Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/RHPOZuu4ePzK8h-93vBG6FkjEJI.roa
File: RHPOZuu4ePzK8h-93vBG6FkjEJI.roa (raw, json)
Hash identifier: oAjhEsGdTXRP0ogw7oNm+NonuNmXflmT8WzwmwB4ke0=
Subject key identifier: 44:73:CE:66:EB:B8:78:FC:CA:F2:1F:BD:DE:F0:46:E8:59:23:10:92
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0ECA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RHPOZuu4ePzK8h-93vBG6FkjEJI.roa
Signing time: Sat 30 Mar 2024 09:52:30 +0000
ROA not before: Sat 30 Mar 2024 09:52:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3786 (0xeca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 09:52:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4473CE66EBB878FCCAF21FBDDEF046E859231092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:ac:af:a3:63:04:46:d0:0e:f7:f3:8a:42:
af:0d:00:c0:89:00:d6:fb:57:9d:c7:2f:70:7b:75:
3c:f1:19:05:3b:3e:1d:d2:f5:d3:3e:21:0f:27:39:
82:a4:bc:a9:67:cd:85:55:57:af:73:42:78:2c:3b:
af:39:f5:08:40:ea:14:57:54:fa:7d:09:73:8f:ca:
62:6f:4a:ae:fd:dc:dc:58:81:89:43:90:90:6a:a2:
b7:40:08:aa:c6:0d:c4:bd:9d:d5:44:e5:49:7b:38:
aa:72:38:c4:d9:9f:72:a5:7f:6b:77:09:c8:75:9a:
7e:c3:06:cc:ee:fd:69:97:d9:61:f6:b3:72:97:17:
86:3b:ba:f9:19:c3:e5:06:65:99:09:03:f2:15:56:
5c:fd:a3:8c:02:e6:5a:40:a3:11:8b:08:9f:f8:c8:
ff:0d:cd:9b:da:c8:09:dc:b4:dd:06:4a:76:76:ff:
d5:91:f2:d0:74:db:5b:77:28:3c:ee:36:6e:ff:76:
60:de:2e:8e:2b:6f:d9:11:98:e8:3f:7a:24:d6:46:
79:b4:ef:09:70:71:84:a6:84:80:bd:d4:84:52:05:
d1:31:13:78:a9:9c:4c:a3:61:c0:cd:73:aa:99:73:
9f:bf:a0:e7:04:d5:55:c1:c9:a7:58:c0:d2:ad:02:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:CE:66:EB:B8:78:FC:CA:F2:1F:BD:DE:F0:46:E8:59:23:10:92
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RHPOZuu4ePzK8h-93vBG6FkjEJI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:e7:d7:77:21:33:03:37:43:49:76:f8:b3:4f:f6:c3:54:e3:
36:86:6b:24:df:5a:d5:18:7b:e6:8d:c4:ea:23:13:ba:4c:f9:
14:78:35:e6:e8:9d:2f:e7:ce:f3:64:4a:26:8f:c3:32:a8:a6:
b4:14:e1:6b:bd:ef:a7:59:1f:21:23:ee:2f:91:89:1f:fd:f2:
c7:82:9d:5b:a9:ea:a7:85:b1:02:42:a2:98:46:a4:e8:e2:c2:
18:93:dc:b7:90:a0:b8:09:04:e7:ae:8a:ae:ab:4d:96:f3:70:
48:9c:ec:cb:89:84:33:b1:42:a3:eb:5d:75:a4:d8:18:40:cb:
30:68:e8:0a:0d:1b:29:5f:92:a3:2c:9e:c5:71:8f:b3:de:71:
95:a7:34:61:2a:50:2c:ff:df:de:9b:d2:49:83:e9:58:c1:99:
7d:c2:ca:c0:a5:48:31:3f:5a:65:62:72:0c:d7:36:2a:8e:c4:
d3:c9:8a:6a:9d:3c:30:3e:dd:82:8e:2d:bf:e7:5f:d9:12:b0:
03:17:42:49:98:50:cd:9a:56:49:13:e7:bf:b4:11:73:68:68:
1c:ad:5f:db:79:b4:81:fb:57:69:9f:44:ef:15:fd:5b:4a:1f:
c2:26:14:cd:36:0b:61:05:56:7b:22:22:c2:4b:2e:7a:3c:94:
a5:c6:b7:65
-----BEGIN CERTIFICATE-----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Generated at Sat Mar 30 13:20:13 2024 by rpki-client on console-fra.rpki-client.org