Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/a9PDt9LGjYIaY5ASL-ukjnvQOag.roa
File: a9PDt9LGjYIaY5ASL-ukjnvQOag.roa (raw, json)
Hash identifier: ZHiygW8w4y2E2jcDHLVKxKpL2MrWQA0tyBXncC4UneY=
Subject key identifier: 6B:D3:C3:B7:D2:C6:8D:82:1A:63:90:12:2F:EB:A4:8E:7B:D0:39:A8
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B7A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/a9PDt9LGjYIaY5ASL-ukjnvQOag.roa
Signing time: Fri 03 May 2024 05:54:10 +0000
ROA not before: Fri 03 May 2024 05:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7034 (0x1b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 05:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6BD3C3B7D2C68D821A6390122FEBA48E7BD039A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:a7:87:ab:f6:c2:8c:a6:85:8f:ca:7c:a1:
9b:55:ee:69:ea:44:3e:18:45:35:fd:dd:d1:b1:53:
63:11:06:38:aa:f7:5b:bf:a3:48:25:58:bc:03:e5:
c7:56:4b:4c:46:46:46:d3:dd:05:f0:04:26:0c:27:
bd:5a:41:1f:76:44:0d:65:af:9c:5d:28:eb:2e:cf:
b3:ec:cb:51:2e:3c:13:44:49:f8:73:f6:2d:bc:ad:
82:f1:70:bd:11:7f:d1:6b:f9:f9:d4:77:9d:3e:e0:
15:9c:69:8a:c2:e5:13:c9:82:2d:dc:4b:d9:ef:5e:
c1:3f:38:bd:98:d3:40:e7:65:67:e2:49:d0:de:6f:
44:65:75:68:81:9f:83:2b:26:62:a1:ef:00:75:ca:
f1:b1:ce:e6:2a:0f:c3:23:b4:4e:1f:c3:b3:d5:cb:
ba:bc:f3:e3:40:9e:cb:fa:79:53:b2:a5:79:26:43:
76:42:3a:ac:6c:82:77:6e:cd:a9:20:42:30:5c:be:
e5:7c:86:6c:4b:ef:25:94:1e:f9:fd:bf:b7:aa:12:
d2:62:8f:92:b1:6b:33:73:92:07:0c:4f:48:f2:74:
ae:08:20:63:c6:37:27:23:9c:3f:0b:a5:c4:f5:13:
9c:14:bc:d2:f7:3a:bc:08:d0:be:08:70:69:0d:81:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D3:C3:B7:D2:C6:8D:82:1A:63:90:12:2F:EB:A4:8E:7B:D0:39:A8
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/a9PDt9LGjYIaY5ASL-ukjnvQOag.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:64:2d:32:69:b7:df:7c:67:e8:d5:23:e3:a2:7e:2d:35:f7:
c9:48:f7:f4:67:1e:a1:87:1d:6e:77:2c:13:73:4e:d9:59:f0:
3b:3a:ea:ee:2f:7c:44:a7:08:3e:f2:2b:de:a8:ad:2f:1c:af:
8d:04:53:05:a0:c2:b1:c2:1e:45:67:21:ce:40:4b:ad:1c:cb:
91:81:09:98:e8:04:a4:78:54:7e:1a:ec:97:f2:cc:15:f2:f6:
b1:0e:54:4f:ec:46:05:17:46:b4:fa:7d:2d:6a:41:53:3b:71:
47:78:a3:ab:45:fa:19:3c:bc:95:89:c0:e0:48:56:3f:2c:bd:
d0:00:4d:36:d0:87:09:9e:c3:c1:b6:41:c9:8b:9e:b6:18:18:
df:f6:b1:4e:65:f0:40:e9:24:8f:4b:e6:71:e7:9e:d5:f1:6a:
c5:aa:bd:db:65:20:82:11:1c:06:e8:63:d0:a8:af:f9:75:6b:
57:ae:81:33:f2:dd:15:75:8e:ec:de:1e:bf:8b:c0:3f:81:99:
07:ec:44:5d:ad:28:aa:d3:85:83:26:13:5d:b3:29:0f:a1:6b:
cc:f8:26:b3:b6:da:d3:8e:b3:28:fd:93:f0:1b:79:eb:ad:2a:
f5:75:64:8e:90:d4:00:2c:a4:f9:0e:c3:14:85:fc:5e:62:47:
28:62:16:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:08:57 2024 by rpki-client on console-fra.rpki-client.org