Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/AJ4V9GxwMzm-BU1T2CSouz-y0KE.roa
File: AJ4V9GxwMzm-BU1T2CSouz-y0KE.roa (raw, json)
Hash identifier: VGlsFw3ej0J53tuC/6L4301J1ed2+nzpzEFuP3aBgIg=
Subject key identifier: 00:9E:15:F4:6C:70:33:39:BE:05:4D:53:D8:24:A8:BB:3F:B2:D0:A1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A68
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/AJ4V9GxwMzm-BU1T2CSouz-y0KE.roa
Signing time: Tue 30 Apr 2024 09:23:57 +0000
ROA not before: Tue 30 Apr 2024 09:23:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6760 (0x1a68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 30 09:23:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=009E15F46C703339BE054D53D824A8BB3FB2D0A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:ea:c5:5e:20:22:c4:06:97:da:2c:b5:5e:
b5:67:57:69:5f:f5:ff:03:0f:98:85:10:09:20:a6:
60:23:dc:62:6d:43:6e:5f:53:b3:ff:59:da:98:5c:
ad:56:ba:71:5e:10:53:89:5c:d2:40:0a:1f:b9:69:
78:b1:ca:dd:84:93:d1:4f:fb:d6:3e:32:9f:b2:49:
94:aa:c2:33:82:da:fe:3a:b7:44:86:eb:b1:ae:6f:
5a:02:40:c5:45:35:5a:f3:95:66:11:f2:8a:c3:f2:
60:0d:81:ed:67:67:03:3d:f3:34:2a:71:bc:43:c8:
f0:71:6f:45:e5:1e:e0:a1:c8:1b:1c:3f:e7:6d:03:
bb:bc:de:0e:4e:47:90:90:d8:44:18:5c:cf:b5:68:
a2:05:89:5f:86:04:65:64:ce:2a:f7:2e:09:ad:61:
3d:c1:fa:f6:91:d0:a0:91:73:41:6e:6a:37:b4:b7:
8d:de:80:d7:9d:19:3e:a9:20:66:dc:80:e2:dd:de:
47:be:27:f0:d8:a0:e8:25:98:0f:a3:be:ac:48:f0:
d6:01:31:14:46:b3:b8:85:5e:1c:bd:d2:48:99:ec:
20:d8:1f:e3:d2:3f:a7:1f:b0:bc:bc:04:c9:00:84:
29:4f:ec:65:65:f9:fc:d1:c0:54:ef:79:06:f9:59:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9E:15:F4:6C:70:33:39:BE:05:4D:53:D8:24:A8:BB:3F:B2:D0:A1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/AJ4V9GxwMzm-BU1T2CSouz-y0KE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:e3:24:89:b4:8f:fe:e1:fc:63:ca:7c:49:47:83:be:fd:d6:
91:b1:56:5f:6c:1d:15:f4:4b:e3:d6:15:7f:47:8b:37:0c:43:
5e:81:52:d3:e1:20:be:41:0a:8a:38:92:fb:40:fc:38:0d:a4:
ca:7b:52:1b:cf:f2:3f:83:4b:04:f8:e1:04:c0:25:1e:fe:f8:
79:9c:06:0a:fd:2c:75:82:c9:87:ec:7c:b8:dd:05:79:89:aa:
1c:d0:84:46:ba:e0:40:bc:92:6b:3f:c6:c5:0f:0f:38:6a:40:
ad:b4:55:f9:33:dd:bd:3f:0c:0d:df:ca:af:15:36:2c:8d:83:
18:9b:2f:6c:c6:05:39:1c:76:1a:0f:5f:da:cf:7c:ad:2c:c9:
d6:53:20:f4:4e:bf:69:5a:83:c6:d1:30:a8:ee:d7:c1:75:4e:
2b:99:d2:f7:02:51:a0:64:cb:42:99:bb:2a:62:8b:37:98:9f:
fa:52:b6:4e:aa:92:6c:57:63:98:62:e6:14:bd:d4:8c:f6:f1:
68:d3:78:a5:1a:02:1c:47:6c:60:89:37:da:8e:0e:d5:50:2d:
db:6a:80:48:2a:6e:e5:e3:d7:a7:0b:fe:41:2c:f2:a7:09:f9:
b4:76:7d:a7:ec:31:49:85:f1:f8:3e:f7:b2:87:c2:15:95:24:
2a:d7:23:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 15:11:54 2024 by rpki-client on console-fra.rpki-client.org