Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/M20Rq_L80Z6EWjqXlz1CVIk8IrE.roa
File: M20Rq_L80Z6EWjqXlz1CVIk8IrE.roa (raw, json)
Hash identifier: 5gy7JFkbizzR5RMDMo2za7VhrsJq8Xr4oZ3RR92tqb0=
Subject key identifier: 33:6D:11:AB:F2:FC:D1:9E:84:5A:3A:97:97:3D:42:54:89:3C:22:B1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 12E4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/M20Rq_L80Z6EWjqXlz1CVIk8IrE.roa
Signing time: Wed 10 Apr 2024 08:23:06 +0000
ROA not before: Wed 10 Apr 2024 08:23:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4836 (0x12e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 08:23:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=336D11ABF2FCD19E845A3A97973D4254893C22B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bc:68:b5:03:08:9e:b7:88:f5:e9:43:09:fe:
4b:f3:9e:77:59:55:25:e0:f2:70:4d:46:e6:c1:02:
e5:ee:98:7f:30:ea:82:a7:19:44:bb:9c:2a:18:d0:
7c:c7:f3:2d:fd:6f:6c:c0:04:71:6a:ce:5c:20:a5:
1d:11:eb:d2:85:09:7c:66:b5:78:a1:e4:e4:8a:a8:
fc:e5:db:bf:7b:8b:79:a8:54:4b:db:50:b8:c2:e8:
da:08:43:1c:53:1f:72:0e:be:a4:59:2f:b4:d0:26:
7a:dd:8d:32:03:33:b3:3b:bd:de:9a:2c:db:13:eb:
10:85:75:50:3d:1d:8c:19:58:9e:dd:bd:d8:f8:a4:
a5:a8:28:cf:70:95:6a:13:99:20:b9:ba:96:1a:f9:
f2:8d:92:30:73:fd:11:54:be:ca:d2:01:a3:72:5a:
e1:4f:9c:e3:7b:16:fd:dd:53:56:e3:e0:3d:01:52:
a0:4d:90:17:ea:52:1e:0c:ca:ed:f1:32:1a:95:b9:
19:36:d6:c0:49:78:bd:a3:2c:5c:5b:bd:9b:29:60:
b8:83:82:49:0e:dc:36:e7:33:09:d5:34:67:b2:1e:
36:4d:47:74:4b:71:b9:a8:34:1c:9a:83:4c:31:0c:
45:9a:23:0c:2e:50:54:d9:f2:30:46:0a:6a:12:0d:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6D:11:AB:F2:FC:D1:9E:84:5A:3A:97:97:3D:42:54:89:3C:22:B1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/M20Rq_L80Z6EWjqXlz1CVIk8IrE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:8f:42:f2:9b:f6:ef:9e:3c:0f:cc:5d:91:2a:e4:82:58:9a:
5d:28:db:5f:de:bb:d4:a7:9d:f9:28:5b:4b:9d:38:ad:48:f8:
00:ae:c5:92:e0:0a:04:e2:c1:7a:80:82:a0:49:03:28:57:7b:
48:65:b7:8c:ac:2f:60:1d:7a:45:bb:8d:41:c8:24:b5:81:ef:
d0:67:c2:74:3c:9f:37:da:0f:c2:5c:cd:d8:03:e4:ea:57:2d:
d3:fb:a0:b5:7d:f9:71:43:c7:b7:84:bf:48:28:dd:9b:55:1c:
14:f0:ea:b1:35:f8:0c:da:60:14:e9:e1:b6:fd:0b:4e:fe:0f:
30:8c:88:3b:7a:15:a5:44:ee:e8:3c:67:ab:84:0f:68:71:1e:
3a:dd:e3:71:af:2d:23:ed:56:78:52:48:19:77:4b:0e:28:33:
d9:f7:a1:3c:11:ff:81:ca:a6:74:ba:d0:50:7f:8b:f7:e5:63:
ff:94:77:55:eb:7c:6c:78:e8:3b:6b:9b:28:40:a4:18:9f:a8:
ee:58:a6:42:1c:19:51:09:89:c9:0d:9f:09:a1:28:37:2c:7b:
27:af:a0:0b:46:3d:3b:b6:17:0c:8c:62:7d:c4:28:be:87:d0:
66:38:89:42:ac:7c:1b:c1:42:a8:db:4f:ec:b9:f8:a4:c3:b6:
48:2d:ed:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 13:52:50 2024 by rpki-client on console-ams.rpki-client.org