Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/uH_DsGMB0fH-VJyknGLNUEUZ6kk.roa
File: uH_DsGMB0fH-VJyknGLNUEUZ6kk.roa (raw, json)
Hash identifier: 16VV6qzPjaUI51KdUAE9w8Y3cu2gxUEy/3RsPi/rT3Y=
Subject key identifier: B8:7F:C3:B0:63:01:D1:F1:FE:54:9C:A4:9C:62:CD:50:45:19:EA:49
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1AF6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uH_DsGMB0fH-VJyknGLNUEUZ6kk.roa
Signing time: Wed 01 May 2024 20:54:03 +0000
ROA not before: Wed 01 May 2024 20:54:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6902 (0x1af6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 1 20:54:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B87FC3B06301D1F1FE549CA49C62CD504519EA49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:38:83:f8:cc:24:bd:4c:a5:41:31:ea:5c:
11:a7:e4:20:b3:92:b1:b4:54:4a:e0:23:1e:22:6b:
1c:cf:b1:f1:e5:e1:3d:03:84:ca:3e:81:a1:66:b2:
22:46:af:7a:4d:b7:95:d3:73:cb:7f:71:d9:2c:f6:
7e:e7:18:06:be:c1:32:e7:ed:52:b5:db:1e:b5:83:
27:fc:2c:5d:2d:b8:4f:ee:ac:db:f9:de:a7:dc:0b:
e0:eb:68:28:47:83:45:7a:1c:51:78:4a:c6:bb:89:
be:85:00:c8:04:0c:77:9e:88:29:ce:00:56:67:67:
b5:96:3c:8d:1c:de:9c:e2:d1:4a:c0:97:0e:6d:19:
1d:87:5c:8a:9f:b6:d0:e0:5b:45:a8:f0:02:03:b2:
f2:b4:b6:02:d7:30:89:36:8e:f9:59:98:8d:8e:87:
73:b2:82:e8:16:17:13:16:99:bb:35:3c:62:b1:18:
5d:4e:a9:3b:ea:99:4a:a7:51:44:f0:9d:d6:f7:31:
35:65:b2:b0:1c:b4:f9:0e:40:b6:a0:1d:f4:ad:f9:
ac:36:d3:cb:97:fd:76:96:51:f0:af:02:32:ec:a8:
32:0c:f3:82:b5:27:f6:b7:c2:6e:9b:33:8b:bf:e5:
4b:d3:54:10:2f:91:4d:cf:1b:f3:a1:0c:ed:19:66:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:C3:B0:63:01:D1:F1:FE:54:9C:A4:9C:62:CD:50:45:19:EA:49
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uH_DsGMB0fH-VJyknGLNUEUZ6kk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:9d:47:56:63:f7:ca:e2:d9:03:97:81:f2:7a:53:71:80:12:
37:ec:37:01:8c:c0:13:65:6b:a7:65:a9:46:2b:8f:f1:e2:f7:
f9:63:c5:df:e3:52:e4:62:05:67:5e:25:0d:f1:8d:a3:26:36:
6d:56:81:e5:2e:c9:6c:78:af:89:61:de:5e:7e:db:ad:b9:11:
c0:48:ed:88:0c:a7:43:01:98:92:2b:59:6b:12:b4:df:24:7e:
3e:ae:bf:68:84:82:e5:25:db:70:dc:36:f0:5c:9c:91:b0:c8:
70:b7:6e:e9:43:50:f3:27:04:15:ae:6a:34:4c:b1:cd:ff:81:
aa:b7:fe:ce:1c:ff:59:3c:ff:28:a7:d2:07:d2:3f:49:3e:bd:
81:c5:9a:88:45:07:3a:01:9b:70:87:99:c0:99:74:39:b9:52:
9b:ec:a3:38:ff:05:e3:e8:09:99:14:33:43:13:f3:68:af:b3:
5a:9b:83:7b:5c:f9:68:69:fa:20:95:8b:f9:2c:eb:6a:93:8f:
7f:e8:fc:9a:7d:17:23:96:1b:37:10:23:ce:63:bc:eb:cf:5f:
5f:59:8b:19:e0:e3:6f:bb:83:18:27:bb:f9:9b:5c:d0:a2:1d:
52:a2:d4:2e:9d:94:4d:43:88:e2:13:b0:9a:c8:1d:d1:4c:92:
1b:4c:6d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:32:44 2024 by rpki-client on console.sobornost.net