Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/VT-eCwje8e7y5r35SKNlAdy9bro.roa
File: VT-eCwje8e7y5r35SKNlAdy9bro.roa (raw, json)
Hash identifier: jX4Y8ZMYExZ627BiVXbKrMC6TlKtO5RlpTyO10pB2Hk=
Subject key identifier: 55:3F:9E:0B:08:DE:F1:EE:F2:E6:BD:F9:48:A3:65:01:DC:BD:6E:BA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0646
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/VT-eCwje8e7y5r35SKNlAdy9bro.roa
Signing time: Thu 13 Apr 2023 04:44:08 +0000
ROA not before: Thu 13 Apr 2023 04:44:08 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 3223
IP address blocks: 112.75.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1606 (0x646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 04:44:08 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=553F9E0B08DEF1EEF2E6BDF948A36501DCBD6EBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:eb:e5:b9:d9:34:0d:8e:06:8b:cd:76:17:
cf:5e:27:96:b2:d0:7f:2a:41:f1:01:e3:ce:0c:f0:
2a:1e:94:8d:39:b0:b0:f2:2d:8f:4f:b7:30:cb:5c:
7a:a6:6b:7d:04:5f:47:2f:af:89:65:91:48:92:21:
ce:e5:f0:bd:a8:c7:33:65:15:72:08:b9:64:e8:56:
06:c2:26:a5:d9:3b:eb:55:73:94:6b:2f:bc:1f:55:
6e:30:79:6c:36:46:86:49:f2:4f:41:65:52:f8:f8:
65:de:19:10:62:29:05:55:c9:25:8d:64:cb:08:7a:
6f:db:5c:e0:33:ad:8d:a4:ec:ad:f4:68:0d:3d:1d:
6f:88:41:bd:8c:46:51:45:6c:49:5d:46:10:0b:f0:
fa:8d:7e:90:b8:62:7e:63:78:f5:aa:30:1e:54:04:
e0:e2:b1:d7:fd:80:39:49:23:02:f1:e0:26:4f:01:
af:8e:58:47:97:47:70:c3:f4:26:43:e2:78:b6:f3:
15:8a:c9:ba:ba:38:90:b5:e1:ae:62:56:0a:c2:22:
20:e2:89:47:d0:b0:59:26:42:52:44:ac:22:20:9d:
5b:dd:d7:05:f4:9b:d7:72:b8:69:1b:86:77:5d:96:
6d:02:a3:27:e0:64:88:8b:fe:14:77:cd:57:4d:61:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3F:9E:0B:08:DE:F1:EE:F2:E6:BD:F9:48:A3:65:01:DC:BD:6E:BA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/VT-eCwje8e7y5r35SKNlAdy9bro.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.64.0/19
Signature Algorithm: sha256WithRSAEncryption
d9:7b:25:51:3a:a2:f8:f4:99:65:27:31:ea:8e:1f:ce:d4:df:
44:2a:f7:37:fc:8a:b3:15:ae:ea:01:6c:52:ee:0b:e5:05:04:
b0:01:3b:d7:87:0a:7e:f2:4c:19:b8:ad:b4:5d:94:0c:50:48:
d7:11:30:9d:74:63:64:6d:66:3e:5e:a1:be:90:e3:cd:d6:f3:
1b:41:64:a3:37:9d:1f:0a:16:1c:3d:8f:7e:97:f9:80:53:0c:
1d:8a:c2:c6:0a:49:06:c4:38:a4:ce:cb:d8:36:f6:a3:e1:54:
62:33:de:43:c3:94:62:bf:27:0f:fd:80:7a:2e:2b:7d:b8:6e:
74:05:1e:aa:31:21:7c:e2:40:3b:25:95:e2:68:85:b3:f8:c1:
58:ff:d9:4b:b8:32:9b:da:92:c5:95:60:f5:36:c3:e0:9b:1b:
9c:a6:1b:5a:fc:ad:09:3e:d5:49:90:f5:ee:99:2f:a6:90:75:
eb:90:4d:50:d4:b5:3f:86:c2:f5:ed:80:bb:49:c6:32:f6:b2:
12:c3:38:e1:7c:ba:0a:5f:62:36:0b:9c:1a:a4:af:c6:c5:c2:
03:8f:ad:21:e5:43:4d:26:3d:cc:4d:ad:3e:2c:19:19:30:d1:
32:c7:35:20:62:2e:46:97:69:65:53:48:5c:04:e1:0a:29:aa:
fc:d1:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org