Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/aWniqOaIdYXLyqwjZIU-KGhaTBg.roa
File: aWniqOaIdYXLyqwjZIU-KGhaTBg.roa (raw, json)
Hash identifier: 2dL+xWpND5fvzhhGcFff0Tu7s6owWsVBip0epd8gEGY=
Subject key identifier: 69:69:E2:A8:E6:88:75:85:CB:CA:AC:23:64:85:3E:28:68:5A:4C:18
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CBA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aWniqOaIdYXLyqwjZIU-KGhaTBg.roa
Signing time: Mon 06 May 2024 13:54:16 +0000
ROA not before: Mon 06 May 2024 13:54:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7354 (0x1cba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 13:54:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6969E2A8E6887585CBCAAC2364853E28685A4C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:67:62:b3:74:39:26:70:c4:eb:09:8b:03:
1e:a6:63:49:d5:74:d7:ff:9d:1a:9f:7e:32:29:49:
eb:a2:1a:53:44:b9:50:67:f3:0f:54:93:47:44:c9:
ed:4d:ef:9b:49:c2:a3:44:07:77:d7:6b:b5:89:3a:
6d:e4:ac:16:0b:b0:08:19:16:cd:08:20:15:c4:f7:
24:23:18:63:d8:46:56:d5:5f:ff:72:e0:40:61:ed:
01:81:48:cd:ec:6c:19:3b:ff:e4:1e:7c:25:bb:35:
0a:10:af:b5:46:bf:d0:9b:8c:88:00:c5:4e:49:5e:
eb:26:af:11:29:57:aa:02:8e:95:fd:08:2a:79:cb:
e7:95:68:23:c5:58:8c:d0:89:e4:d2:d3:1e:91:ce:
7a:96:29:7a:af:4f:11:d6:75:29:89:dc:43:87:4e:
99:e7:3d:25:19:ec:7c:3c:93:90:85:6e:9d:67:a5:
76:fe:2a:56:42:c6:4d:5d:fe:84:63:a8:18:27:10:
80:d6:57:d5:f5:14:25:8a:48:5a:ec:0a:3f:fb:19:
af:63:28:1a:ed:aa:b3:b7:ed:c7:d5:7a:71:28:ea:
77:d4:1d:9a:e5:56:f1:be:ea:e6:8c:10:5e:63:de:
50:57:78:97:cd:c9:c0:8e:92:37:be:70:06:a2:71:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:69:E2:A8:E6:88:75:85:CB:CA:AC:23:64:85:3E:28:68:5A:4C:18
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aWniqOaIdYXLyqwjZIU-KGhaTBg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:75:b2:bc:85:6d:aa:7c:f5:f5:64:63:33:b5:97:02:b0:c6:
03:6b:3a:a4:f5:ee:b2:21:e5:69:df:fb:da:cf:fa:f0:be:a8:
96:c2:d6:65:f3:fb:bc:3c:8a:63:2f:b3:22:40:af:a9:e3:89:
84:52:1e:e2:4b:e6:35:a9:c8:78:f4:d3:64:dc:f8:7a:b1:1f:
06:ba:6f:84:52:24:80:ca:5a:b5:1b:2c:d8:b2:22:80:43:f9:
68:2c:99:e4:b8:c7:69:0d:a7:f5:c3:a3:26:92:65:a7:62:f3:
65:05:98:d0:44:e2:fd:27:17:86:a1:a8:c2:c9:af:d2:47:3a:
86:57:d3:6f:16:05:27:35:0f:e2:e6:cf:7c:98:83:48:9e:20:
1f:06:98:11:d3:05:ba:fd:6c:fc:74:95:b7:f6:16:dc:e3:c1:
80:e5:f0:c2:6d:4b:87:e7:f0:69:8d:07:60:96:fa:0c:c4:be:
b7:89:dd:37:00:30:78:32:ea:e9:31:e1:eb:25:37:00:4d:9b:
62:7e:1f:69:9c:6f:b2:06:cb:7a:2f:54:d2:e0:23:84:04:a8:
a4:b0:a4:db:dd:7f:9d:9e:6c:f3:66:d9:41:c5:14:02:15:7b:
42:82:b8:30:43:38:2d:c2:b4:26:a3:43:6c:52:0e:05:cc:2e:
89:e7:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 19:36:53 2024 by rpki-client on console-fra.rpki-client.org