ab:3c:
7a:9a:26:50:8e:fc:7f:2c:6b:02:10:26:0d:cd:c9:
b2:5d:82:6d:c2:99:62:30:4a:37:f3:ef:ed:1a:c4:
09:c5:91:70:21:d2:75:38:44:e4:b5:ef:ec:67:48:
71:eb:ce:db:b4:0a:df:0c:3a:a0:1f:64:02:ff:8a:
59:2c:fe:5e:6f:ff:e1:3a:39:89:90:5d:ae:f5:2c:
7f:c5:f3:d5:76:f9:b8:61:00:e3:cf:71:93:29:d6:
66:aa:d3:c9:0b:6a:8f:c8:e3:b1:39:ca:38:29:8f:
c6:62:40:ce:9a:d1:d7:60:79:5d:6f:9f:6f:91:47:
96:aa:92:ab:e9:4d:80:62:76:cd:aa:6a:e5:81:6e:
16:ca:67:ef:40:a9:53:41:d3:8a:22:1c:ed:30:e3:
5d:21:d4:be:a7:6a:23:fa:a6:d3:45:97:06:27:04:
f9:9a:ee:3c:6c:97:b2:68:6d:46:3b:32:c3:e4:2e:
bd:a9:85:80:08:85:ca:5d:d4:8d:72:e2:90:e1:d5:
71:74:77:0b:d2:34:1d:50:e3:99:d8:84:4e:13:35:
ee:7f:b5:b9:a1:62:98:b9:d7:84:60:8d:37:bd:aa:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:89:62:5D:A4:FD:8D:23:A3:4D:C3:DD:FE:90:4F:45:56:CD:6B:18
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/M4liXaT9jSOjTcPd_pBPRVbNaxg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:98:69:53:61:71:0f:1f:37:76:60:c4:b0:4e:86:2a:79:96:
04:0c:f5:08:1a:55:76:e8:9b:c8:33:fa:93:eb:0a:5c:39:b6:
0d:5d:6f:a8:1c:3a:be:99:fa:c0:56:b5:9d:48:bf:ab:ec:ec:
23:79:90:0e:66:5f:2d:60:fc:92:91:54:ac:69:6b:19:ca:38:
80:99:22:9e:b3:b5:b1:82:62:0c:39:4a:77:20:00:b3:66:39:
40:47:27:fd:2d:f0:16:12:2d:cd:18:02:1b:d2:73:37:bb:25:
4c:e8:a4:10:d4:40:5f:88:17:75:9c:b0:fd:c9:f1:10:ad:89:
66:3b:cd:ff:9a:cd:4a:e6:1b:f0:66:0f:9e:2c:78:84:57:53:
22:35:09:d5:8d:b2:e2:43:e0:ad:fe:75:eb:53:14:31:8c:13:
eb:8f:16:b3:7e:2a:e8:78:7d:f1:9a:28:35:15:24:99:93:64:
43:77:f4:d6:dc:9f:3f:e7:ca:18:cc:60:1f:13:15:ad:e7:b4:
4f:95:61:cf:5f:89:5d:d8:dd:c4:63:77:e3:a2:bd:93:51:a7:
6f:da:1b:07:2a:49:63:f2:9c:aa:4c:44:8a:fc:86:ce:3e:89:
3e:83:91:a4:f2:05:ba:2d:42:fc:82:58:dc:0b:39:ce:49:e9:
ff:64:2e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 06:28:43 2024 by rpki-client on console.sobornost.net