Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/QITsRCm7t9Quzzl88GKnk1BVJDY.roa
File: QITsRCm7t9Quzzl88GKnk1BVJDY.roa (raw, json)
Hash identifier: ziAJkwBcmbpHw+MK7pCa402rysUyyCep0za4yVmNNKQ=
Subject key identifier: 40:84:EC:44:29:BB:B7:D4:2E:CF:39:7C:F0:62:A7:93:50:55:24:36
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1880
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QITsRCm7t9Quzzl88GKnk1BVJDY.roa
Signing time: Thu 25 Apr 2024 07:23:45 +0000
ROA not before: Thu 25 Apr 2024 07:23:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6272 (0x1880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 07:23:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4084EC4429BBB7D42ECF397CF062A79350552436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:74:e3:f6:28:7f:46:34:3e:fa:96:a6:6c:
74:9a:86:ea:74:41:3b:cf:2b:6e:ab:bf:16:20:07:
ec:d6:a2:d0:7a:99:3b:57:c2:10:e9:ed:d2:23:b7:
0c:30:99:2c:51:00:5e:8b:45:e6:42:3f:ce:dd:0b:
05:72:93:a4:e2:05:8f:be:e4:f2:8e:59:35:d4:cf:
fb:a4:d7:c2:28:4f:6d:66:67:0a:67:c8:6a:33:c6:
7e:f9:44:ec:8d:84:8b:d8:55:c1:e1:80:6b:7f:02:
90:a1:b7:e1:a9:a4:40:49:59:08:93:28:87:f8:4b:
94:11:3a:b8:6f:16:78:90:c5:f5:67:70:85:2c:3a:
e5:97:d5:fb:b1:3c:ea:a4:86:07:20:80:b0:7a:27:
2d:8d:70:80:a1:dd:f7:c9:72:64:36:60:29:2f:57:
a2:70:8e:b2:70:7d:30:68:e8:ca:a8:2c:5c:ba:11:
df:ef:63:cd:f3:71:1e:1c:4c:ab:67:26:7f:56:e3:
e5:72:a0:74:51:09:0c:b9:98:2f:ae:88:6e:85:2f:
a1:84:5b:10:df:69:60:8e:f4:46:f9:39:3a:ce:ee:
8a:a6:62:c6:18:9d:85:eb:f6:04:36:52:f3:65:88:
5e:35:d1:9e:5f:06:3e:83:9b:ba:d1:ab:fd:6c:3c:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:EC:44:29:BB:B7:D4:2E:CF:39:7C:F0:62:A7:93:50:55:24:36
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QITsRCm7t9Quzzl88GKnk1BVJDY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:85:c8:e7:4f:58:71:76:aa:9c:16:69:ab:56:21:7e:f1:99:
8f:c4:e9:8a:cc:0c:0c:ce:62:12:2f:4d:43:b3:0a:d1:49:3b:
71:62:b6:64:10:a6:20:36:5a:95:d9:7e:f1:78:d5:97:a2:06:
98:85:4c:b1:c2:1b:f8:19:55:c2:08:46:20:1e:d0:09:0b:d4:
b3:07:d2:1f:dc:05:d1:25:f3:17:de:69:e6:21:06:a7:16:e2:
75:30:27:91:a5:97:93:a1:76:47:0b:70:28:1f:a8:80:53:48:
23:c0:dc:cc:a1:02:65:e4:81:20:0b:1d:8f:b5:1a:83:b2:66:
de:a4:83:0d:1d:b9:24:4c:9c:20:a0:73:ee:8c:bd:5e:8a:38:
bf:37:73:f8:7a:fe:92:66:84:eb:51:ee:5d:ae:de:be:8b:3c:
3e:c8:19:9b:1c:bb:18:21:0d:69:4f:10:48:3d:c0:f4:b0:b1:
20:f3:b6:a7:c4:df:67:21:3f:64:2d:5d:8d:43:e6:2c:8a:62:
c7:d8:e1:63:f3:98:48:7a:1d:fb:f4:36:81:0e:db:1d:48:f0:
52:f1:10:e9:81:28:45:61:4b:9f:33:36:9f:69:0d:2d:01:c9:
8e:95:df:09:d0:09:3f:ba:5d:09:14:d3:29:40:46:50:5a:f4:
65:fd:af:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:41:11 2024 by rpki-client on console-ams.rpki-client.org