Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/RaobonjpeUGiDUhuDmo8pJlWyXI.roa
File: RaobonjpeUGiDUhuDmo8pJlWyXI.roa (raw, json)
Hash identifier: XrAntBWZ9kz20b/YodYRW5nHP27tPdfF63QjYAlpJGA=
Subject key identifier: 45:AA:1B:A2:78:E9:79:41:A2:0D:48:6E:0E:6A:3C:A4:99:56:C9:72
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1590
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RaobonjpeUGiDUhuDmo8pJlWyXI.roa
Signing time: Wed 17 Apr 2024 11:23:23 +0000
ROA not before: Wed 17 Apr 2024 11:23:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5520 (0x1590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 11:23:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=45AA1BA278E97941A20D486E0E6A3CA49956C972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:6f:f5:31:ab:07:4d:65:22:95:50:49:7a:
b6:e1:e8:13:89:d2:26:6a:e6:7f:80:55:d0:ae:ac:
05:7a:84:8d:f5:90:33:f7:fd:7c:b5:3a:f7:27:aa:
c2:00:74:ae:9a:17:87:6f:41:8d:be:e0:d5:51:e8:
9c:c0:6b:81:0b:5b:9e:72:b1:db:dd:de:9a:05:18:
91:7c:a3:e8:fb:86:44:6e:e2:47:0f:54:34:0a:59:
ef:03:80:70:28:8e:4f:5e:00:73:21:09:bb:3c:69:
92:cd:21:81:4d:bd:80:0f:d7:33:1e:58:a2:97:4d:
dc:28:ed:d5:f3:f3:13:fd:c5:5c:7e:c8:b0:1c:18:
91:9a:40:14:03:be:d4:24:f4:82:ca:21:ec:09:3a:
b6:1e:92:38:b1:27:92:53:c3:9e:95:70:9d:4d:8b:
1f:c9:fc:86:40:31:7b:f3:37:1f:2e:23:ae:f4:24:
3c:70:c4:35:c9:bb:73:6c:78:5f:de:e3:68:68:77:
17:c0:11:8b:0d:77:5e:ee:bc:4a:4e:a4:ff:c6:ec:
b5:67:6b:0a:61:d8:89:b2:ab:9f:0e:ca:da:e3:30:
90:d2:ab:81:22:c4:e4:2b:c6:54:f0:89:ab:ba:b7:
cb:13:df:73:ad:cf:22:33:1f:e6:80:a0:77:28:df:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AA:1B:A2:78:E9:79:41:A2:0D:48:6E:0E:6A:3C:A4:99:56:C9:72
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RaobonjpeUGiDUhuDmo8pJlWyXI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:a3:aa:93:c5:e7:09:51:79:74:cb:43:f6:f8:a0:93:98:97:
1b:93:12:d9:c8:8a:4e:18:5e:8d:66:cc:a4:6c:5c:17:e9:6d:
ad:2d:96:23:95:50:1a:c9:cb:0d:31:6e:06:ba:f2:3b:e6:85:
f3:d3:83:23:f8:f0:ef:51:79:0b:ec:d3:a3:43:9e:46:e7:00:
5d:a7:25:7e:7d:dd:5d:95:f0:d4:52:ba:a0:8b:fd:91:37:8a:
f0:c8:dd:be:81:b1:eb:93:14:cf:d8:6e:f1:b2:18:e8:51:0e:
ca:1a:25:6c:9f:a7:74:49:93:ee:fb:a8:d2:e7:f6:2d:1f:7b:
82:0c:41:86:3a:14:b3:6c:d0:d7:85:a1:e9:e6:b7:32:62:81:
26:31:07:50:e4:7f:c7:84:0f:11:ae:65:0e:ca:b0:54:33:ad:
c2:ca:e8:e0:b8:b8:f4:22:fd:cb:12:75:1a:c8:39:2e:2f:ed:
4e:5e:ba:43:7d:98:b1:88:cc:cd:bb:93:a7:68:36:07:ca:23:
3f:cd:92:c7:87:c3:23:21:af:b7:a7:c4:5d:b0:98:24:50:0c:
9d:df:05:29:9d:c0:25:d6:0c:3c:78:4a:34:e7:d1:87:e1:31:
b7:f6:14:59:80:c2:87:f4:7f:6f:c7:a0:9a:0b:48:97:f1:6b:
fa:17:00:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:49:38 2024 by rpki-client on console.sobornost.net