Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/PjAzLh6zoPzyRSbaUAm_6ofAIEY.roa
File: PjAzLh6zoPzyRSbaUAm_6ofAIEY.roa (raw, json)
Hash identifier: ISeK7ti94dbrykk+ra96OyGYhv7C5rIC30GAo3pn7Fw=
Subject key identifier: 3E:30:33:2E:1E:B3:A0:FC:F2:45:26:DA:50:09:BF:EA:87:C0:20:46
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 083F
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/PjAzLh6zoPzyRSbaUAm_6ofAIEY.roa
Signing time: Sun 09 Jul 2023 14:15:45 +0000
ROA not before: Sun 09 Jul 2023 14:15:45 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 996
IP address blocks: 112.75.100.0/22 maxlen: 24
112.75.128.0/22 maxlen: 24
112.75.136.0/22 maxlen: 24
112.75.144.0/22 maxlen: 24
112.75.152.0/22 maxlen: 24
112.75.160.0/22 maxlen: 24
112.75.168.0/22 maxlen: 24
112.75.176.0/22 maxlen: 24
112.75.184.0/22 maxlen: 24
112.75.200.0/22 maxlen: 24
112.75.208.0/22 maxlen: 24
112.75.216.0/22 maxlen: 24
112.75.224.0/22 maxlen: 24
112.75.232.0/22 maxlen: 24
112.75.240.0/22 maxlen: 24
112.75.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2111 (0x83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Jul 9 14:15:45 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=3E30332E1EB3A0FCF24526DA5009BFEA87C02046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:9a:fc:7e:b1:26:b2:f2:f2:8c:72:a6:b5:
87:93:2a:df:9f:b3:4f:07:70:10:84:21:74:e3:b9:
67:c0:f2:fb:a6:65:16:5d:84:5a:b1:42:42:ca:39:
9e:bf:74:cf:cb:43:b8:b0:1a:e2:24:8c:01:82:3a:
c4:6c:ef:2a:65:dc:b2:38:ed:69:39:1d:55:6c:97:
31:5c:f6:49:02:3b:14:89:12:13:56:8c:a4:8d:6e:
06:4e:6d:cd:84:79:41:4c:ec:60:36:c2:96:f6:b6:
3c:7f:05:69:a4:de:db:1b:e8:79:b4:d1:29:fe:86:
69:55:d3:41:82:d4:d1:a2:ef:5d:3a:24:57:79:db:
61:66:aa:28:25:49:21:8f:be:4a:7a:d7:61:4b:d5:
eb:56:fb:c3:25:4d:8d:af:59:78:11:ea:a5:97:95:
99:2b:f7:32:38:fb:e8:02:30:1b:98:f3:cd:c8:d6:
24:99:e9:90:5f:4c:70:23:d0:cc:cc:c8:7a:26:07:
12:0e:55:83:94:ff:9e:70:9e:81:f8:97:52:5d:6a:
a0:5a:81:b4:c2:4c:bb:68:23:63:6b:20:5c:0b:36:
fb:98:ca:8a:1b:66:bd:b2:8b:8e:22:1f:de:47:d4:
61:a0:92:5e:3e:11:ba:19:af:bf:31:47:fd:8c:2b:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:30:33:2E:1E:B3:A0:FC:F2:45:26:DA:50:09:BF:EA:87:C0:20:46
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/PjAzLh6zoPzyRSbaUAm_6ofAIEY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.100.0/22
112.75.128.0/22
112.75.136.0/22
112.75.144.0/22
112.75.152.0/22
112.75.160.0/22
112.75.168.0/22
112.75.176.0/22
112.75.184.0/22
112.75.200.0/22
112.75.208.0/22
112.75.216.0/22
112.75.224.0/22
112.75.232.0/22
112.75.240.0/22
112.75.248.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:f8:d3:a1:c3:c6:5a:2f:b1:36:fc:44:bc:a4:39:ce:b7:5f:
b1:ce:20:1a:c6:41:97:58:65:5f:cd:2e:fd:84:be:05:04:68:
6f:95:b3:66:0e:60:45:e1:33:86:b8:4f:63:d5:0d:19:1c:0b:
db:93:ca:87:24:22:15:87:c6:a1:89:22:a9:7a:4a:c1:97:ab:
e1:da:e9:8f:17:f6:74:1a:70:fb:da:db:4c:45:6a:55:00:ec:
c3:e9:5c:79:08:ed:2b:f9:7a:ff:c6:c2:a1:85:09:c3:05:f7:
22:09:a5:dd:1e:5e:c5:dd:9f:10:b8:15:08:fc:d6:1d:2c:8f:
0a:fa:7b:82:36:f5:65:69:10:6c:9c:e9:85:6a:67:90:b3:4b:
a8:eb:57:06:e5:a6:c9:92:45:29:60:15:17:09:98:2e:c0:89:
4c:5e:1b:0a:76:2c:52:78:d1:5a:75:c2:a3:8e:b2:e1:2f:9c:
3d:f8:32:01:1d:a6:11:1c:89:b0:2c:1d:dc:a6:ab:a7:43:30:
58:09:80:ab:10:e4:73:7b:51:6c:ac:90:7f:c4:59:62:ab:39:
7a:1c:9b:e7:38:58:86:d7:17:c4:29:52:c5:12:a2:ed:3f:2e:
5a:96:75:e9:10:50:02:e0:3f:b7:10:c3:15:8d:4e:d2:ab:46:
30:36:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org