Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/a0V4nQTYrcSW9IwxTluhc5FCwqk.roa
File: a0V4nQTYrcSW9IwxTluhc5FCwqk.roa (raw, json)
Hash identifier: XeROtovRsbfS20fy72cJIghvH45ApSbDw+5zxupl0Zo=
Subject key identifier: 6B:45:78:9D:04:D8:AD:C4:96:F4:8C:31:4E:5B:A1:73:91:42:C2:A9
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0FE6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/a0V4nQTYrcSW9IwxTluhc5FCwqk.roa
Signing time: Tue 02 Apr 2024 08:52:41 +0000
ROA not before: Tue 02 Apr 2024 08:52:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4070 (0xfe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 2 08:52:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6B45789D04D8ADC496F48C314E5BA1739142C2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f7:2e:62:6b:59:b9:35:3f:d3:3d:61:13:9e:
fc:7f:7c:cd:1c:8e:4a:f7:a2:01:57:9b:4e:56:ca:
40:5c:be:82:ac:60:a2:2c:2d:18:99:03:05:c9:23:
05:3d:3e:47:b9:6c:6f:1b:ce:72:ac:e1:21:ca:4f:
1a:ce:79:62:3b:36:72:42:ee:e8:1e:11:df:c1:84:
d1:60:24:bd:df:ca:c1:c8:ca:64:73:ca:35:dd:15:
5a:fc:25:81:3f:92:94:63:70:36:cf:51:1e:77:25:
08:52:04:a4:03:6a:58:8d:79:7d:09:cc:9b:88:f9:
2b:a2:c5:b0:70:77:c5:40:90:24:28:70:83:8d:8a:
6d:55:e0:98:f4:d9:07:24:fb:0f:03:64:fc:e8:3d:
42:7c:79:ec:a5:e5:ac:3c:f9:28:ee:a9:ae:63:47:
32:a4:e0:d8:42:14:28:be:cb:51:62:46:5a:19:62:
ff:c9:9e:3e:ef:7c:1f:6e:0e:7a:54:30:b8:d4:a9:
db:e1:df:d6:ba:a3:88:10:76:37:24:60:b6:33:9b:
ff:54:d0:66:71:c8:e5:fb:1b:dc:6b:b1:1d:58:6a:
54:b0:1f:bb:26:24:37:7b:71:63:0b:4c:aa:ed:59:
d6:4e:ef:78:10:43:ce:97:58:16:14:f2:f6:38:52:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:45:78:9D:04:D8:AD:C4:96:F4:8C:31:4E:5B:A1:73:91:42:C2:A9
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/a0V4nQTYrcSW9IwxTluhc5FCwqk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:22:bc:50:4b:c9:a7:85:b1:45:55:0d:b2:a7:07:a8:1d:d0:
9f:26:0a:e1:2b:61:e8:8e:df:55:57:87:39:91:67:86:11:e8:
89:e2:f4:cf:f8:7e:52:c7:f9:15:45:c1:30:ef:20:68:08:e1:
21:50:80:1e:e3:42:27:0d:e6:53:6e:5d:6d:bf:bd:2a:a7:34:
06:d5:c0:1c:70:64:06:f8:8d:74:c3:ee:b1:25:5b:51:2d:45:
b5:52:bf:fb:fd:9b:88:0b:fe:8f:20:08:33:f4:4c:b3:07:42:
44:c3:cc:39:a9:6a:3d:76:c0:1c:b9:70:81:27:74:8c:07:97:
ef:5c:d5:83:34:f3:23:0e:ec:51:1f:49:15:8c:7d:28:58:b9:
16:be:44:33:9b:e0:0f:35:d9:59:e1:ad:ac:c3:24:36:91:ca:
72:d8:9e:13:f4:e1:50:3e:4b:19:9a:04:dd:f9:e9:78:8a:3a:
95:b3:e7:1e:e3:c6:f2:1c:b9:5d:0a:80:11:d9:22:ec:63:fb:
e2:72:55:16:ff:44:02:05:c0:44:34:78:98:fd:d8:f1:41:bb:
18:0f:33:56:e3:8b:81:ea:42:45:96:7c:e6:a1:66:9b:a6:f2:
38:e5:82:5e:fc:69:0b:d5:4d:99:40:68:82:fc:00:fd:3b:2e:
4e:d8:db:53
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD+YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDIw
ODUyNDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZCNDU3ODlEMDREOEFE
QzQ5NkY0OEMzMTRFNUJBMTczOTE0MkMyQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD39y5ia1m5NT/TPWETnvx/fM0cjkr3ogFXm05WykBcvoKsYKIs
LRiZAwXJIwU9Pke5bG8bznKs4SHKTxrOeWI7NnJC7ugeEd/BhNFgJL3fysHIymRz
yjXdFVr8JYE/kpRjcDbPUR53JQhSBKQDaliNeX0JzJuI+SuixbBwd8VAkCQocION
im1V4Jj02Qck+w8DZPzoPUJ8eeyl5aw8+Sjuqa5jRzKk4NhCFCi+y1FiRloZYv/J
nj7vfB9uDnpUMLjUqdvh39a6o4gQdjckYLYzm/9U0GZxyOX7G9xrsR1YalSwH7sm
JDd7cWMLTKrtWdZO73gQQ86XWBYU8vY4UtGDAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUa0V4nQTYrcSW9IwxTluhc5FCwqkwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2EwVjRuUVRZcmNTVzlJ
d3hUbHVoYzVGQ3dxay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAGSK8UEvJp4WxRVUNsqcHqB3QnyYK4Sth
6I7fVVeHOZFnhhHoieL0z/h+Usf5FUXBMO8gaAjhIVCAHuNCJw3mU25dbb+9Kqc0
BtXAHHBkBviNdMPusSVbUS1FtVK/+/2biAv+jyAIM/RMswdCRMPMOalqPXbAHLlw
gSd0jAeX71zVgzTzIw7sUR9JFYx9KFi5Fr5EM5vgDzXZWeGtrMMkNpHKctieE/Th
UD5LGZoE3fnpeIo6lbPnHuPG8hy5XQqAEdki7GP74nJVFv9EAgXARDR4mP3Y8UG7
GA8zVuOLgepCRZZ85qFmm6byOOWCXvxpC9VNmUBogvwA/TsuTtjbUw==
-----END CERTIFICATE-----
Generated at Tue Apr 2 14:25:17 2024 by rpki-client on console-fra.rpki-client.org