Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/OaH8P1qSbT_x864HDJT0B6dhBoI.roa
File: OaH8P1qSbT_x864HDJT0B6dhBoI.roa (raw, json)
Hash identifier: leoC29oiz5TsVepoqSI5jjaOQMGkcIBJzWdBcu8T2Uw=
Subject key identifier: 39:A1:FC:3F:5A:92:6D:3F:F1:F3:AE:07:0C:94:F4:07:A7:61:06:82
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1DB4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/OaH8P1qSbT_x864HDJT0B6dhBoI.roa
Signing time: Thu 09 May 2024 04:24:51 +0000
ROA not before: Thu 09 May 2024 04:24:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7604 (0x1db4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 9 04:24:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=39A1FC3F5A926D3FF1F3AE070C94F407A7610682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:d6:4a:19:1a:d9:4b:14:1f:7d:4f:bc:48:
6d:04:b2:4f:9d:3f:c0:f5:0c:14:e3:78:fd:cd:58:
55:0a:a3:c4:0e:86:62:a1:eb:c8:6e:2a:6e:86:03:
0c:29:fc:73:8c:d6:54:31:38:8d:d2:6a:ba:00:3b:
f1:50:79:b9:4d:e2:49:13:80:f0:8b:ac:c6:ca:3f:
13:57:65:74:0d:61:c8:7e:1e:37:4f:d5:15:24:f3:
a3:a9:a9:59:fa:01:1d:9b:6c:07:8b:76:4b:26:b0:
95:88:66:b6:54:f8:60:5e:b4:81:28:be:9b:97:86:
02:e3:98:5e:2d:58:7c:34:5c:ec:53:e6:e6:2b:0a:
d9:42:10:01:af:1d:66:31:04:d3:5b:95:33:00:e9:
35:7d:81:cc:b8:94:52:4c:0f:c4:0e:4c:34:e8:55:
bd:b1:a5:7c:9e:f9:4f:ee:f7:7a:9e:5c:a8:6b:25:
77:49:c7:c5:7d:cf:f5:4d:65:d9:50:a4:f8:e1:5d:
c2:af:19:78:89:74:38:40:25:a7:23:36:44:3c:11:
c6:30:54:56:73:f2:ef:61:0c:0b:f2:c9:3d:a1:a6:
98:09:9a:82:22:21:c4:5e:e7:a3:2f:28:ad:c1:53:
02:9a:90:58:a5:65:29:2e:d8:08:4f:f2:1d:85:50:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:FC:3F:5A:92:6D:3F:F1:F3:AE:07:0C:94:F4:07:A7:61:06:82
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/OaH8P1qSbT_x864HDJT0B6dhBoI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b8:a4:e4:2f:0a:2b:03:6c:80:80:7c:b4:f6:09:a3:9b:52:6d:
90:2e:45:ea:ab:71:9a:53:f8:8c:d5:59:33:19:95:1a:0d:f5:
40:7c:57:6e:9e:da:ee:b4:ee:67:df:ff:4f:d5:92:e5:0f:c5:
00:5b:d5:18:c2:74:bb:fb:eb:f6:0e:43:70:f3:a9:cc:39:89:
53:8b:b9:33:09:53:2f:24:c4:6d:6e:10:bc:c1:0e:25:79:77:
0b:8d:35:18:58:7e:38:89:82:04:ee:b0:64:69:03:df:3e:78:
55:dc:07:ec:10:d3:14:c7:00:93:79:2c:b8:8b:18:3f:5e:b3:
91:01:0d:03:58:f2:13:b4:75:e4:98:8b:e5:25:9c:9e:0b:1c:
48:0a:aa:e2:24:73:dd:cb:ab:be:32:5f:00:75:ef:66:86:95:
21:e9:1b:3b:cc:b1:43:8b:78:8a:70:13:a4:6c:2e:3d:38:91:
36:df:4f:8d:be:bb:0f:81:80:e7:d1:a3:69:88:27:53:43:83:
9a:fc:bd:c5:5c:f9:71:3f:88:ba:e9:09:15:f4:e8:ac:fb:0d:
36:9c:7f:8c:cc:ca:ba:d4:d7:bf:64:6a:f4:ce:95:75:be:84:
e3:fe:e6:25:75:ff:f3:ef:66:0b:78:d1:d6:57:5f:9b:8a:63:
01:a2:65:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:43:34 2024 by rpki-client on console-fra.rpki-client.org