Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ZQjhhOo0vEi3PneTWouykOEVrT0.roa
File: ZQjhhOo0vEi3PneTWouykOEVrT0.roa (raw, json)
Hash identifier: 8m0MiTBwk4FkQP0752xcD9+q8BvnRXYpUh+dXT+yPGg=
Subject key identifier: 65:08:E1:84:EA:34:BC:48:B7:3E:77:93:5A:8B:B2:90:E1:15:AD:3D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 07DC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ZQjhhOo0vEi3PneTWouykOEVrT0.roa
Signing time: Tue 20 Jun 2023 14:29:05 +0000
ROA not before: Tue 20 Jun 2023 14:29:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 996
IP address blocks: 112.75.100.0/22 maxlen: 24
112.75.104.0/22 maxlen: 24
112.75.128.0/22 maxlen: 24
112.75.136.0/22 maxlen: 24
112.75.144.0/22 maxlen: 24
112.75.152.0/22 maxlen: 24
112.75.160.0/22 maxlen: 24
112.75.168.0/22 maxlen: 24
112.75.176.0/22 maxlen: 24
112.75.184.0/22 maxlen: 24
112.75.200.0/22 maxlen: 24
112.75.208.0/22 maxlen: 24
112.75.216.0/22 maxlen: 24
112.75.224.0/22 maxlen: 24
112.75.232.0/22 maxlen: 24
112.75.240.0/22 maxlen: 24
112.75.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2012 (0x7dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Jun 20 14:29:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6508E184EA34BC48B73E77935A8BB290E115AD3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:03:9d:d9:6f:ee:5a:75:db:b4:cd:c9:b9:
63:34:1e:db:ba:27:6a:9e:be:7b:fe:ee:f7:32:c5:
17:c9:94:46:f4:ea:63:64:cb:66:0c:6b:f7:b3:b8:
03:b8:1a:df:95:1d:aa:1b:df:d8:dd:75:25:45:bb:
09:0d:25:18:1a:02:f2:2d:25:69:7d:92:f3:72:a9:
f7:df:a5:23:76:12:09:dd:a6:3f:a1:da:2d:0d:db:
f2:81:fd:25:1d:2e:6f:cc:8e:b1:a6:e6:cd:48:55:
c9:45:b1:d5:c4:dd:a9:67:e5:e8:94:df:2b:c7:44:
ea:41:30:f3:4a:f9:fb:a5:4f:98:70:de:7d:85:6c:
68:70:ac:22:30:13:38:77:11:16:27:bf:24:8e:5f:
af:9a:a2:57:ee:1e:d7:10:ec:1b:60:42:5d:a9:6c:
af:0e:6c:48:0d:2d:6e:f4:1e:8d:ec:8b:03:70:60:
79:cf:01:63:90:b6:a8:e4:f5:ee:0b:8d:d4:7a:1e:
71:12:1b:f9:bf:4e:e6:38:e1:8a:29:ed:b0:e7:f8:
cc:29:48:e8:2b:d2:fe:23:9b:5f:51:2c:88:5c:42:
64:69:4c:43:54:07:ca:0e:c7:b7:11:04:53:03:01:
60:13:60:35:f0:34:89:7d:cd:28:28:7f:e3:05:76:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:E1:84:EA:34:BC:48:B7:3E:77:93:5A:8B:B2:90:E1:15:AD:3D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ZQjhhOo0vEi3PneTWouykOEVrT0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.100.0-112.75.107.255
112.75.128.0/22
112.75.136.0/22
112.75.144.0/22
112.75.152.0/22
112.75.160.0/22
112.75.168.0/22
112.75.176.0/22
112.75.184.0/22
112.75.200.0/22
112.75.208.0/22
112.75.216.0/22
112.75.224.0/22
112.75.232.0/22
112.75.240.0/22
112.75.248.0/22
Signature Algorithm: sha256WithRSAEncryption
26:3e:f7:2d:9c:ec:e1:fb:ec:73:e4:87:a7:62:10:ec:c5:2d:
e6:b9:96:42:b4:21:38:35:76:06:64:07:12:2c:20:22:63:bd:
61:45:c7:0f:2f:7f:65:a3:5c:fa:a3:ac:41:8f:83:fc:fc:11:
ca:ba:d0:26:8f:08:68:8b:a2:fe:df:b8:16:94:93:8a:c2:fb:
5f:44:94:36:d1:f5:83:c2:53:37:7a:d0:e9:a8:f4:79:3b:61:
55:31:e9:d4:28:e8:4c:d6:8f:65:64:f7:d9:09:37:14:19:05:
44:f2:2c:da:04:ab:93:c1:97:1e:bb:99:e4:61:f9:ee:58:c6:
a1:b4:67:7f:2e:4b:7d:d6:92:cd:0a:9b:2e:b3:76:9a:ca:e4:
e0:01:c5:d4:a7:23:00:22:fa:7c:34:ad:48:68:45:1f:00:ae:
a9:bc:b4:9b:da:3f:57:7b:e3:fd:48:2b:b4:e3:48:b0:0f:05:
4e:e5:70:f0:ca:8c:7e:d3:f0:47:6d:76:21:91:bd:23:0c:35:
c1:b8:dc:f6:bf:60:96:52:50:99:96:45:4d:0a:9d:ed:63:79:
51:2b:b6:dc:93:c7:00:f3:6b:bf:fc:12:26:76:94:45:f2:ec:
24:7f:78:25:03:7b:f2:9b:f0:9e:0f:a9:3e:5c:40:4c:84:8b:
b1:fe:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org