Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/44l6jlYW55O3Zz9dvtli-nY7Uzc.roa
File: 44l6jlYW55O3Zz9dvtli-nY7Uzc.roa (raw, json)
Hash identifier: Doqd9pWHEdDiVSJb5jGu4urH/wZjZNP+ZYIFHNAS2Nw=
Subject key identifier: E3:89:7A:8E:56:16:E7:93:B7:67:3F:5D:BE:D9:62:FA:76:3B:53:37
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 06B9
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/44l6jlYW55O3Zz9dvtli-nY7Uzc.roa
Signing time: Sun 23 Apr 2023 03:45:57 +0000
ROA not before: Sun 23 Apr 2023 03:45:57 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 18811
IP address blocks: 112.75.112.0/22 maxlen: 24
112.75.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1721 (0x6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 23 03:45:57 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=E3897A8E5616E793B7673F5DBED962FA763B5337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:c2:81:e1:04:bd:52:57:4e:ec:27:8f:f9:
19:fd:be:08:a2:3a:69:b1:57:18:50:48:0e:4e:a0:
ef:c1:07:36:6e:f5:98:4b:81:ba:fc:e4:44:a6:12:
6e:3b:ad:5c:ff:8c:45:8f:b5:0e:66:b7:0e:6a:f2:
20:a4:1e:de:fa:b4:f9:8a:2a:26:d9:63:ea:a1:8b:
06:30:ad:b9:0c:61:db:d0:cc:3e:54:44:9e:10:74:
98:fd:64:98:06:52:72:7e:2b:d9:d0:7e:a0:ba:d0:
ff:fd:ce:cc:e4:ec:9a:30:2e:d7:8a:94:ce:92:86:
ef:c6:39:c5:4c:b3:66:de:e5:18:6e:72:01:e7:f0:
1f:59:36:e9:a1:89:36:d5:09:d7:7c:2a:92:2a:d1:
e2:25:5b:42:ad:bf:dd:53:59:d3:e6:39:e2:6e:95:
e6:a4:d7:23:af:cb:15:77:7e:2a:8a:1f:5e:d6:0c:
0d:eb:1a:a2:bd:2b:c8:53:a0:6f:89:b0:5b:6f:ab:
f2:b3:a4:5c:4a:b4:45:ac:de:79:14:9c:37:20:16:
fb:ba:f0:73:b4:5b:cc:22:6c:4d:2b:d8:52:18:71:
aa:7d:14:06:f7:91:07:2e:62:4e:d4:e9:fb:37:12:
48:2b:a1:bd:f6:85:28:4b:98:84:10:19:0b:ca:48:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:89:7A:8E:56:16:E7:93:B7:67:3F:5D:BE:D9:62:FA:76:3B:53:37
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/44l6jlYW55O3Zz9dvtli-nY7Uzc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.112.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:f6:5d:74:21:d1:a2:14:28:0f:86:78:9d:4e:92:2c:43:21:
66:bc:12:9a:7a:c9:d8:61:d3:f3:46:2a:60:b8:9b:18:d8:60:
50:63:6e:52:58:e6:f0:4b:fe:bb:44:77:00:f9:7d:d1:c3:58:
e2:f2:8f:cb:66:78:41:6b:90:79:70:08:0d:7d:c3:ae:58:de:
67:1c:43:05:b9:7f:74:9e:11:bf:71:ee:8c:45:dd:8e:39:eb:
0e:e6:46:29:4a:40:55:92:ad:fe:68:55:0c:f2:f7:8f:62:ef:
a5:04:c8:2e:72:ad:58:25:86:27:1b:82:df:73:41:40:a2:23:
4a:da:0c:00:eb:d2:87:a6:1f:62:86:43:6a:8a:db:cd:ce:2c:
6c:3f:0a:08:db:93:f8:86:78:cc:bc:e1:11:f0:ff:35:ef:26:
77:02:8a:50:6d:19:ad:6c:f6:d8:7b:2f:64:b5:a1:1e:97:b7:
00:68:2b:9e:63:79:47:c1:4c:51:8c:d4:21:8b:3b:d8:0e:56:
b4:32:60:e1:b6:8e:ed:d6:85:11:27:24:73:c2:8a:46:fd:33:
08:86:d4:05:5d:2a:b8:58:30:f8:b0:9e:57:17:75:f0:c4:6b:
64:ad:3f:cd:d1:bf:94:f1:1e:7b:5b:15:d2:e0:cd:31:d7:1a:
5a:51:7e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org