Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/X-hPubOXvQdtrYNz-UxtpKki3IQ.roa
File: X-hPubOXvQdtrYNz-UxtpKki3IQ.roa (raw, json)
Hash identifier: ffk8KurwovCLpRj+xmieGCOyDZ0fFqEcTitVMwm7hVc=
Subject key identifier: 5F:E8:4F:B9:B3:97:BD:07:6D:AD:83:73:F9:4C:6D:A4:A9:22:DC:84
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1750
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/X-hPubOXvQdtrYNz-UxtpKki3IQ.roa
Signing time: Mon 22 Apr 2024 03:23:34 +0000
ROA not before: Mon 22 Apr 2024 03:23:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5968 (0x1750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 22 03:23:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5FE84FB9B397BD076DAD8373F94C6DA4A922DC84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:0a:ca:59:58:34:e8:3a:72:6d:ec:9e:ef:
b2:6a:56:43:76:3a:25:05:63:e5:4f:2d:1a:a9:9a:
18:98:1e:3d:5d:f2:39:8a:cc:f5:bc:aa:eb:e3:86:
7d:10:cd:48:fb:44:fa:e5:54:69:ca:ab:dd:6a:50:
ff:46:9c:7f:22:c1:15:35:75:b1:e0:0b:a4:c7:ce:
ab:da:51:2c:a2:8c:02:9f:66:58:d9:77:7f:2a:cb:
fa:0d:fe:d6:1c:92:31:69:a9:be:d4:ea:75:ca:f2:
79:c5:00:ca:b2:f7:aa:bd:12:4c:95:47:25:0d:ef:
67:f1:5d:94:8d:9f:08:a8:7f:61:df:c5:ed:01:f6:
4a:c3:3c:98:40:2e:bb:38:80:72:fb:01:c8:f8:8a:
37:88:5a:30:ce:90:73:6f:bf:54:b3:19:fa:78:a9:
0b:53:93:d8:b2:79:f7:d2:8a:17:f7:9e:61:74:11:
61:23:4d:d8:db:f9:35:3c:7c:14:c1:a2:02:bb:d0:
a4:0a:67:fd:4a:7b:62:b4:11:6f:7a:55:8a:d0:44:
24:08:50:5d:10:47:bc:43:90:39:bc:1e:22:6d:df:
1f:17:cf:7b:31:fb:a7:a3:97:e7:4d:2e:b1:b6:e4:
01:a7:ce:d6:cd:62:f8:ad:09:57:87:d8:27:b8:15:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E8:4F:B9:B3:97:BD:07:6D:AD:83:73:F9:4C:6D:A4:A9:22:DC:84
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/X-hPubOXvQdtrYNz-UxtpKki3IQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:47:ae:76:17:ea:6f:e8:6f:62:fd:d8:b2:14:61:fb:67:23:
7f:a0:ab:d7:3c:bf:5e:1d:86:fa:01:e8:e3:64:fd:64:1f:61:
30:3e:6f:25:19:d2:ef:4a:d8:3c:bf:1d:ab:30:fa:8c:7a:99:
53:9d:7e:ec:b3:2a:de:0b:40:b5:82:3c:29:c2:bd:e0:48:0b:
0b:46:a6:82:84:fd:3c:e9:d6:c5:a1:3d:2f:87:f6:4c:dd:ce:
2b:42:ec:40:e5:a4:43:60:12:27:5f:de:c5:5a:17:d8:ae:73:
d8:b7:54:d0:94:39:1c:ff:f9:7c:6b:58:46:e1:d0:9f:e6:1b:
64:65:33:38:ae:c2:6a:b9:cb:56:6f:e7:86:11:17:26:dd:13:
2f:02:dc:1d:16:40:90:e8:05:ba:65:80:15:43:29:6a:89:11:
bf:2e:c5:92:25:7a:75:42:9a:5e:42:eb:13:f6:05:4d:01:e1:
72:bc:aa:20:64:c2:4d:03:28:70:58:38:3c:44:85:98:96:4f:
20:bf:32:c8:80:8e:a9:11:d2:fb:f0:60:17:19:b2:62:01:6e:
85:32:a9:17:56:6e:9a:a0:b6:d5:4f:7f:8b:63:09:a8:1e:6d:
38:77:b1:2b:f5:16:c2:ad:fc:70:e0:b8:af:67:01:ce:f7:02:
74:ed:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:15:13 2024 by rpki-client on console.sobornost.net