Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/S5lDRRNWy8UgdxCm5kPQm9w55qQ.roa
File: S5lDRRNWy8UgdxCm5kPQm9w55qQ.roa (raw, json)
Hash identifier: 1HKVRiVY1LZRzazD4Dxri8Pth1AEYm7//1jasH/Q9vI=
Subject key identifier: 4B:99:43:45:13:56:CB:C5:20:77:10:A6:E6:43:D0:9B:DC:39:E6:A4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0699
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/S5lDRRNWy8UgdxCm5kPQm9w55qQ.roa
Signing time: Wed 19 Apr 2023 01:39:23 +0000
ROA not before: Wed 19 Apr 2023 01:39:23 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 18811
IP address blocks: 112.75.96.0/22 maxlen: 24
112.75.100.0/22 maxlen: 24
112.75.104.0/22 maxlen: 24
112.75.108.0/22 maxlen: 24
112.75.112.0/22 maxlen: 24
112.75.116.0/22 maxlen: 24
112.75.120.0/22 maxlen: 24
112.75.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1689 (0x699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 01:39:23 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=4B9943451356CBC5207710A6E643D09BDC39E6A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:71:74:a7:bb:6f:ea:e0:2e:9c:90:dd:d7:
e0:54:40:9e:0d:71:6a:05:0c:6e:28:a0:c6:66:5c:
7d:01:53:dd:dd:79:9a:44:e7:ca:4b:45:0d:26:6a:
3c:64:b4:4a:67:35:ea:b3:13:5f:fe:d1:c9:c9:88:
d6:be:a1:bb:7c:0c:25:ad:fd:d8:81:79:e4:44:27:
34:a1:f9:55:07:94:92:d1:61:37:4b:59:d6:02:05:
c1:af:69:d3:47:ba:2a:06:98:c9:12:f5:a7:5d:57:
a2:04:0e:e0:32:05:87:79:70:5a:d9:fb:0b:a8:d2:
ce:7d:a8:0c:ae:13:e9:44:66:60:06:95:6f:f0:ba:
50:1f:bf:49:d2:07:12:85:98:a7:31:ba:33:72:05:
c0:cf:70:eb:96:5c:68:49:87:f1:51:39:41:d7:13:
0a:cf:c1:e5:2b:fa:f2:29:c7:4f:31:fe:41:5f:c0:
fa:74:60:1e:e1:2f:5e:0b:23:ae:3b:d3:02:6c:39:
a7:10:da:0a:41:5b:57:6a:f4:9f:8b:9e:9f:ad:2e:
40:d0:ec:09:ca:04:d4:93:d4:51:46:b2:0b:1d:f4:
af:ee:36:ff:8f:c2:4e:6f:3d:29:fb:27:40:5b:7b:
4d:1e:b5:f3:69:ac:32:77:c8:35:2d:0b:9f:29:1c:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:99:43:45:13:56:CB:C5:20:77:10:A6:E6:43:D0:9B:DC:39:E6:A4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/S5lDRRNWy8UgdxCm5kPQm9w55qQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.96.0/19
Signature Algorithm: sha256WithRSAEncryption
77:0f:4f:19:c6:71:61:bc:23:92:fc:f7:4d:2a:81:8b:30:d6:
5f:4a:eb:3f:85:21:68:c9:ba:03:9b:15:78:c0:85:c2:ff:a3:
11:c8:38:ab:72:9a:4c:fe:62:c6:91:b8:d6:15:fd:c4:61:c8:
ec:6a:e1:a6:45:a3:50:c1:1a:5d:3e:ad:62:34:77:03:16:eb:
9e:0d:e7:cf:91:f2:9c:43:e3:dd:76:bc:08:45:7f:18:8e:09:
c4:44:63:ad:96:78:c0:dc:c3:a3:9e:22:c8:3c:53:06:33:bc:
77:25:f1:10:64:84:40:a6:97:58:28:34:bd:b8:29:fa:41:d9:
dd:b9:84:cc:d2:f6:e1:3a:2e:2d:b5:65:08:8f:e5:cb:af:82:
da:56:8d:34:be:01:84:df:28:ac:fd:1d:bb:ec:64:9d:6b:65:
7a:3b:9b:af:e1:bb:99:d7:23:08:ce:ae:fc:88:40:38:32:25:
57:ce:09:63:39:b2:e6:2b:8c:a3:76:02:f1:03:6b:d6:aa:24:
0f:3a:b0:8b:34:13:6f:f5:b0:9b:2f:7b:0f:77:4c:90:2a:01:
e0:f6:12:8b:06:c0:ca:9c:9a:44:93:2d:53:2d:54:15:52:d0:
39:eb:dd:64:6c:83:9c:5e:a1:41:7e:b0:e1:2d:26:ca:c3:8b:
eb:fd:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org