Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/KGVxLz05xSsSx-x5GFgd59FjLQs.roa
File: KGVxLz05xSsSx-x5GFgd59FjLQs.roa (raw, json)
Hash identifier: H3pp3XkqSeGRuG1SUJQ54IM9CgGJxL8rLY+U9QXeahY=
Subject key identifier: 28:65:71:2F:3D:39:C5:2B:12:C7:EC:79:18:58:1D:E7:D1:63:2D:0B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0155
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/KGVxLz05xSsSx-x5GFgd59FjLQs.roa
Signing time: Fri 05 Aug 2022 07:31:40 +0000
ROA not before: Fri 05 Aug 2022 07:31:40 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 398465
IP address blocks: 112.75.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Aug 5 07:31:40 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=2865712F3D39C52B12C7EC7918581DE7D1632D0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f1:35:3d:25:6b:0e:f9:23:bf:63:a5:c7:99:
9c:b7:a4:0a:d4:a5:37:c4:23:df:49:54:a0:24:7f:
87:52:ff:5d:44:09:90:e2:a4:55:7c:8a:c6:e4:4d:
aa:ea:8d:d5:d5:31:0f:e1:db:5a:32:1f:d8:d4:da:
d2:f1:f9:d4:86:34:66:80:82:42:0e:20:49:af:b4:
1f:d0:a5:fc:93:06:d4:53:5a:6f:ca:6c:27:b5:53:
ea:8a:a3:57:ee:d2:59:9c:52:36:9c:75:aa:6c:bb:
b6:70:0e:eb:01:5f:6f:c5:8d:84:d5:a9:86:06:18:
54:b3:9c:4f:a4:4f:d1:9f:9c:9f:cb:0b:94:e7:52:
38:7e:58:10:4d:03:72:61:db:0e:6c:a3:91:8f:e7:
1c:2a:b5:09:a2:91:00:b1:44:67:17:e3:39:3c:38:
be:9b:15:f6:5f:0a:96:ea:82:c8:6e:5b:78:32:c7:
45:fa:b3:82:60:4e:19:46:07:a4:ad:56:95:62:02:
72:33:ee:d5:53:3e:6b:68:01:53:89:0b:e4:be:12:
b3:c7:7b:c5:e4:50:5d:88:bf:a5:a0:4f:29:0c:4f:
0f:54:4b:34:82:39:8d:6c:77:01:76:97:0e:42:74:
50:1d:d0:01:c0:a3:25:ff:71:c2:04:de:83:43:60:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:65:71:2F:3D:39:C5:2B:12:C7:EC:79:18:58:1D:E7:D1:63:2D:0B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/KGVxLz05xSsSx-x5GFgd59FjLQs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:3e:f1:97:3b:8a:8e:24:a3:ac:5f:b0:e5:d4:39:cc:2c:37:
35:93:58:e9:59:2e:95:0a:ec:82:c6:39:2f:41:4c:0b:38:aa:
88:ca:9c:dc:d3:cc:58:45:cf:52:54:7e:4e:ae:a5:5f:0e:2b:
dc:b5:7b:48:72:3f:4e:9b:65:52:db:81:9b:b1:1e:f3:6f:95:
b4:34:2e:05:c3:da:a3:ec:2b:e5:ea:17:b6:d6:7a:69:c7:d7:
ac:37:79:c4:7a:3a:a7:6a:ad:6b:73:57:4f:d5:67:7f:24:67:
45:ae:5d:44:61:6e:8f:30:e2:b8:88:53:18:f8:65:0e:92:8f:
bd:46:8c:42:cb:87:9f:12:e3:22:b5:78:cb:0a:ae:62:e8:36:
6d:86:c6:f9:3a:7f:ab:80:c1:84:17:f8:ec:41:20:fa:f3:8b:
cf:08:8c:61:f9:18:db:ff:00:14:ab:4d:e2:59:91:bd:18:01:
ff:ad:0e:fe:7a:87:c2:d4:b5:58:a2:74:87:02:3a:6c:64:6a:
03:da:cf:16:42:7b:66:b5:2f:62:a5:05:7d:af:29:8c:3f:3b:
a3:27:91:62:95:c8:e5:d4:6d:14:4c:63:b3:e4:ba:eb:18:18:
d4:ee:0b:98:d5:81:19:a5:1a:22:a0:d5:b6:83:bb:af:32:9c:
dc:c9:38:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org