Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Ptcw6r-OzSMdy7379N-u0jn8eA4.roa
File: Ptcw6r-OzSMdy7379N-u0jn8eA4.roa (raw, json)
Hash identifier: yVstNTzVigi2yughydnJAS3WdwF55U6Aes58Yfk1xF4=
Subject key identifier: 3E:D7:30:EA:BF:8E:CD:23:1D:CB:BD:FB:F4:DF:AE:D2:39:FC:78:0E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0845
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Ptcw6r-OzSMdy7379N-u0jn8eA4.roa
Signing time: Sun 09 Jul 2023 15:04:13 +0000
ROA not before: Sun 09 Jul 2023 15:04:13 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 7018
IP address blocks: 112.75.108.0/22 maxlen: 24
112.75.120.0/22 maxlen: 24
112.75.124.0/22 maxlen: 24
112.75.132.0/22 maxlen: 24
112.75.140.0/22 maxlen: 24
112.75.148.0/22 maxlen: 24
112.75.156.0/22 maxlen: 24
112.75.164.0/22 maxlen: 24
112.75.172.0/22 maxlen: 24
112.75.180.0/22 maxlen: 24
112.75.188.0/22 maxlen: 24
112.75.196.0/22 maxlen: 24
112.75.204.0/22 maxlen: 24
112.75.212.0/22 maxlen: 24
112.75.220.0/22 maxlen: 24
112.75.228.0/22 maxlen: 24
112.75.236.0/22 maxlen: 24
112.75.244.0/22 maxlen: 24
112.75.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Jul 9 15:04:13 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=3ED730EABF8ECD231DCBBDFBF4DFAED239FC780E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:ff:4f:4e:54:47:69:e2:15:14:0d:e2:19:
e5:6d:34:67:b3:06:56:f6:29:98:03:cc:1c:f9:b6:
84:90:bc:03:02:b3:4f:b9:99:20:39:22:ce:bb:42:
9a:31:ec:9b:bf:d0:c7:16:42:0c:eb:12:04:9f:a5:
6c:58:c6:2f:97:0c:fe:08:ee:b7:57:b2:c8:a6:db:
7f:6e:c4:22:80:f6:c3:b3:47:61:06:7b:40:08:80:
10:53:29:a2:19:e4:75:78:9d:b9:83:3c:ee:2d:13:
e0:a8:cc:93:1e:46:ce:32:ab:cf:50:0b:cb:08:de:
4b:22:09:0b:e2:bc:5b:b4:56:19:a8:81:fd:46:46:
ea:4a:74:94:2f:d4:24:b9:d8:72:85:8d:15:bf:76:
ad:10:af:73:e3:84:b5:be:91:31:b2:08:90:0b:3a:
2f:af:c3:99:a7:78:59:cf:e4:22:f6:61:d4:79:20:
b7:bd:c7:f7:0a:15:4f:b2:67:e4:1a:46:f1:65:cb:
49:da:bb:2b:62:a6:a0:df:9e:77:8c:de:a8:54:e4:
e3:8b:17:59:fd:17:ec:97:7b:76:70:57:b6:69:9b:
ae:1a:3d:a5:8b:bf:ab:90:03:86:c1:90:20:9c:0e:
6f:2f:b2:fc:c1:4b:6c:68:91:d9:e8:4e:94:2e:8e:
9a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:30:EA:BF:8E:CD:23:1D:CB:BD:FB:F4:DF:AE:D2:39:FC:78:0E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Ptcw6r-OzSMdy7379N-u0jn8eA4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.108.0/22
112.75.120.0/21
112.75.132.0/22
112.75.140.0/22
112.75.148.0/22
112.75.156.0/22
112.75.164.0/22
112.75.172.0/22
112.75.180.0/22
112.75.188.0/22
112.75.196.0/22
112.75.204.0/22
112.75.212.0/22
112.75.220.0/22
112.75.228.0/22
112.75.236.0/22
112.75.244.0/22
112.75.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:9c:4e:03:bb:62:9f:a8:69:92:82:4f:4a:f3:70:35:8e:31:
1a:1b:fc:d8:ea:50:57:85:32:f0:b8:dc:eb:ce:a9:cf:77:c7:
df:dc:f4:2e:1b:ec:90:9a:12:a6:cc:d6:9c:5c:6a:7c:37:bc:
4d:99:2e:ec:03:88:39:e3:d6:3b:f4:2f:d0:14:f0:c5:17:a2:
c1:b6:cf:ad:b0:06:a7:c1:a4:0e:c4:94:75:21:23:30:8e:1a:
bd:bb:1f:32:ae:b4:5b:dd:f5:ff:ff:69:cd:95:2e:36:d7:28:
ac:de:2a:03:56:af:fd:c8:75:7e:78:9b:ed:aa:88:5c:d8:24:
26:f3:b7:39:6d:f6:ad:53:3d:62:2f:39:b3:e5:60:65:5e:43:
ea:99:6e:e8:d4:2f:fa:9e:98:95:f3:5c:11:73:2a:27:4e:f6:
2f:17:25:fb:65:40:7d:ed:a0:be:8b:df:15:91:71:52:75:c8:
c5:bf:81:13:ca:a5:23:b8:bf:b8:97:c1:22:24:14:a3:79:0b:
41:63:be:74:e6:1a:f8:e3:05:dd:96:85:af:4c:d0:f1:00:25:
2a:bb:ea:09:25:eb:2b:80:69:b1:78:04:50:30:f4:a2:e3:a2:
b8:25:23:19:0a:3b:bd:ee:71:f3:e3:96:4e:d4:75:0b:f0:82:
0d:79:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org