Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/FL0O8MEUT7HWKnffWrg_9NW7Ba0.roa
File: FL0O8MEUT7HWKnffWrg_9NW7Ba0.roa (raw, json)
Hash identifier: YQTQzZBGyK5wnzI2fvm9SWcv1KHUzmHsUIS635SuIgw=
Subject key identifier: 14:BD:0E:F0:C1:14:4F:B1:D6:2A:77:DF:5A:B8:3F:F4:D5:BB:05:AD
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14B2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/FL0O8MEUT7HWKnffWrg_9NW7Ba0.roa
Signing time: Mon 15 Apr 2024 03:53:22 +0000
ROA not before: Mon 15 Apr 2024 03:53:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5298 (0x14b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 03:53:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=14BD0EF0C1144FB1D62A77DF5AB83FF4D5BB05AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:30:c0:ce:a5:a7:8b:ae:63:d7:c3:b9:a1:
cf:3a:2e:81:92:53:7e:37:84:b5:be:b3:43:e0:a8:
06:10:49:06:de:08:57:50:de:2e:04:0c:af:ac:00:
8a:71:a3:bd:84:94:01:a0:08:99:76:c8:15:c5:cb:
8d:9c:87:c6:c2:ab:1d:fe:89:91:31:c0:c3:31:a2:
77:2a:1e:ca:ac:4b:73:87:46:3c:16:98:fd:7a:53:
f1:31:39:14:cb:e4:02:ef:33:86:18:20:1e:d6:c1:
39:53:a3:07:a8:03:78:42:4b:92:d6:37:e4:38:7a:
e0:f0:f6:91:ab:02:77:50:64:da:ef:67:44:c3:68:
c7:96:ae:32:63:f7:38:04:29:7d:88:68:f9:cc:73:
fb:02:7d:f5:67:64:4f:14:7a:d8:e4:1f:4a:fd:a3:
14:f5:05:23:8a:66:2d:15:fd:5d:57:14:27:2f:88:
de:47:2d:c7:70:3f:cb:38:50:d7:a8:f7:10:69:0f:
49:8d:4c:d8:d8:64:77:13:f1:f4:89:8d:c6:bf:9c:
7b:50:8b:fb:22:f4:ce:6a:f1:18:cc:3d:ab:0a:72:
3d:4b:35:18:f5:56:82:5d:1f:75:c9:44:74:4d:af:
52:08:cb:05:84:51:fb:15:6d:66:38:84:61:b6:e6:
27:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BD:0E:F0:C1:14:4F:B1:D6:2A:77:DF:5A:B8:3F:F4:D5:BB:05:AD
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/FL0O8MEUT7HWKnffWrg_9NW7Ba0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:39:9c:ad:9d:d4:60:be:8b:df:0b:1f:b7:5e:66:c9:32:87:
c2:2c:27:57:36:aa:f9:db:70:85:10:64:12:b3:b2:0f:97:66:
5f:1c:92:6c:55:20:fe:54:b0:d3:dc:09:bb:d4:7f:81:99:ce:
6c:f9:33:46:6e:af:55:9b:8a:ea:a9:29:2d:07:71:40:86:0a:
e2:b5:d8:c0:f9:04:b7:1f:ba:ca:48:38:dd:fe:78:78:d9:6b:
9f:74:20:07:05:c1:7c:0f:af:9d:68:bc:4a:87:71:17:aa:84:
30:15:59:70:d1:ba:47:ef:fe:91:74:4a:fe:7d:98:ee:3b:9c:
0f:5b:dd:ce:b7:ef:88:52:32:53:2e:78:9f:89:b3:69:6f:a9:
91:84:db:e8:83:18:d6:b1:af:32:df:53:76:4f:78:62:37:88:
31:06:c9:6b:a5:3d:10:74:19:e8:50:bc:67:00:35:51:e8:04:
50:15:fd:d3:40:85:46:c4:ec:82:3b:54:4d:fd:61:d5:8f:be:
26:67:2f:7c:87:82:bb:7f:ae:15:ad:31:03:05:18:b9:2e:fa:
a5:63:bd:05:e6:95:1b:4e:a0:f9:cd:41:12:34:b2:fc:6e:3b:
39:48:b6:84:85:83:4a:ff:f1:dc:41:1f:ce:ca:50:96:8a:4b:
a3:72:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 07:10:06 2024 by rpki-client on console-fra.rpki-client.org