Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vOQ7N-q91rSrSiRTA1uRg0PoF1Q.roa
File: vOQ7N-q91rSrSiRTA1uRg0PoF1Q.roa (raw, json)
Hash identifier: K9eFH2qLl1bMCW72NLhM7mZlWga6Ce48LH/vqrn+XkQ=
Subject key identifier: BC:E4:3B:37:EA:BD:D6:B4:AB:4A:24:53:03:5B:91:83:43:E8:17:54
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1132
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vOQ7N-q91rSrSiRTA1uRg0PoF1Q.roa
Signing time: Fri 05 Apr 2024 19:52:48 +0000
ROA not before: Fri 05 Apr 2024 19:52:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4402 (0x1132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 5 19:52:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BCE43B37EABDD6B4AB4A2453035B918343E81754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:1d:be:da:69:2e:80:b0:cf:5c:d3:13:7e:
eb:2b:97:cf:ce:2d:5f:28:61:37:46:9b:dc:e8:5f:
7f:95:51:cb:49:ba:83:a9:ed:67:47:50:e5:9d:4a:
02:12:d8:7a:20:52:30:6f:76:25:6a:4c:7b:4d:42:
64:7b:95:2d:12:46:ee:c3:ef:3b:07:f2:e6:6e:16:
3e:b6:f4:f0:b5:b9:99:ca:03:ca:1d:6b:c7:c2:4a:
f9:dd:fb:d6:21:42:70:70:86:01:ed:db:8f:65:95:
d3:02:d4:77:28:e1:24:f3:3a:67:4b:2b:76:c6:52:
1d:50:c3:98:68:47:6b:40:50:bd:4d:73:d6:1b:bc:
99:8b:47:ec:91:a5:18:d1:25:0f:91:30:e9:7b:c3:
d2:d0:1c:02:ae:e7:d3:ff:0e:4f:d3:d0:2b:55:c1:
fa:f1:5a:f4:e7:ea:cf:9b:a5:6b:18:a7:c6:d1:c2:
10:cf:71:16:8d:be:d1:14:89:d5:cc:5f:eb:0c:f5:
aa:f4:16:2d:0a:b2:aa:15:ae:30:26:7f:ff:93:3c:
02:dd:f9:49:3b:24:c9:4c:82:24:4b:02:8e:30:bb:
a0:6b:72:b4:17:f5:23:95:a6:bb:f7:a5:19:c5:6c:
31:6f:8e:90:16:f7:18:bf:4c:87:60:eb:db:48:62:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E4:3B:37:EA:BD:D6:B4:AB:4A:24:53:03:5B:91:83:43:E8:17:54
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vOQ7N-q91rSrSiRTA1uRg0PoF1Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:aa:b4:80:64:23:a0:82:30:9b:5a:33:95:29:3f:76:78:ed:
fb:96:32:ab:ea:38:b8:ff:b0:eb:7a:27:af:2d:d1:0d:4f:f6:
10:c0:c4:5d:d5:26:39:f4:2d:ac:77:49:ce:8f:fd:45:ca:93:
b8:b9:58:41:a0:c7:0e:c4:c5:59:a5:a8:e0:f7:e2:e1:3c:a6:
7b:13:a4:32:2f:47:a7:a9:59:ae:11:32:4b:10:5d:0c:12:af:
00:e1:a3:81:61:c7:40:91:96:13:06:d8:d5:9d:c5:93:f5:3d:
a1:f4:73:3c:91:d6:69:05:fa:5e:a7:e7:11:1c:89:7e:81:de:
91:03:68:a0:73:6f:5f:9e:16:3b:5e:92:87:71:bf:de:07:2d:
d4:68:8e:18:9a:63:e2:e0:5d:fd:7b:38:b5:f5:c8:dd:76:bd:
ca:34:42:a8:0f:4d:d4:f0:c8:63:44:c9:6d:06:05:32:f8:ac:
5f:4a:74:3f:6c:b0:67:eb:1b:0c:fa:3e:36:d0:77:e4:94:e9:
7c:ce:6f:b3:01:a6:be:a0:8b:ce:71:1f:89:74:36:fc:2f:eb:
85:12:ca:22:42:91:90:6e:3e:4c:de:cf:36:5b:30:80:14:ea:
d6:97:ee:78:40:ac:88:c3:b2:18:c8:33:4c:1f:0a:5f:24:f7:
e1:90:13:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 06:04:29 2024 by rpki-client on console.sobornost.net