Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/TNBH5i0_LWAKxqelUUZI3KRp12M.roa
File: TNBH5i0_LWAKxqelUUZI3KRp12M.roa (raw, json)
Hash identifier: G7+pX+zegrUSJ0OSsbDo8ImvpVR7+HFcjUrH+H0iXKI=
Subject key identifier: 4C:D0:47:E6:2D:3F:2D:60:0A:C6:A7:A5:51:46:48:DC:A4:69:D7:63
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 109E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/TNBH5i0_LWAKxqelUUZI3KRp12M.roa
Signing time: Thu 04 Apr 2024 06:52:45 +0000
ROA not before: Thu 04 Apr 2024 06:52:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4254 (0x109e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 4 06:52:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4CD047E62D3F2D600AC6A7A5514648DCA469D763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:13:1f:2a:f2:8f:3f:40:45:d7:ed:1c:ac:
53:af:fe:f2:d2:69:c4:67:ec:be:0b:c8:7d:48:fb:
40:1a:e9:43:2c:a1:c9:da:c9:b5:45:00:77:f8:0b:
c5:e0:25:d3:33:bb:7f:06:65:5f:f4:47:eb:2e:a3:
b2:da:29:4c:eb:3e:36:c9:b9:49:28:43:19:03:c7:
8b:a4:e3:36:22:4c:85:25:f4:e5:5a:d0:8e:5a:cc:
60:6a:e1:4f:67:72:73:30:23:5a:ba:7d:e1:57:d0:
a9:ee:67:23:d9:3f:31:86:9f:d0:1a:e4:bb:be:50:
20:68:48:2d:d5:b2:df:7e:96:0f:bf:41:c7:ef:83:
54:cc:55:34:64:10:8a:72:a9:e4:1f:89:4e:71:3f:
d7:39:6b:b6:06:ad:eb:3c:b2:8f:d3:9f:f2:18:7d:
db:6c:32:b1:d6:e8:1c:73:b5:5b:0e:e1:ae:00:58:
1b:56:1a:11:ad:15:ef:b9:7a:3c:a6:46:7c:14:13:
ae:24:3f:45:2b:1c:2f:9c:e2:52:34:1e:e3:c2:73:
c6:ee:2e:b4:25:c5:f5:b9:18:63:00:d1:19:17:9d:
42:38:0b:60:4e:6a:da:05:23:b8:eb:bb:78:76:39:
5c:5c:37:91:67:2a:f5:e0:cd:f2:f5:aa:da:3c:bf:
05:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D0:47:E6:2D:3F:2D:60:0A:C6:A7:A5:51:46:48:DC:A4:69:D7:63
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/TNBH5i0_LWAKxqelUUZI3KRp12M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:d0:c9:c7:25:f5:54:e0:15:c8:59:34:e2:44:9b:31:47:ef:
45:f7:e5:b5:e6:78:fe:92:d9:22:43:d9:7e:3f:f0:b7:3e:db:
a3:80:8d:bd:54:e5:bd:ac:ef:a7:d9:12:d6:3c:38:53:cf:41:
f0:94:15:ee:e5:be:8b:52:b9:dd:77:d0:cd:80:ef:83:84:d8:
32:39:a4:8c:ab:75:d6:ff:72:bb:68:0d:a9:02:f7:a1:ad:3d:
37:0f:47:d1:3c:0d:d9:b0:2f:1e:c1:3c:ef:84:96:31:16:29:
54:1e:2c:6b:7f:2e:c5:21:82:d8:5d:1b:88:53:23:b8:5e:51:
03:7f:0d:2a:7d:47:bd:04:7f:31:e0:82:5e:0e:66:5a:81:36:
6b:92:a3:70:e8:0c:6a:e1:57:3e:96:7b:39:3f:2e:fb:b9:31:
fc:d5:5a:a8:7e:c4:47:f1:09:bb:e7:08:9a:55:5a:21:d8:a3:
b9:59:d1:62:1a:3c:e3:2f:9b:7d:46:3c:5f:d6:b6:62:fe:0c:
93:ff:e7:7a:58:e0:f5:43:af:f0:96:4d:c3:30:1e:72:4c:9e:
75:db:2b:41:a4:14:35:d7:f8:b9:b3:72:f4:3d:f6:94:9e:5e:
f7:85:42:07:9a:cd:d0:35:d3:d7:cf:a7:6a:ff:da:38:9c:6a:
6a:fa:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 11:57:58 2024 by rpki-client on console-ams.rpki-client.org