Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Rtehy4njzLVGSETgGe8QQjB1_08.roa
File: Rtehy4njzLVGSETgGe8QQjB1_08.roa (raw, json)
Hash identifier: eteOg9Fzmlp11nHu/nJ4oaT+oPlRG0mqcPACe2Kf1j0=
Subject key identifier: 46:D7:A1:CB:89:E3:CC:B5:46:48:44:E0:19:EF:10:42:30:75:FF:4F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 110C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Rtehy4njzLVGSETgGe8QQjB1_08.roa
Signing time: Fri 05 Apr 2024 10:22:47 +0000
ROA not before: Fri 05 Apr 2024 10:22:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4364 (0x110c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 5 10:22:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=46D7A1CB89E3CCB5464844E019EF10423075FF4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:2d:9a:08:09:a0:87:b2:52:1e:19:b3:eb:
b0:75:55:50:06:07:30:aa:7e:e6:8e:5a:ef:35:7e:
a4:88:28:2b:3d:21:4a:95:f6:67:be:c9:d1:7a:0d:
d8:98:00:18:2f:e6:5a:39:0c:93:26:51:3f:95:67:
1d:9d:8c:40:c4:1b:38:2d:41:58:3d:b7:4e:ae:fe:
3f:18:f0:69:08:22:ce:ca:41:f7:12:42:a2:15:86:
8f:b2:b3:e7:08:b8:aa:df:5d:6c:3c:65:ef:96:23:
6b:49:7d:01:c1:52:43:0f:89:80:87:c5:8a:13:7f:
ba:4b:90:1d:ae:d5:ac:88:41:e6:33:d5:3c:b6:69:
6b:81:ba:b6:9e:5d:6c:e6:18:dc:9d:99:4c:46:2b:
98:d3:7c:74:f4:23:ab:05:df:83:2c:4a:3a:45:55:
bc:69:c9:03:71:d1:35:c3:85:6c:7a:5b:7d:1d:18:
20:47:9c:ed:bc:0a:d4:27:57:95:b2:33:d1:f3:a5:
77:8e:0a:f5:6e:23:b1:1f:aa:70:d8:e2:c5:9b:f9:
be:79:6a:48:9e:a0:48:05:07:26:89:04:bd:0f:dd:
e0:e9:1d:82:8e:44:38:02:43:73:38:a7:a3:f1:54:
70:f8:24:21:da:ca:12:88:83:75:11:3b:5f:20:9a:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D7:A1:CB:89:E3:CC:B5:46:48:44:E0:19:EF:10:42:30:75:FF:4F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Rtehy4njzLVGSETgGe8QQjB1_08.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:ea:7d:38:13:40:9d:44:1f:d2:0b:b9:42:00:6c:23:9f:75:
8b:56:21:c6:9a:eb:44:98:32:74:11:98:11:9b:8d:5e:74:e1:
25:5d:35:0b:94:28:52:19:b9:25:fe:5a:e0:2d:c2:8a:9a:17:
7e:2c:94:a5:1e:b9:c4:6e:2a:0f:e6:49:be:68:bf:7b:ff:7c:
7e:83:9a:06:cc:96:80:17:8b:7f:a0:2f:69:df:90:42:b1:b5:
3e:6a:cd:16:a4:47:69:48:dc:f0:a3:85:8d:2f:3d:fd:22:40:
3f:3a:a2:f6:28:5b:8c:45:df:33:f2:45:5c:9b:71:69:b2:a0:
ea:0b:f2:03:4b:6d:a5:7d:a6:7a:ed:7c:5e:5f:49:2b:6d:59:
2a:2b:64:56:14:c6:b6:d6:1b:a9:85:2b:3c:85:00:39:3b:f8:
e5:77:66:fd:a4:d7:c8:c4:c4:5a:6c:15:c3:f4:8f:91:b3:50:
17:a5:af:fb:2d:94:1a:4a:ae:00:69:3e:ce:93:7e:b1:bc:80:
8b:48:be:26:f2:4a:c0:63:85:7a:2f:03:f5:39:e1:a9:0b:e4:
eb:00:15:07:02:85:0c:f3:78:2b:ae:2f:af:8d:e4:11:34:6c:
56:55:3c:51:1e:2d:85:5f:7f:89:f6:03:e9:be:0a:ba:79:24:
8f:42:2b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 15:45:30 2024 by rpki-client on console-fra.rpki-client.org