Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/LiiAQZWlHRMIkkimHVucNogNM4o.roa
File: LiiAQZWlHRMIkkimHVucNogNM4o.roa (raw, json)
Hash identifier: awQL0E7qk2omlWhoHX0oFvHAjDQZnahoWtNLdTzBXic=
Subject key identifier: 2E:28:80:41:95:A5:1D:13:08:92:48:A6:1D:5B:9C:36:88:0D:33:8A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 06BB
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LiiAQZWlHRMIkkimHVucNogNM4o.roa
Signing time: Sun 23 Apr 2023 03:46:46 +0000
ROA not before: Sun 23 Apr 2023 03:46:46 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 7018
IP address blocks: 112.75.96.0/22 maxlen: 24
112.75.100.0/22 maxlen: 24
112.75.104.0/22 maxlen: 24
112.75.108.0/22 maxlen: 24
112.75.120.0/22 maxlen: 24
112.75.124.0/22 maxlen: 24
112.75.132.0/22 maxlen: 24
112.75.140.0/22 maxlen: 24
112.75.148.0/22 maxlen: 24
112.75.156.0/22 maxlen: 24
112.75.164.0/22 maxlen: 24
112.75.172.0/22 maxlen: 24
112.75.180.0/22 maxlen: 24
112.75.188.0/22 maxlen: 24
112.75.196.0/22 maxlen: 24
112.75.204.0/22 maxlen: 24
112.75.212.0/22 maxlen: 24
112.75.220.0/22 maxlen: 24
112.75.228.0/22 maxlen: 24
112.75.236.0/22 maxlen: 24
112.75.244.0/22 maxlen: 24
112.75.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1723 (0x6bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 23 03:46:46 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=2E28804195A51D13089248A61D5B9C36880D338A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:4f:b3:5a:18:46:06:e1:3c:92:37:0f:eb:
b4:b2:99:12:9b:b0:34:e1:90:9c:33:7d:0d:4b:9a:
38:bc:9b:d1:d3:b2:be:0c:0a:ab:39:e7:e0:f8:f3:
47:e5:18:1a:1b:0e:75:11:22:79:ed:e4:17:44:c2:
91:7b:a4:bc:8a:cc:99:0c:64:2a:00:b3:9c:4d:e3:
c1:b8:c7:05:5b:9c:4f:99:0f:42:24:68:45:3c:2c:
f8:ac:a7:58:74:49:29:01:e4:fd:87:26:c1:c3:5e:
2a:a8:b7:1e:56:2e:39:55:f4:fe:d6:d2:4f:43:bd:
f8:3b:c9:b8:b0:4b:54:2d:e7:9a:56:b3:56:2d:5e:
12:4e:63:12:a1:09:44:18:c5:d2:d9:e0:d4:55:4c:
73:a3:b9:d4:24:1e:60:7a:4d:2b:43:8e:28:4d:1a:
4e:ea:03:37:c0:df:47:cd:c8:1b:bf:d0:26:64:f5:
db:39:14:57:76:b4:27:31:7d:d9:f7:67:f8:dd:5f:
8b:8a:e1:de:f9:72:d4:2f:fa:15:7b:0e:74:01:08:
41:77:58:e8:80:e6:bf:fa:81:24:ae:d4:20:08:d3:
bc:43:df:31:aa:f4:17:af:7f:38:ea:4b:77:6d:f3:
8c:39:71:fd:45:16:88:27:62:e0:16:80:b6:86:00:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:28:80:41:95:A5:1D:13:08:92:48:A6:1D:5B:9C:36:88:0D:33:8A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LiiAQZWlHRMIkkimHVucNogNM4o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.96.0/20
112.75.120.0/21
112.75.132.0/22
112.75.140.0/22
112.75.148.0/22
112.75.156.0/22
112.75.164.0/22
112.75.172.0/22
112.75.180.0/22
112.75.188.0/22
112.75.196.0/22
112.75.204.0/22
112.75.212.0/22
112.75.220.0/22
112.75.228.0/22
112.75.236.0/22
112.75.244.0/22
112.75.252.0/22
Signature Algorithm: sha256WithRSAEncryption
75:45:3f:fd:54:5d:bc:77:7e:f9:f5:fb:eb:f8:59:1e:34:0e:
2b:16:6a:e2:43:5f:97:d4:3b:ea:d3:e7:a5:e6:00:6b:c7:42:
4d:ed:0d:54:8a:6a:46:8e:a4:25:84:65:1b:a7:b3:c2:0d:eb:
30:a5:31:99:54:72:f5:c7:7c:0b:03:7a:09:7e:db:72:77:d9:
01:f4:34:ab:b7:08:84:32:35:b5:1d:d7:cd:cb:c2:22:92:a6:
75:4a:58:71:14:66:a1:68:a5:76:3b:2e:8c:de:dd:74:7b:fb:
ef:96:50:a2:01:d4:82:0e:a6:b6:dd:1c:d7:89:5f:b6:8e:c5:
1e:1d:59:7e:20:a5:f9:f2:16:0d:3e:e0:36:34:92:ec:72:22:
fe:32:24:5a:7f:4b:9b:f3:76:fa:3e:2a:2f:ac:e9:68:15:d5:
77:d9:4d:2c:4b:2f:16:f7:e0:c7:b6:1b:57:5f:72:11:7d:c6:
7d:9d:0c:bd:cb:fe:a4:aa:e1:e3:f0:9b:3d:8b:7a:22:25:11:
72:a7:e8:45:c2:da:35:a7:c8:0a:0f:39:69:ff:8e:35:c2:16:
f8:cc:96:da:98:c6:f8:53:bb:99:37:fb:37:8f:03:b6:c9:00:
31:d0:6c:cd:62:c1:0b:94:6f:27:d1:b1:8b:d7:f7:9e:8d:3b:
55:43:2a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org