Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/kZsk1iafvWE69IfXQMlpZDM22R4.roa
File: kZsk1iafvWE69IfXQMlpZDM22R4.roa (raw, json)
Hash identifier: wKcAwirAyjm0Dj+NokXN6aR29XxNpVceTHHhDAuwChs=
Subject key identifier: 91:9B:24:D6:26:9F:BD:61:3A:F4:87:D7:40:C9:69:64:33:36:D9:1E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B3E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kZsk1iafvWE69IfXQMlpZDM22R4.roa
Signing time: Thu 02 May 2024 14:54:07 +0000
ROA not before: Thu 02 May 2024 14:54:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6974 (0x1b3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 14:54:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=919B24D6269FBD613AF487D740C969643336D91E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:7e:49:37:ca:89:cc:40:53:2b:2d:bb:45:
99:a3:f7:10:cf:df:30:65:b5:6f:ef:bc:3c:40:3b:
4a:97:6a:fb:49:de:cd:09:c7:94:61:76:32:5d:d9:
ae:1d:db:47:63:82:04:56:25:4f:28:3a:63:5d:2e:
e8:bb:89:99:ba:99:a8:2a:b8:6d:05:44:e5:4f:81:
2c:3b:d0:12:02:5c:ba:88:5e:92:dc:0d:11:8b:ab:
fd:a7:e2:2a:1e:76:ac:26:4a:7c:7a:30:23:9e:30:
18:5d:b2:24:1b:49:ca:99:91:30:e0:d3:4d:08:2a:
b2:95:10:6b:8b:9e:1f:3a:b0:5a:03:dc:6d:c7:97:
ba:3f:30:a4:43:59:0f:e4:0d:c9:79:16:3b:6f:b5:
6c:62:48:2e:2d:3f:06:b5:c6:6f:1b:74:83:57:64:
8c:12:ee:bb:87:2a:e0:60:f9:ba:db:c7:08:e8:7f:
6e:a7:55:60:6f:f5:63:5d:dd:c7:a6:46:89:12:f6:
f4:b1:d5:21:5a:6f:cb:45:f7:25:8e:b6:97:7c:80:
1b:ec:f4:90:91:02:e9:62:fd:26:ba:e4:df:fd:ce:
f7:84:ce:44:97:67:2d:bc:05:17:f2:8e:1c:56:11:
28:18:17:21:41:87:02:4a:da:a6:64:97:61:16:f9:
8d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9B:24:D6:26:9F:BD:61:3A:F4:87:D7:40:C9:69:64:33:36:D9:1E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kZsk1iafvWE69IfXQMlpZDM22R4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:33:90:bb:7f:cd:8f:da:b3:8b:2a:25:26:44:66:07:1b:70:
66:21:2c:45:bc:20:d2:15:01:8d:7a:b9:15:b9:38:70:30:74:
ed:f2:c6:40:60:2d:17:79:50:19:46:ac:bc:28:67:72:a7:0c:
bb:67:68:e2:a9:d1:4f:cf:c6:99:32:54:9f:bb:40:fd:13:56:
36:43:f3:a6:51:7e:80:99:c6:4e:bc:dc:5a:6e:dc:31:cc:92:
db:01:c5:6a:4f:42:05:68:fc:28:d3:7a:b5:80:aa:0c:5f:de:
f9:ea:f3:e0:0d:f8:e6:5d:cb:ae:78:84:3e:c3:d3:29:64:dc:
a2:dc:87:e7:91:da:88:72:f1:44:f5:b6:cd:14:45:db:b0:00:
4d:3f:2d:59:dc:47:92:2a:af:f6:a0:01:fa:07:b8:6e:65:9c:
37:92:45:7f:d7:dd:38:6d:1e:7c:32:bb:ba:95:e0:ed:c9:b7:
88:1d:ed:8a:cc:26:78:54:f4:30:05:77:e8:d4:f8:bb:f1:62:
6d:fe:79:22:70:1c:9f:77:55:ae:7f:08:9b:48:8a:47:17:15:
70:69:14:f2:d1:4f:54:9a:70:05:a6:bf:1a:a5:a1:1e:37:98:
f0:26:e2:88:2e:39:04:2a:97:bc:6a:d6:26:8a:8a:64:e6:1c:
e5:58:78:cf
-----BEGIN CERTIFICATE-----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Generated at Thu May 2 20:04:04 2024 by rpki-client on console.sobornost.net