Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/iqrvM8h2kKZVgbNmjUaINLC03I0.roa
File: iqrvM8h2kKZVgbNmjUaINLC03I0.roa (raw, json)
Hash identifier: bJfx2nJwnKX63gwQgJsU7+Yq1kJBxctxpexSxmhNm8Y=
Subject key identifier: 8A:AA:EF:33:C8:76:90:A6:55:81:B3:66:8D:46:88:34:B0:B4:DC:8D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EB0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/iqrvM8h2kKZVgbNmjUaINLC03I0.roa
Signing time: Sat 30 Mar 2024 03:22:40 +0000
ROA not before: Sat 30 Mar 2024 03:22:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3760 (0xeb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 03:22:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8AAAEF33C87690A65581B3668D468834B0B4DC8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c2:97:04:3f:d9:d6:6a:8e:b0:63:40:a0:be:
be:bb:ce:40:de:cb:80:69:c9:ec:e6:98:b6:11:df:
a4:60:49:9f:f8:87:aa:65:33:99:2a:d8:49:9e:76:
83:78:c6:d9:da:41:ca:60:1d:0f:95:c0:49:c7:1f:
8d:e1:6d:3f:2d:59:2f:3d:cf:7d:39:d7:b6:cd:18:
d0:f2:fc:55:a1:97:5d:41:0d:db:ae:06:82:f8:f3:
79:77:f9:de:b8:18:cd:5b:1f:23:09:e4:2b:cb:da:
f3:7f:e8:39:e9:3f:d8:6f:0d:b0:56:1f:60:3c:27:
57:7d:64:82:a7:c8:d7:fa:c0:c6:f9:f4:d1:74:4b:
51:a0:f3:4d:40:5f:e0:4d:a9:7c:a6:2d:8f:96:54:
e8:f1:3d:0a:45:85:f3:b3:10:c7:91:b0:e3:86:bc:
00:e5:3d:19:b7:73:14:47:32:66:e0:5a:c4:9f:e5:
49:54:10:28:18:91:08:c6:27:ba:42:0c:7c:a9:10:
f2:92:75:96:02:a2:02:17:a1:0e:c2:c3:8c:48:c1:
1c:97:07:99:a6:aa:03:ab:3f:a9:53:17:3b:31:7b:
00:32:67:2b:29:97:84:45:2d:67:ce:09:aa:92:6a:
bd:73:a1:c0:ce:22:6f:b6:8a:47:77:a5:f5:6f:8a:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AA:EF:33:C8:76:90:A6:55:81:B3:66:8D:46:88:34:B0:B4:DC:8D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/iqrvM8h2kKZVgbNmjUaINLC03I0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:c3:11:70:67:2a:bc:dd:42:c8:d3:72:72:3f:3a:f5:0c:5a:
4b:3d:24:61:c5:d5:2f:62:e6:48:ae:79:8e:6a:a2:fd:8a:f2:
e4:75:17:a3:f9:29:ba:e8:a3:09:1f:05:a8:be:1d:5c:14:c5:
41:81:fe:a2:c1:29:7b:a3:97:79:3c:9b:d1:60:5c:23:8f:0d:
cf:e7:53:da:5a:86:68:dc:d8:88:39:a1:94:37:b0:e4:bb:1b:
04:55:5f:64:8b:d2:2f:4c:6d:98:25:04:3a:e4:0b:0f:8f:68:
ed:f7:ba:d6:e1:bf:f5:40:de:bb:a1:d8:e2:78:30:a9:13:62:
fe:7f:c5:0d:96:84:cc:fb:e7:af:d6:e7:fb:62:e5:9d:89:63:
c2:43:e3:bb:f7:74:6f:c4:0b:86:45:71:7a:0c:85:10:a5:95:
df:78:81:9f:e2:c6:5b:ea:49:20:31:1c:59:ee:8f:0d:d3:e8:
55:17:f1:a7:a6:ca:5a:68:c2:24:0c:f2:12:f3:81:30:c6:19:
6c:eb:4a:2e:bf:7f:1b:ba:58:aa:ec:17:45:4f:d8:65:83:ea:
2f:aa:a4:ac:d1:91:5c:d6:7f:44:fa:fa:a7:d0:ce:0e:e7:12:
37:9b:f2:87:c3:61:a8:e3:29:1a:a4:bf:38:42:86:97:35:07:
07:0a:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 09:11:46 2024 by rpki-client on console.sobornost.net