Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/VliWqr7EgJ2kN-9XzdQTA47fc5Q.roa
File: VliWqr7EgJ2kN-9XzdQTA47fc5Q.roa (raw, json)
Hash identifier: lNCSSZzoIm36xhEVHee5VA32RWJsHIcKViYRMFzou/4=
Subject key identifier: 56:58:96:AA:BE:C4:80:9D:A4:37:EF:57:CD:D4:13:03:8E:DF:73:94
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BC2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/VliWqr7EgJ2kN-9XzdQTA47fc5Q.roa
Signing time: Fri 03 May 2024 23:54:25 +0000
ROA not before: Fri 03 May 2024 23:54:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7106 (0x1bc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 23:54:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=565896AABEC4809DA437EF57CDD413038EDF7394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:fe:be:e5:a4:52:2d:64:29:fe:4c:79:24:
68:7d:09:92:20:20:f3:ca:16:06:b3:dd:29:15:17:
88:4d:1d:73:87:84:b8:56:6a:52:13:2c:17:d8:6f:
88:9b:b1:12:40:c4:16:df:cb:0c:47:18:20:91:54:
4a:c3:7b:b1:32:e3:81:da:75:b9:fe:06:62:22:72:
70:ff:b7:67:5e:ee:15:96:14:7a:43:88:d5:da:0c:
5f:85:80:bf:11:26:9e:d2:bb:a6:92:62:13:53:c6:
6e:73:ba:20:ed:f7:3f:42:e9:fd:ed:56:47:d4:7e:
51:1e:dd:6e:99:7e:9c:49:b3:d7:e5:ef:f5:51:56:
4b:80:a0:fb:45:ad:99:03:2b:2b:6a:66:43:a0:2b:
c7:fe:2f:24:fe:cd:ee:6c:42:ae:05:71:f9:7d:56:
63:a8:e4:aa:39:60:e9:f0:8d:fd:e8:03:b4:7f:33:
7f:2a:42:d3:09:e6:e5:fa:cb:4b:4c:1a:53:6e:13:
e7:a7:51:53:7b:78:ba:f3:ca:da:00:1e:3a:85:b9:
89:57:56:ec:6b:b3:9a:5b:03:bc:1c:b0:4c:fd:66:
14:1b:8e:0b:9f:00:32:84:ca:65:f4:07:01:56:25:
a5:48:3e:28:79:c4:44:7a:70:7b:20:b4:28:ad:f1:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:58:96:AA:BE:C4:80:9D:A4:37:EF:57:CD:D4:13:03:8E:DF:73:94
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/VliWqr7EgJ2kN-9XzdQTA47fc5Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:8c:06:ff:af:7b:03:01:4e:fd:0f:67:64:b1:88:1b:53:8b:
b6:d3:1c:6f:09:de:43:c1:82:c4:cc:69:b0:a7:d1:01:2b:49:
f9:2b:d7:7a:e2:bf:4e:cb:f1:a5:01:46:20:77:b9:e9:7b:e8:
2d:ed:7e:d5:dc:8e:bf:3f:42:ad:b2:59:72:70:e5:b2:96:cb:
31:25:bb:ac:0f:a9:80:ef:2d:a9:ff:ef:a3:80:3f:b1:cb:b2:
8b:7b:2f:ea:ea:8d:c4:37:3f:f8:5f:02:34:ca:3d:f6:c3:c7:
ff:68:50:59:a2:70:45:8c:f5:c5:7a:08:63:1a:6a:79:db:3f:
3a:31:dd:cf:b7:58:af:57:31:bb:95:87:d3:de:03:72:d8:77:
ec:48:3a:ac:ad:8e:ab:08:93:a0:ea:1f:e8:5a:62:c9:09:f8:
11:bd:1c:8a:08:0d:5d:f8:46:6e:f8:91:88:4b:20:63:de:40:
68:5e:b8:f5:dc:39:f9:33:fd:11:1d:38:6b:47:9c:a5:b4:af:
63:95:6d:5d:70:a0:a9:9d:77:a4:42:45:33:48:89:bb:d3:9e:
c4:50:2f:f2:c3:45:1e:43:17:12:0a:f9:9f:c9:97:45:dc:17:
1e:ee:de:1d:0e:7f:78:97:14:4c:7c:dc:24:85:f2:e6:b7:e4:
4f:e2:a4:8b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICG8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDMy
MzU0MjVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDU2NTg5NkFBQkVDNDgw
OURBNDM3RUY1N0NERDQxMzAzOEVERjczOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3a/6+5aRSLWQp/kx5JGh9CZIgIPPKFgaz3SkVF4hNHXOHhLhW
alITLBfYb4ibsRJAxBbfywxHGCCRVErDe7Ey44Hadbn+BmIicnD/t2de7hWWFHpD
iNXaDF+FgL8RJp7Su6aSYhNTxm5zuiDt9z9C6f3tVkfUflEe3W6ZfpxJs9fl7/VR
VkuAoPtFrZkDKytqZkOgK8f+LyT+ze5sQq4Fcfl9VmOo5Ko5YOnwjf3oA7R/M38q
QtMJ5uX6y0tMGlNuE+enUVN7eLrzytoAHjqFuYlXVuxrs5pbA7wcsEz9ZhQbjguf
ADKEymX0BwFWJaVIPih5xER6cHsgtCit8eD1AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUVliWqr7EgJ2kN+9XzdQTA47fc5QwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1ZsaVdxcjdFZ0oya04t
OVh6ZFFUQTQ3ZmM1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAMIwG/697AwFO/Q9nZLGIG1OLttMcbwne
Q8GCxMxpsKfRAStJ+SvXeuK/TsvxpQFGIHe56XvoLe1+1dyOvz9CrbJZcnDlspbL
MSW7rA+pgO8tqf/vo4A/scuyi3sv6uqNxDc/+F8CNMo99sPH/2hQWaJwRYz1xXoI
Yxpqeds/OjHdz7dYr1cxu5WH094Dcth37Eg6rK2OqwiToOof6FpiyQn4Eb0ciggN
XfhGbviRiEsgY95AaF649dw5+TP9ER04a0ecpbSvY5VtXXCgqZ13pEJFM0iJu9Oe
xFAv8sNFHkMXEgr5n8mXRdwXHu7eHQ5/eJcUTHzcJIXy5rfkT+Kkiw==
-----END CERTIFICATE-----
Generated at Thu May 9 03:53:50 2024 by rpki-client on console.sobornost.net