Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/kES2J9hIDjcgnhgCYW14ONg38ps.roa
File: kES2J9hIDjcgnhgCYW14ONg38ps.roa (raw, json)
Hash identifier: /ZNB/xOlymIWPeRl1ta0KZ5FPmCgPznnWZWHiKYWH6E=
Subject key identifier: 90:44:B6:27:D8:48:0E:37:20:9E:18:02:61:6D:78:38:D8:37:F2:9B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 184C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kES2J9hIDjcgnhgCYW14ONg38ps.roa
Signing time: Wed 24 Apr 2024 18:23:55 +0000
ROA not before: Wed 24 Apr 2024 18:23:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6220 (0x184c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 24 18:23:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9044B627D8480E37209E1802616D7838D837F29B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:b6:bc:ca:be:80:4d:22:5e:e4:19:dc:20:
46:bc:b6:3d:23:de:31:f2:a0:9b:fa:1b:33:5d:89:
cf:3b:62:8a:d1:7c:d9:98:da:3e:d7:36:a9:d9:4e:
f1:1b:7d:10:15:4b:86:cb:b8:f2:b9:91:d2:09:3a:
d9:bc:bb:23:f6:76:3c:e4:c5:ae:f9:cc:a7:f0:d3:
23:97:14:de:01:78:7c:38:e9:cb:ee:cc:2f:5a:91:
d7:b7:3e:bb:a6:08:ba:62:ab:5b:04:6b:db:17:f3:
39:87:6a:03:03:ac:75:47:d4:81:32:c4:29:53:bc:
5a:4c:f0:af:c7:31:69:00:47:c4:2d:9e:96:17:21:
8a:28:bb:e4:59:8b:94:e8:7a:f2:05:6a:c4:9c:95:
b1:b0:5d:cf:8a:45:ef:74:c8:fb:60:80:c3:86:3c:
95:fe:7d:f5:55:9d:3d:7c:12:1a:f9:71:29:34:d9:
7d:74:c9:f7:49:07:54:46:37:71:eb:27:e5:98:05:
86:e7:41:c4:be:d3:4e:bd:05:1d:1a:07:b1:a8:1b:
91:cf:06:56:a4:29:98:cc:50:27:0c:12:41:24:fe:
09:f8:50:96:45:e3:3b:f5:c8:91:78:ba:86:ba:a2:
f6:a6:0c:14:3d:87:69:00:d8:40:d7:f4:ab:17:71:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:44:B6:27:D8:48:0E:37:20:9E:18:02:61:6D:78:38:D8:37:F2:9B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kES2J9hIDjcgnhgCYW14ONg38ps.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:73:e1:ec:74:34:ed:bd:ad:6b:11:0d:8b:c1:84:a7:ce:50:
33:a6:26:23:a1:9a:80:b6:ee:ce:6d:26:47:ce:96:6e:df:e0:
5c:23:e7:d5:e6:da:5f:3e:ba:2c:c2:e6:e0:19:5d:3e:f8:55:
db:ef:51:90:4b:05:9d:e8:9a:d8:74:52:f4:91:40:b8:39:e1:
f6:85:4c:fd:35:9e:a1:81:f6:3b:8a:2a:7a:73:0c:5b:42:3a:
75:ca:73:60:f7:72:77:82:f2:75:01:0d:62:ae:76:96:7c:db:
a2:e7:50:e6:67:7e:bc:0a:c5:dd:9d:58:89:e3:45:fe:fc:70:
2f:7f:64:e5:38:71:7c:85:26:35:b2:51:e9:40:68:48:73:ae:
c3:db:55:c0:bb:80:c3:97:20:9e:4d:7b:49:38:0a:30:bf:2c:
18:ec:1b:d5:07:bf:f7:c0:15:14:32:e1:f7:59:5a:1f:b5:c8:
f2:06:e5:29:79:c4:42:31:74:85:db:46:c5:3e:3a:23:e7:e5:
39:65:b6:0c:3f:79:24:59:af:5b:ad:23:ca:f6:50:6f:0d:33:
64:1f:a9:95:d1:7e:38:b9:89:06:c2:b0:12:0a:44:78:be:79:
94:d9:87:6c:82:b8:ee:30:61:57:5b:ee:5b:bb:fa:51:13:0d:
00:5c:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:29:22 2024 by rpki-client on console.sobornost.net