Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/8wWoc-sBJBlCmoT2wQwwcm3oL6c.roa
File: 8wWoc-sBJBlCmoT2wQwwcm3oL6c.roa (raw, json)
Hash identifier: FY+RUxcRjc4f39r53KdYe4cqX7yRs4M5SrB4m/IfVs0=
Subject key identifier: F3:05:A8:73:EB:01:24:19:42:9A:84:F6:C1:0C:30:72:6D:E8:2F:A7
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 02F6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/8wWoc-sBJBlCmoT2wQwwcm3oL6c.roa
Signing time: Mon 24 Oct 2022 04:15:17 +0000
ROA not before: Mon 24 Oct 2022 04:15:17 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 996
IP address blocks: 112.75.0.0/22 maxlen: 24
112.75.8.0/22 maxlen: 24
112.75.16.0/22 maxlen: 24
112.75.24.0/22 maxlen: 24
112.75.32.0/22 maxlen: 24
112.75.40.0/22 maxlen: 24
112.75.48.0/22 maxlen: 24
112.75.52.0/22 maxlen: 24
112.75.56.0/22 maxlen: 24
112.75.60.0/22 maxlen: 24
112.75.64.0/22 maxlen: 24
112.75.68.0/22 maxlen: 24
112.75.72.0/22 maxlen: 24
112.75.76.0/22 maxlen: 24
112.75.128.0/22 maxlen: 24
112.75.136.0/22 maxlen: 24
112.75.144.0/22 maxlen: 24
112.75.152.0/22 maxlen: 24
112.75.160.0/22 maxlen: 24
112.75.168.0/22 maxlen: 24
112.75.176.0/22 maxlen: 24
112.75.184.0/22 maxlen: 24
112.75.192.0/22 maxlen: 24
112.75.200.0/22 maxlen: 24
112.75.208.0/22 maxlen: 24
112.75.216.0/22 maxlen: 24
112.75.224.0/22 maxlen: 24
112.75.232.0/22 maxlen: 24
112.75.240.0/22 maxlen: 24
112.75.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Oct 24 04:15:17 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=F305A873EB012419429A84F6C10C30726DE82FA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:74:49:b4:bd:a3:81:ee:86:07:c0:7f:46:9c:
00:1d:7e:2d:fd:a8:cc:c6:83:4b:b0:e2:9f:48:9e:
35:9b:54:7b:4e:90:c0:5b:90:6e:f9:31:92:04:0c:
02:dd:f4:b2:c8:ac:42:3b:d4:63:5c:b5:c8:6d:d9:
9f:cf:36:f1:98:99:f4:4b:d4:43:d7:3a:62:f8:8a:
48:59:c2:3b:f9:71:9e:55:49:6e:ef:a4:76:c3:02:
eb:c8:d5:d2:27:05:7e:5f:2a:b4:41:b6:35:43:ef:
35:96:a7:d6:36:f1:0d:84:5c:38:44:b4:ac:f3:ee:
cb:da:45:76:a0:fc:c2:bf:40:6e:db:07:4b:88:44:
fc:3d:b3:fe:df:5b:2e:fa:1e:01:68:da:d6:63:80:
d9:2a:f1:49:71:05:ac:d8:1e:1a:23:82:3b:20:3f:
12:34:fe:61:cc:86:18:2c:2d:1a:eb:7d:ca:82:ef:
ca:0c:c6:d3:24:66:53:81:9b:49:85:d5:a0:cf:8e:
18:48:54:65:ed:fe:e7:57:a3:9e:f4:75:1f:60:a9:
fe:bb:ec:6f:04:48:35:e5:a1:c3:66:94:11:35:73:
f6:fb:a9:f0:d8:ef:b7:f6:ff:9c:f5:dc:4c:bb:c1:
a1:4a:85:6c:8a:5a:f0:72:24:74:db:cc:7e:fa:d9:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:05:A8:73:EB:01:24:19:42:9A:84:F6:C1:0C:30:72:6D:E8:2F:A7
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/8wWoc-sBJBlCmoT2wQwwcm3oL6c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/22
112.75.8.0/22
112.75.16.0/22
112.75.24.0/22
112.75.32.0/22
112.75.40.0/22
112.75.48.0-112.75.79.255
112.75.128.0/22
112.75.136.0/22
112.75.144.0/22
112.75.152.0/22
112.75.160.0/22
112.75.168.0/22
112.75.176.0/22
112.75.184.0/22
112.75.192.0/22
112.75.200.0/22
112.75.208.0/22
112.75.216.0/22
112.75.224.0/22
112.75.232.0/22
112.75.240.0/22
112.75.248.0/22
Signature Algorithm: sha256WithRSAEncryption
24:ed:37:d2:c6:05:e7:7a:44:a4:32:10:4c:b0:21:1e:58:74:
33:cb:33:90:56:4e:0d:92:af:35:cc:5d:af:1e:24:97:e9:df:
a8:d7:14:f1:c5:9d:2c:e2:b9:8d:c3:0f:23:94:0a:dc:0f:73:
30:f4:64:e5:0e:6d:11:1d:1d:96:a4:13:77:d3:45:ca:2c:d1:
77:ff:53:ba:e5:ee:1f:84:9c:b1:98:69:1b:30:f8:7f:96:c1:
dc:f7:90:77:f3:8a:b1:f2:83:a0:f7:69:61:06:85:5e:88:e2:
3d:15:a5:2a:ce:2e:d7:f8:51:3f:ba:6f:18:50:ba:e3:c8:93:
a5:96:f8:b0:3f:4e:20:12:f0:6a:ee:fb:92:4b:c2:fd:8b:a3:
c1:f4:cd:c4:fe:e4:ed:cb:97:b3:3c:9e:7d:b9:ab:22:88:82:
d5:ba:b8:b6:f4:82:3d:8a:e6:b7:f3:7a:c2:b1:2e:9d:47:d4:
a8:45:d1:0a:58:76:df:33:ee:ee:ec:55:93:4d:5b:21:96:c2:
36:a8:3d:3a:99:05:1b:41:d9:4a:70:c9:bf:20:7b:d4:74:d5:
b6:98:32:63:e7:51:08:93:fd:c8:d7:8e:c4:52:a3:c1:a2:a9:
c7:b5:ad:87:ea:a7:8b:01:93:c5:b7:58:d4:85:e4:ad:6b:b8:
fa:e1:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org