Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/YARofkywZ9WTNp0wIjp8XqKoJSk.roa
File: YARofkywZ9WTNp0wIjp8XqKoJSk.roa (raw, json)
Hash identifier: k7k9Ieaw3xIfAVNidix+/PeYgSjly5colXOhSs5Zlac=
Subject key identifier: 60:04:68:7E:4C:B0:67:D5:93:36:9D:30:22:3A:7C:5E:A2:A8:25:29
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1340
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YARofkywZ9WTNp0wIjp8XqKoJSk.roa
Signing time: Thu 11 Apr 2024 07:23:11 +0000
ROA not before: Thu 11 Apr 2024 07:23:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4928 (0x1340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 11 07:23:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6004687E4CB067D593369D30223A7C5EA2A82529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:0f:a7:fa:a2:7e:a4:48:53:3f:c8:2c:09:
5b:ed:63:02:27:11:fc:1c:d5:8a:cb:26:3c:13:46:
c5:0b:8d:dd:28:a1:de:b0:5c:3b:d6:c1:38:de:a1:
75:5e:52:78:db:7c:ce:e0:76:19:6c:31:bb:9d:6f:
71:43:15:53:d4:91:c5:93:59:7e:b9:7e:84:17:cc:
27:e0:bd:b2:8a:37:32:b7:d0:cb:00:ea:a9:99:f2:
6c:19:26:43:b5:d3:b8:ca:c7:c2:93:b9:6a:05:ea:
97:8e:53:a8:16:c6:85:86:e6:f1:1b:22:ac:6f:a5:
73:75:72:e7:c8:d5:93:be:ad:a4:18:16:f1:65:21:
bc:28:53:ca:ea:09:5a:8b:85:91:9b:89:a2:47:90:
35:76:a7:8f:58:dc:9c:a1:94:80:5f:fe:99:74:0a:
69:ef:4f:55:9e:bd:7f:a8:ee:8f:52:ef:2f:30:b8:
82:ea:49:3b:d6:a7:e9:cd:f5:e3:6c:c9:e4:00:22:
ff:db:e9:84:f3:bd:61:56:58:7f:28:3c:3f:f7:91:
0d:36:ad:aa:0f:dd:40:18:db:0b:56:a1:55:66:42:
62:4c:d1:3c:6e:1b:aa:ed:54:95:8e:dd:21:51:ac:
34:d1:57:bf:90:49:27:84:65:31:9b:a5:f9:2a:0f:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:04:68:7E:4C:B0:67:D5:93:36:9D:30:22:3A:7C:5E:A2:A8:25:29
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YARofkywZ9WTNp0wIjp8XqKoJSk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:fd:00:96:b2:7e:56:99:ca:d9:c4:1f:e1:b5:9c:93:93:7e:
70:1f:6a:f9:7d:b5:fb:66:20:7d:8f:35:8c:42:da:b4:93:2c:
f5:22:d2:5e:4e:e6:a5:7e:49:fe:58:4f:4f:2e:47:1c:f3:fd:
6c:0d:bf:4b:41:9f:b9:8f:fc:26:e5:4c:25:38:75:5e:4e:f8:
82:ad:c7:c0:45:b0:10:e9:0a:17:76:cf:c4:77:5f:6c:1d:09:
20:55:aa:f5:f3:e4:6b:e3:ac:ed:65:11:05:3f:12:3b:0e:e3:
a9:8b:a6:a5:f9:ca:9c:ef:e9:b6:fd:c1:7e:af:5d:54:de:76:
03:f3:c4:f0:6a:b7:a1:c2:7f:49:57:f3:87:ee:99:09:90:36:
3a:c5:d7:0f:96:f8:6f:eb:e5:e9:c8:ae:a4:1f:d4:e8:07:3a:
6c:19:18:74:3a:01:c1:f5:34:65:34:44:0c:31:4e:07:d9:f1:
7a:3c:a2:c0:30:c0:05:3e:63:9c:7d:ff:d6:c8:bb:a6:3d:ac:
9b:eb:f6:49:b8:87:89:b0:5f:81:fe:eb:2f:b2:f0:6e:a7:51:
2a:8f:2d:82:af:39:e4:fa:ea:35:ee:bf:be:ae:ee:ae:e5:68:
72:c2:a3:e8:78:0d:12:63:3d:ca:18:ff:6a:25:eb:a9:84:dd:
34:26:0b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 14:03:39 2024 by rpki-client on console.sobornost.net