Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/DfBK3lllVLM_fOnqxOlQ5Wf_CV4.roa
File: DfBK3lllVLM_fOnqxOlQ5Wf_CV4.roa (raw, json)
Hash identifier: z88caaBgi0afIETdITxxF30LJiT6zLLbQ9isUGib3no=
Subject key identifier: 0D:F0:4A:DE:59:65:54:B3:3F:7C:E9:EA:C4:E9:50:E5:67:FF:09:5E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 13AA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/DfBK3lllVLM_fOnqxOlQ5Wf_CV4.roa
Signing time: Fri 12 Apr 2024 09:53:15 +0000
ROA not before: Fri 12 Apr 2024 09:53:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5034 (0x13aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 09:53:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0DF04ADE596554B33F7CE9EAC4E950E567FF095E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c5:e3:f8:32:21:e6:f5:02:e1:81:61:34:80:
31:90:cd:c7:48:23:ba:24:54:27:8c:c3:2b:ac:4e:
64:a4:b8:64:df:a2:89:58:8e:4a:1e:da:25:02:b2:
c9:5f:1f:e6:02:fd:d8:e2:0d:8e:a9:e8:14:4b:d2:
46:7e:02:64:3f:ab:f8:99:c0:18:0c:d8:b1:70:aa:
f1:66:70:cb:d1:7f:c6:08:b6:44:a7:31:ec:f5:ef:
a7:7a:45:03:7d:95:91:cf:f5:a8:64:f7:b9:23:ff:
93:03:34:5d:0a:4d:89:71:30:b8:8d:70:37:f3:63:
d8:9d:6f:58:86:92:9e:78:56:5a:79:56:42:94:e6:
50:88:96:43:8b:85:74:f8:c6:0b:bc:05:7a:88:74:
ce:23:d8:33:2a:9d:b6:34:2b:fd:e0:94:f8:ea:c0:
3e:cd:c7:fc:0e:cc:51:d7:b7:8f:ee:a2:99:33:54:
9b:d6:4b:25:f6:51:d2:f7:d0:3c:a4:f1:e4:05:17:
92:4a:c2:35:21:57:3b:3e:41:89:a6:ce:62:59:b9:
a9:5c:ee:25:5e:db:bd:f6:53:2e:cf:42:67:70:76:
b4:e6:9b:39:d2:ff:da:79:61:00:f0:a4:35:fa:19:
19:cc:b5:50:05:44:e7:19:13:df:5a:ec:8a:a9:0f:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F0:4A:DE:59:65:54:B3:3F:7C:E9:EA:C4:E9:50:E5:67:FF:09:5E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/DfBK3lllVLM_fOnqxOlQ5Wf_CV4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:c1:42:27:81:80:9d:94:12:a4:87:bd:7b:35:e1:a3:41:41:
25:88:d9:f3:55:7b:f6:c0:52:01:4a:dd:25:67:03:59:72:0e:
57:a3:a8:6e:f7:6d:3e:fb:36:fd:25:b7:4b:c8:ee:3a:5c:0a:
ec:61:32:ce:91:75:52:1b:ac:7a:cb:d3:f9:e0:92:30:89:f1:
62:7a:84:3b:8a:19:dc:11:31:ee:a1:f3:80:a3:dc:a0:f2:bf:
90:3b:10:88:cb:1d:cc:53:be:de:9e:cc:35:2e:a1:3f:7a:b0:
e3:91:90:56:61:74:e8:0b:f3:f5:f2:8c:67:9e:66:53:24:b8:
15:6c:81:3a:bf:0a:0a:c9:17:77:c3:63:2f:f6:9d:25:6e:82:
31:f0:cf:ca:eb:1c:f5:d4:ff:04:8b:3a:b5:7f:91:4c:55:b1:
a7:6f:b6:80:dc:b2:3a:b7:78:8e:4e:34:eb:dc:06:2e:88:79:
ec:23:4d:74:be:f6:d9:d0:b9:9e:41:c0:24:38:de:2b:a7:75:
7c:a9:6c:dc:93:ff:94:83:b9:2c:a0:34:02:16:ec:72:95:08:
4d:e0:0e:df:00:44:f2:71:f3:7c:dd:cd:dc:d8:0f:55:83:21:
77:ba:dd:b5:ee:0d:13:41:c3:30:44:21:1c:35:10:6b:69:43:
b7:99:44:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 14:43:33 2024 by rpki-client on console-fra.rpki-client.org