Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/X7nrkwICKG6fB6aHEpGELgH0Ty4.roa
File: X7nrkwICKG6fB6aHEpGELgH0Ty4.roa (raw, json)
Hash identifier: Ijk3A9HNUbrzpVQ7wcvbrdqiLp7EMHKSBF1GmjO1c10=
Subject key identifier: 5F:B9:EB:93:02:02:28:6E:9F:07:A6:87:12:91:84:2E:01:F4:4F:2E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 128C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/X7nrkwICKG6fB6aHEpGELgH0Ty4.roa
Signing time: Tue 09 Apr 2024 10:23:01 +0000
ROA not before: Tue 09 Apr 2024 10:23:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4748 (0x128c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 9 10:23:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5FB9EB930202286E9F07A6871291842E01F44F2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:e6:eb:4d:db:47:4f:49:83:0e:21:8d:44:
96:0c:82:ab:c9:e1:3d:02:85:e3:8c:04:fc:7e:56:
c9:f1:cc:38:66:5d:87:78:fb:0e:54:5e:84:b2:88:
35:15:66:40:ed:b7:9b:c6:d4:a4:52:c5:49:61:08:
19:e2:40:11:f4:46:da:f2:69:b6:33:27:9f:68:7a:
9a:90:75:b8:48:93:04:1e:5a:c8:be:32:51:fc:85:
a4:08:7a:1a:e1:a7:38:cc:e6:95:14:8a:0b:e9:2f:
de:7c:ff:e1:34:a0:07:c1:57:c0:a9:90:7a:bf:1a:
0c:7a:d8:cc:3a:cf:ba:45:13:bc:9f:e6:21:8a:3b:
18:41:8c:0a:06:c7:cd:fc:23:08:4a:8a:90:ef:93:
0b:76:db:fa:6e:5d:42:de:69:40:28:8c:24:a1:00:
f9:4b:32:68:4b:22:35:ac:1c:88:d7:a6:1a:4b:c7:
e0:99:35:3a:cf:54:11:3b:b7:ca:0c:1e:3e:03:bd:
74:aa:d8:69:69:68:c7:98:81:45:33:04:3e:63:65:
52:23:1b:3d:5c:e0:44:cb:1f:22:15:19:3c:91:f9:
47:90:cb:58:7e:05:d5:2b:89:41:6e:23:37:55:de:
48:f0:06:c0:79:11:9f:8d:2b:47:d5:ec:4c:52:cb:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B9:EB:93:02:02:28:6E:9F:07:A6:87:12:91:84:2E:01:F4:4F:2E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/X7nrkwICKG6fB6aHEpGELgH0Ty4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:2d:13:83:98:2f:47:aa:53:77:41:66:ab:28:a3:4c:9a:34:
08:41:f3:3d:1d:65:db:9d:a8:b0:be:9d:ae:8c:96:27:04:59:
a8:83:b2:25:1b:53:62:e3:d9:e6:ca:db:c7:0c:f1:9d:3e:6a:
56:fb:d6:cc:10:3e:ac:48:b1:b9:be:70:52:36:77:32:93:11:
9f:b1:19:6d:66:8f:df:b7:4a:bd:ce:2c:e3:00:de:49:58:98:
6c:7b:fe:01:3d:5f:fc:51:82:18:4b:9e:9a:36:70:f8:a4:9f:
3a:26:30:58:b8:1f:b6:40:f0:57:68:c7:4e:f3:62:52:46:72:
b3:f0:dd:4e:54:6a:7a:39:bd:b3:87:8e:46:e7:10:6f:55:84:
45:f0:93:31:e5:35:3d:b8:a5:a8:e7:c3:a2:98:92:b2:b7:26:
7d:4b:fc:c4:e4:9a:ae:ac:4a:7a:85:da:e6:b3:56:eb:9d:28:
6b:68:c8:d9:75:b3:36:c2:de:fc:e8:7d:06:da:15:69:45:57:
66:0c:27:7d:12:93:3e:d3:21:dd:66:35:75:a0:24:12:dd:bb:
43:19:4d:80:50:8e:a3:7e:ff:69:fb:83:5e:5f:96:8f:5d:d6:
33:a8:6d:78:f5:d6:da:90:b7:01:d3:d1:ea:7b:ab:3a:3f:0d:
f1:3f:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 16:59:43 2024 by rpki-client on console.sobornost.net