Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/9BM-MmMVlhmgzdYM8sU8qZ9Yn6U.roa
File: 9BM-MmMVlhmgzdYM8sU8qZ9Yn6U.roa (raw, json)
Hash identifier: ipxtYgBXn3qaXhzL+z0AJEPiZZQvlFUqiKm/7RBUYyk=
Subject key identifier: F4:13:3E:32:63:15:96:19:A0:CD:D6:0C:F2:C5:3C:A9:9F:58:9F:A5
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 162C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9BM-MmMVlhmgzdYM8sU8qZ9Yn6U.roa
Signing time: Fri 19 Apr 2024 02:23:26 +0000
ROA not before: Fri 19 Apr 2024 02:23:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5676 (0x162c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 02:23:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F4133E3263159619A0CDD60CF2C53CA99F589FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:70:88:41:2c:38:bd:50:cf:8a:de:1d:bf:
ce:4c:56:1f:e4:7f:54:9f:7e:46:21:e1:58:cb:2a:
75:57:62:02:2d:1b:52:5e:34:68:b2:fb:54:11:ec:
c8:c6:25:f7:f1:63:9a:3f:c7:1c:7f:20:9e:cc:66:
da:e7:87:67:78:eb:3d:06:54:fe:54:6c:c0:c6:93:
08:a7:29:a0:14:7b:32:5c:80:a7:e7:fe:05:ef:f7:
10:3b:2c:49:93:dc:bc:1c:12:54:f8:98:d5:03:c5:
b0:00:04:57:c1:5b:7b:60:5b:86:75:76:b2:01:4f:
ea:a0:08:99:1b:48:9e:2c:d8:20:ca:ca:8b:e5:c8:
ae:0d:72:5d:7d:07:16:60:9b:f5:b1:2c:67:4c:c1:
57:80:ea:41:ab:d8:96:a6:87:33:b4:5e:26:42:49:
1d:10:01:df:b4:6f:0d:ee:10:10:67:8d:08:00:6c:
63:35:88:7d:88:40:eb:d2:19:31:76:4f:cb:88:53:
1b:b0:5a:1d:01:81:99:8f:a1:2e:f5:7c:8a:ca:34:
a4:8d:dc:e1:39:a5:a7:63:cf:10:e8:a7:56:ed:3a:
31:84:0b:29:c6:3f:9d:c0:90:07:cb:b9:95:0f:c6:
53:71:34:69:b5:fd:73:f7:97:5f:d7:46:08:2e:8d:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:13:3E:32:63:15:96:19:A0:CD:D6:0C:F2:C5:3C:A9:9F:58:9F:A5
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9BM-MmMVlhmgzdYM8sU8qZ9Yn6U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ca:3b:33:b5:79:c5:bb:52:45:b7:fe:96:a7:5a:28:e6:25:c4:
a3:7b:e6:79:11:1c:a1:44:27:54:62:e4:07:60:86:82:b8:e0:
01:fb:ad:a6:72:08:8a:51:df:45:c3:69:dc:5f:90:12:04:7f:
0f:ff:21:3e:f4:b1:e1:1d:20:88:33:42:4d:45:a4:01:4f:b9:
f6:88:0f:1a:ce:b2:ae:ed:c1:70:a2:01:b7:a0:2e:e4:29:02:
7e:e0:39:0e:55:51:aa:70:fa:45:41:2d:a6:61:c8:a0:9e:43:
75:b6:5c:b3:14:59:80:8e:5c:2a:66:62:d7:d0:ea:45:2e:6d:
95:0e:0e:56:2c:9d:5b:b5:e2:c4:4a:02:44:a9:10:74:1e:1a:
a9:37:5a:83:41:9a:ef:34:43:5d:fa:fd:29:aa:ca:69:40:e0:
e6:fc:dc:98:18:9b:06:ed:91:98:05:7b:fb:0c:01:24:5c:3b:
59:a2:60:d6:77:01:42:e5:f4:ea:80:3d:cb:0a:92:ba:e5:6e:
79:cb:b6:0c:0a:bb:ed:6a:8e:a3:2b:ea:2a:66:8c:8c:7f:15:
7d:8f:c0:da:6e:a5:2c:ce:a3:5b:e0:87:83:dd:62:5e:ba:57:
93:c0:cb:f4:75:03:15:fd:bb:9e:3d:2c:65:21:75:c4:e5:47:
59:bc:2d:ba
-----BEGIN CERTIFICATE-----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Generated at Fri Apr 19 05:32:16 2024 by rpki-client on console-ams.rpki-client.org