Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/yfpG6-TpWV-2hLYoSzWFyachP5I.roa
File: yfpG6-TpWV-2hLYoSzWFyachP5I.roa (raw, json)
Hash identifier: csU0iRl88lNHrU2CIMwbU8jLiVmcxOpG0g+VphXhoFs=
Subject key identifier: C9:FA:46:EB:E4:E9:59:5F:B6:84:B6:28:4B:35:85:C9:A7:21:3F:92
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 13B6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/yfpG6-TpWV-2hLYoSzWFyachP5I.roa
Signing time: Fri 12 Apr 2024 12:53:13 +0000
ROA not before: Fri 12 Apr 2024 12:53:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5046 (0x13b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 12:53:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C9FA46EBE4E9595FB684B6284B3585C9A7213F92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:48:1e:13:14:02:fa:e4:3e:ab:ee:1b:22:
5a:9d:b8:bb:92:fe:44:11:96:d6:f1:10:ab:80:cf:
03:8c:9a:c5:3d:10:54:e4:0f:b0:c5:1d:aa:34:a6:
1f:7b:3e:55:63:cb:24:4f:1d:fb:a9:95:79:91:f5:
43:17:d9:61:f5:c1:59:85:ff:95:9e:05:33:8c:06:
7e:29:30:d6:60:ec:f7:85:ce:d8:15:7e:52:0b:88:
cd:91:f1:93:f7:ea:52:8d:b2:b9:8c:ae:94:46:96:
6f:71:f0:cc:df:af:13:84:67:59:79:1e:c8:b3:d5:
13:a2:89:91:68:b1:20:bd:c9:ff:46:62:70:f6:b6:
00:53:8b:33:79:16:1d:3b:51:d6:a4:66:79:e5:c3:
ae:7d:9f:0b:5f:18:1f:d8:17:2a:ae:bf:ab:ea:98:
ed:ad:dc:8c:5e:39:f8:7b:93:d4:63:cb:c0:69:96:
b9:9c:06:9e:81:c9:03:27:94:65:7c:a7:c3:f5:b9:
1c:1a:e2:f2:e9:e7:0d:56:9c:51:59:ad:61:d3:7d:
cb:8b:97:8e:f9:2c:1b:6b:b8:2d:4c:be:48:a8:17:
f4:5d:21:3a:5d:7e:d4:2b:a0:4d:27:a5:15:53:b2:
d0:c7:ce:3d:25:aa:30:4a:cd:82:75:ca:c5:52:8f:
20:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FA:46:EB:E4:E9:59:5F:B6:84:B6:28:4B:35:85:C9:A7:21:3F:92
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/yfpG6-TpWV-2hLYoSzWFyachP5I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:af:e9:5c:96:60:47:0d:d7:64:3c:e9:30:fe:fd:fa:e8:7f:
b2:30:75:39:1d:c6:df:96:3f:ab:e7:b8:cc:c3:ab:69:b8:40:
72:15:45:29:59:0a:1b:92:66:b4:ee:be:dd:fc:a0:9d:43:f4:
8b:2e:98:7f:52:05:35:51:58:c5:da:ea:9a:8b:98:30:2f:34:
62:e1:63:b0:a3:98:e3:21:a4:76:9a:40:81:9b:a9:3b:16:3e:
60:86:69:2d:85:a9:42:ea:5b:e1:b9:3d:01:1c:40:ca:fc:f5:
05:43:1f:1d:f8:6b:f9:76:1c:8d:47:b2:29:ce:90:12:67:ae:
47:a1:44:fa:4e:fc:4f:f3:af:7b:a6:2f:48:15:b3:be:41:fc:
58:91:9f:c5:38:a2:76:26:1c:1d:46:8a:64:65:fe:9a:c1:06:
a3:d0:18:75:13:62:f0:88:ac:e5:4f:13:3f:0a:05:52:b2:ae:
5b:61:d8:4d:19:5f:2f:98:d8:29:80:f5:dd:dc:53:6a:76:4b:
40:11:ea:46:c5:c6:a2:81:23:13:1d:8d:56:e5:ee:ac:ee:0b:
8d:57:0d:db:73:ee:71:84:0d:86:d3:ea:a6:01:b4:4f:eb:b2:
31:de:1b:45:7e:a9:0d:ad:20:1d:5e:c1:6a:62:6a:ec:5e:f7:
81:19:3a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:51:37 2024 by rpki-client on console.sobornost.net