Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/6K6QhSgo0HPebN5psvC2Uo3lifE.roa
File: 6K6QhSgo0HPebN5psvC2Uo3lifE.roa (raw, json)
Hash identifier: pr46TV+d8eQUZRjbPrno9qhTiiyGPgwyNqfuo3htLho=
Subject key identifier: E8:AE:90:85:28:28:D0:73:DE:6C:DE:69:B2:F0:B6:52:8D:E5:89:F1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A10
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6K6QhSgo0HPebN5psvC2Uo3lifE.roa
Signing time: Mon 29 Apr 2024 11:24:03 +0000
ROA not before: Mon 29 Apr 2024 11:24:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6672 (0x1a10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 29 11:24:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E8AE90852828D073DE6CDE69B2F0B6528DE589F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:54:f5:8a:12:e3:3b:51:28:d9:2b:4a:33:
24:20:74:7b:0d:93:1c:b7:67:bc:2f:11:1f:2d:4f:
3f:78:d0:de:66:f6:ee:4a:63:b1:7f:ed:fe:53:2f:
c9:96:69:81:af:5f:27:8d:22:5c:8f:e5:b0:ed:b9:
0c:c4:34:40:6a:6f:94:14:4b:d7:de:e7:3b:50:8c:
b0:90:cc:c0:a0:48:2a:5d:8a:a6:ba:2e:5e:b6:9e:
dc:c1:f2:21:2e:2a:c7:a1:a6:aa:d6:2b:b9:71:04:
a8:48:e6:2a:17:96:a6:fc:dd:9b:56:e6:93:d9:44:
c0:f5:54:e2:3a:82:e5:3a:71:29:87:47:c3:66:a5:
55:a5:ad:ff:46:1c:b6:26:23:e4:0e:7b:bc:41:1e:
e4:fc:20:28:6c:5e:e9:53:67:22:08:16:58:d7:0c:
ea:41:23:9e:12:92:a3:75:63:3e:b6:15:8f:91:8f:
2d:89:07:fa:3b:16:91:01:73:7d:66:ec:79:3e:b9:
d8:7e:8e:c4:2f:d1:a8:15:96:e3:7b:b3:63:42:f5:
c8:7b:0f:f0:ab:82:a7:15:03:68:c3:68:51:c1:0b:
1f:a8:5d:4a:46:ce:93:87:f6:ef:cd:d7:1c:62:8e:
c8:21:77:6d:eb:11:16:57:34:9c:a5:57:af:c6:5f:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AE:90:85:28:28:D0:73:DE:6C:DE:69:B2:F0:B6:52:8D:E5:89:F1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6K6QhSgo0HPebN5psvC2Uo3lifE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:c9:e6:07:a7:fe:08:5d:76:b5:14:78:61:a5:f4:82:57:c8:
e3:10:43:15:d7:32:7d:22:bb:49:9f:33:c9:c0:94:85:e8:a2:
ae:8c:37:0c:77:59:f8:35:57:5f:b2:a1:69:78:aa:3f:04:37:
97:69:11:16:81:9e:b7:e2:29:c4:f0:5c:3c:15:b8:9a:a9:f3:
3d:cb:db:b4:3b:5f:93:e6:d5:76:63:03:a6:2e:ad:20:e7:71:
c0:9e:a4:80:de:4d:b2:9a:a4:b4:55:47:d0:e4:8f:dd:3d:fe:
56:3a:f1:44:78:19:41:d5:ed:44:b4:fd:59:60:9e:06:f0:91:
c4:5e:06:ee:2b:e8:36:29:26:ff:6e:8f:17:38:e7:36:5f:9e:
82:81:63:40:99:ae:a9:c1:56:52:be:1d:ec:f3:61:dd:8d:a6:
bf:b4:f5:b4:bb:b0:5f:9b:d7:63:1c:98:27:01:e6:50:8e:32:
89:51:92:1e:0f:e9:0b:af:3f:09:7d:b8:01:05:ea:f0:6e:19:
bd:d6:ff:71:72:1f:60:e5:8a:43:82:c8:6d:7b:99:d4:2a:3c:
80:60:d9:2b:a7:05:14:81:28:e3:af:cc:d5:e9:90:45:c9:5d:
e9:a5:4d:09:94:21:2b:99:08:93:1c:0a:0f:84:66:3f:c8:e1:
f3:85:7d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 17:07:22 2024 by rpki-client on console-fra.rpki-client.org