Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/-chtGZbOPzSxiBKs3kHGQ6ceS5w.roa
File: -chtGZbOPzSxiBKs3kHGQ6ceS5w.roa (raw, json)
Hash identifier: rTJlhbQq7L7B4T91VAUWL6/z0dPR0XbLLQirBKMijdE=
Subject key identifier: F9:C8:6D:19:96:CE:3F:34:B1:88:12:AC:DE:41:C6:43:A7:1E:4B:9C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 103A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-chtGZbOPzSxiBKs3kHGQ6ceS5w.roa
Signing time: Wed 03 Apr 2024 05:52:41 +0000
ROA not before: Wed 03 Apr 2024 05:52:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4154 (0x103a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 05:52:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F9C86D1996CE3F34B18812ACDE41C643A71E4B9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bc:13:54:9c:44:b9:9c:f1:5f:03:4a:8c:84:
70:52:31:be:ca:b3:12:60:48:99:76:e7:23:41:77:
fa:95:04:c4:f8:2d:6b:8e:d6:fb:05:02:5d:6f:b1:
1e:4c:3c:b7:81:4a:ae:0e:72:96:09:4d:71:f8:79:
08:4a:a7:8a:11:5e:07:5e:5e:f6:a3:72:8f:02:d1:
e6:a9:ac:f5:f8:ca:b2:a0:89:e3:27:4b:0f:16:4e:
1f:6a:bd:cd:9e:54:a4:16:5c:01:d5:d0:e2:26:b2:
30:d1:82:fb:f9:68:72:2e:8f:47:41:f3:15:d9:6a:
a9:ed:0c:3d:97:e2:ae:a1:90:3a:a9:5b:69:01:5c:
3a:a5:43:24:a1:cc:58:71:48:ac:b4:b2:bf:28:2e:
8c:a7:99:58:74:32:3e:dc:e8:23:39:25:e3:ff:2c:
70:25:f8:00:a0:dd:b1:f3:72:ee:22:75:29:7f:14:
4b:3a:89:26:b8:c4:a4:24:fa:8a:be:d1:cc:7f:8e:
16:0c:95:30:ae:0d:44:61:dd:60:3e:22:ae:0c:93:
0f:bb:64:56:de:f6:2f:5c:3a:bf:e8:38:d7:1e:36:
f3:50:a3:21:c4:ff:d6:c9:2b:f4:8f:61:20:d5:80:
12:77:64:c7:b2:20:11:73:61:c8:3b:b6:87:ee:46:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C8:6D:19:96:CE:3F:34:B1:88:12:AC:DE:41:C6:43:A7:1E:4B:9C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-chtGZbOPzSxiBKs3kHGQ6ceS5w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:d5:95:27:1a:76:dd:6d:99:85:0f:aa:f9:d1:11:80:21:78:
f6:e9:7c:91:25:4d:01:5a:49:7c:35:02:3a:75:7d:59:b5:59:
68:70:92:90:3d:82:5d:c7:7f:50:78:e6:9b:95:f8:9e:0b:c2:
3e:0a:4b:59:2e:5b:b4:45:26:ed:e2:84:07:01:fa:4a:50:53:
66:f9:94:fc:70:20:1a:3b:3a:87:3c:7d:48:95:2e:80:a9:05:
90:09:9f:d4:af:50:18:89:68:10:44:bc:a2:42:57:d5:47:82:
fe:dc:66:82:f3:aa:43:e0:5c:52:51:dd:5b:da:5c:aa:66:c5:
73:98:5b:44:e5:32:67:b9:c1:90:9c:a9:ea:26:db:64:4c:ff:
72:a4:e6:57:44:90:33:64:80:cf:c5:76:45:27:cb:b8:c3:8a:
ea:b2:a9:0e:a6:93:6e:dd:57:ac:d1:83:66:c6:28:bf:fb:81:
48:6b:82:03:0a:19:96:54:32:72:f1:e0:f9:fd:ff:f6:38:c0:
7d:7d:be:53:05:b0:f7:10:d8:8a:a6:7c:6a:8f:00:16:e1:dc:
ba:3d:5e:f1:65:b8:8a:80:0f:03:fc:17:ec:5c:b4:0b:fd:d0:
9a:fd:5f:73:d3:69:b9:ef:45:e4:f8:8b:45:d8:a5:34:d3:ba:
33:6d:93:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 09:17:19 2024 by rpki-client on console-fra.rpki-client.org