Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Q8IwE8A4aSKs8Tvs05D_HsGOdbQ.roa
File: Q8IwE8A4aSKs8Tvs05D_HsGOdbQ.roa (raw, json)
Hash identifier: QOrOmbgB0CZWqHHZefUj6eFyzninJRO442Ob4lAUjFs=
Subject key identifier: 43:C2:30:13:C0:38:69:22:AC:F1:3B:EC:D3:90:FF:1E:C1:8E:75:B4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1AE0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Q8IwE8A4aSKs8Tvs05D_HsGOdbQ.roa
Signing time: Wed 01 May 2024 15:24:07 +0000
ROA not before: Wed 01 May 2024 15:24:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6880 (0x1ae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 1 15:24:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=43C23013C0386922ACF13BECD390FF1EC18E75B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:90:13:62:96:d2:03:79:54:d9:a9:1d:12:
ce:6a:61:8a:95:d4:8a:2a:d6:ca:bf:a0:ea:0a:36:
9d:35:72:f7:b1:df:9d:22:ec:b3:5b:79:5f:e7:74:
a5:18:a9:12:8b:82:e7:b6:37:77:00:f1:14:b5:06:
00:45:43:72:a6:dd:e9:ba:4d:09:1a:a5:51:6c:3c:
7f:95:6c:d2:55:bc:f4:16:5c:af:77:6a:d7:f6:eb:
15:21:88:06:97:23:8d:2e:39:98:23:e0:11:97:3f:
47:13:f7:3c:d2:3d:4b:19:0c:14:20:7a:a6:ac:1c:
00:fb:d3:e7:3e:44:3b:9d:7d:1d:ff:7e:af:7c:9d:
b7:eb:16:36:e0:95:97:5b:c7:90:c7:03:2e:2f:c4:
03:d2:ab:ca:41:51:20:c6:39:07:9f:a0:c4:f4:48:
56:a9:65:c0:d9:d2:80:c8:37:80:f7:d6:78:04:40:
c7:b9:78:e5:ca:7c:32:c9:d4:8f:2f:22:3d:c4:19:
83:e0:07:32:99:5c:98:c1:58:ef:43:23:88:c8:37:
bf:99:4d:33:7c:6c:cb:e0:5e:c9:4f:f1:e8:65:96:
16:da:09:26:bd:83:6b:aa:bb:1c:0c:1a:73:ba:b7:
65:33:6c:ec:7d:99:78:78:3f:fa:e9:2b:fd:40:81:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C2:30:13:C0:38:69:22:AC:F1:3B:EC:D3:90:FF:1E:C1:8E:75:B4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Q8IwE8A4aSKs8Tvs05D_HsGOdbQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:d7:3c:22:c2:0a:0b:d2:b8:23:a9:52:14:fb:1a:bd:1c:b9:
dc:cd:3f:eb:31:78:d7:e9:69:12:ee:ad:a5:04:f8:45:5b:1d:
ec:73:94:1a:38:b0:77:9c:d0:d5:76:52:c7:b1:03:5f:16:67:
05:e0:eb:5b:24:23:d9:07:9e:85:17:d0:e3:8c:c2:f7:d4:45:
d6:1c:8f:18:7d:51:0f:53:1a:36:d3:fb:4c:54:10:f9:98:65:
93:3a:47:44:f4:d4:8a:1c:43:83:cc:79:62:a7:45:de:f2:85:
6e:c7:ed:a7:dd:9f:e3:1e:21:27:0d:ed:e9:b1:7b:e7:1a:1e:
29:ac:c4:6d:aa:33:71:16:d2:e1:91:29:2d:8b:9e:c3:20:cb:
4c:59:f2:c5:96:a6:3c:c4:89:ca:ca:d5:2e:34:60:3f:fc:90:
50:b0:c7:99:5c:ab:fb:df:fc:63:7f:2f:07:a3:a7:44:0e:f8:
ee:61:dc:9e:22:56:32:cc:ec:f2:75:1e:43:53:e1:1a:1d:97:
7e:aa:50:aa:bc:86:61:a3:a7:0f:65:c0:c0:07:0b:2b:cd:6b:
9a:de:db:1f:6f:30:87:47:ad:5d:50:e4:61:54:3a:2d:7f:d1:
e5:b3:f0:9c:ec:b6:75:28:18:fb:d2:a2:97:aa:87:da:50:4b:
6e:f3:06:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:27:24 2024 by rpki-client on console-fra.rpki-client.org