Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/aW-rgHczUm8fKxPABBHPgb8iEsU.roa
File: aW-rgHczUm8fKxPABBHPgb8iEsU.roa (raw, json)
Hash identifier: Hh2m6nfcUSFrT2CmdVBCBPjFS2EDGxP9qLT0C6Sgm8Y=
Subject key identifier: 69:6F:AB:80:77:33:52:6F:1F:2B:13:C0:04:11:CF:81:BF:22:12:C5
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1012
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aW-rgHczUm8fKxPABBHPgb8iEsU.roa
Signing time: Tue 02 Apr 2024 19:52:43 +0000
ROA not before: Tue 02 Apr 2024 19:52:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4114 (0x1012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 2 19:52:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=696FAB807733526F1F2B13C00411CF81BF2212C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5f:53:fe:bb:10:3a:11:d3:be:0f:61:5a:94:
3c:70:f3:86:a1:fa:b2:73:42:2a:e6:61:0f:0d:5d:
c9:ae:d2:4b:ee:f2:d5:fc:50:6c:a2:52:e2:b4:a4:
07:19:66:9d:78:36:b7:e1:25:07:67:35:e8:67:c3:
da:72:4a:93:eb:23:86:c2:3e:7a:0c:80:f8:18:25:
f9:73:82:1e:76:9c:95:a4:3f:16:8f:49:28:70:9a:
bd:e1:60:8d:90:55:57:82:3a:35:57:1e:41:0e:32:
bb:a8:30:84:a1:06:1c:48:5d:97:0a:99:5d:4c:f5:
80:d2:b5:e1:34:85:6c:c0:0c:29:61:59:f2:36:91:
05:49:ec:5b:3e:35:02:16:eb:b1:55:68:7e:8f:b2:
c3:3a:af:f6:95:40:ae:59:54:bd:97:d7:17:de:ae:
2f:af:0d:90:0b:fe:06:52:a3:9d:8b:6b:f3:07:19:
f3:18:59:0d:8a:44:2b:1f:35:4c:83:31:0c:d5:b1:
fa:62:74:68:da:22:30:4c:f8:37:d6:2e:b1:be:a6:
67:36:a4:28:70:fd:51:eb:f8:11:0d:99:3f:b2:70:
66:f8:03:1b:ef:1c:01:e3:4e:b6:9e:3d:43:69:f5:
1d:a8:7a:f0:8a:e3:bd:09:84:61:52:ca:3d:21:dc:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6F:AB:80:77:33:52:6F:1F:2B:13:C0:04:11:CF:81:BF:22:12:C5
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aW-rgHczUm8fKxPABBHPgb8iEsU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:d4:db:d1:d1:97:5f:ed:80:8e:11:33:20:06:bc:7b:a1:8f:
de:99:02:c2:f9:55:a8:5f:45:00:63:d8:bb:c6:e2:ff:68:fa:
cd:14:6a:99:85:84:12:49:b7:3f:39:05:60:8e:33:e9:9a:9d:
2c:8f:c3:03:45:aa:33:61:4f:0d:ae:5e:16:49:c3:87:41:34:
e3:1b:6f:db:2d:9c:d0:1b:59:b8:0d:7d:c1:b1:3d:19:06:72:
f1:43:e3:10:9b:89:c6:53:14:48:ae:23:85:db:d9:d9:7e:5a:
ec:5a:c5:c0:8b:59:ee:70:21:b9:6b:13:e7:c9:aa:27:5f:df:
a3:e7:89:0a:e9:b0:91:68:bf:e9:c7:fb:70:4f:5e:45:0e:ab:
14:92:1a:1c:1d:92:3a:2b:f3:09:99:7c:be:5b:ed:89:ad:14:
a7:8c:42:fd:a9:47:76:3c:92:23:e3:09:93:fa:76:0d:7e:d8:
a2:ee:87:c9:3e:58:b4:0e:6f:34:6a:f2:ca:0a:b1:c8:5b:a1:
ec:9b:95:e9:8a:f1:c9:ec:73:3a:aa:b9:60:dc:26:7a:6b:e1:
18:33:65:1f:a0:df:fe:92:ab:c7:47:3b:a5:80:56:18:c2:70:
76:05:fa:2b:8b:85:49:64:12:ac:1f:74:c6:41:9e:78:50:4e:
58:dc:35:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 23:44:44 2024 by rpki-client on console-fra.rpki-client.org