Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/12r9isj1wBvkIypMvx9WuNjhrCo.roa
File: 12r9isj1wBvkIypMvx9WuNjhrCo.roa (raw, json)
Hash identifier: 8UdlQfSWilbph27EVBPt4CvezAc9B1Id0B/WbFWKMR4=
Subject key identifier: D7:6A:FD:8A:C8:F5:C0:1B:E4:23:2A:4C:BF:1F:56:B8:D8:E1:AC:2A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1818
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/12r9isj1wBvkIypMvx9WuNjhrCo.roa
Signing time: Wed 24 Apr 2024 05:23:38 +0000
ROA not before: Wed 24 Apr 2024 05:23:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6168 (0x1818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 24 05:23:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D76AFD8AC8F5C01BE4232A4CBF1F56B8D8E1AC2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:8b:72:d3:d6:da:82:63:0e:b4:65:c5:55:
72:95:e1:64:8a:08:3c:bf:6e:b1:96:47:9d:3f:a1:
c0:ee:e3:cc:2b:f7:c5:f1:9c:60:43:96:a9:ac:41:
77:d7:f3:d2:c1:2b:1b:b0:37:4a:96:0f:35:0f:a0:
68:70:9c:ee:d0:5d:e5:6e:5b:a9:0b:cc:ff:fb:9a:
86:e1:d5:58:35:f4:0f:b5:e9:1e:b0:59:29:9e:dc:
96:31:9a:cd:4c:a6:1e:95:e9:24:af:61:7e:ab:5f:
73:a1:d5:f8:89:e6:b1:60:1a:0e:fd:0c:8f:a5:55:
1b:60:1d:dd:53:ed:d5:6d:7d:e0:91:70:25:e9:33:
07:df:34:3f:4f:b7:46:53:67:55:91:6e:73:3e:d1:
af:51:af:52:e8:14:32:e1:ac:e5:7d:c3:31:07:86:
cb:25:52:36:d3:23:b3:33:be:3e:c4:c6:55:23:27:
07:4d:5a:70:ac:e1:4a:95:5b:43:68:d5:f4:fb:54:
86:ee:d9:30:d9:1b:f4:bf:f8:bd:21:f6:7f:a4:1c:
33:90:c4:fb:1a:48:db:b0:3e:ce:ae:17:8d:f3:6f:
55:16:14:ea:4d:59:9e:a4:80:c8:79:b8:76:65:8d:
41:3f:aa:7a:d2:16:88:59:31:df:91:d7:54:ae:41:
01:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6A:FD:8A:C8:F5:C0:1B:E4:23:2A:4C:BF:1F:56:B8:D8:E1:AC:2A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/12r9isj1wBvkIypMvx9WuNjhrCo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:b7:8a:bc:13:65:81:8d:91:ef:b7:e7:d3:a4:2a:9c:82:90:
63:ab:0e:f8:9e:a4:19:5d:98:27:de:1d:cb:7f:72:09:7a:bd:
c6:e5:32:6c:ac:a1:24:45:c7:b6:80:a2:43:ef:97:ff:29:7c:
aa:d2:ab:67:ee:70:69:b4:88:3b:81:4b:15:e6:b9:b1:a8:05:
74:ae:d0:5f:eb:4a:e8:40:2b:37:6c:e0:11:8c:6b:3b:9b:ec:
67:40:c0:24:d8:a8:56:91:4e:c0:2e:12:46:14:c0:21:ad:be:
4d:26:10:da:1b:d3:c4:c1:f6:27:a8:83:a2:b9:bd:1e:8d:f0:
24:ea:dd:be:cc:81:65:76:1e:57:fa:d6:6c:f8:8c:55:ae:2c:
05:a8:f1:3b:4a:c6:52:09:21:bf:5c:c9:47:33:c9:ff:9a:81:
74:a4:0f:c5:63:5b:54:f2:ca:4d:1c:37:d8:cb:54:2a:cd:b6:
94:78:3a:d9:9e:54:81:fa:f9:b4:0d:d4:22:88:fe:8d:a2:89:
5c:5b:6c:40:a9:9e:0a:a2:5a:90:10:ad:9f:dd:6e:67:b5:25:
54:7f:28:10:4e:f9:eb:33:8d:4d:fa:c5:74:32:e1:a1:41:d6:
bb:c7:0f:07:d6:54:15:27:cb:a1:fb:2c:d8:53:65:e1:74:81:
1d:01:b3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 07:59:44 2024 by rpki-client on console-fra.rpki-client.org