Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/cp0NYJWzKI65SJ5kP0HmlgpW3zU.roa
File: cp0NYJWzKI65SJ5kP0HmlgpW3zU.roa (raw, json)
Hash identifier: CZxZ20qrAqJfZtQ6wtU+DTMietlu6ny4Pq/twHRXGes=
Subject key identifier: 72:9D:0D:60:95:B3:28:8E:B9:48:9E:64:3F:41:E6:96:0A:56:DF:35
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C06
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cp0NYJWzKI65SJ5kP0HmlgpW3zU.roa
Signing time: Sat 04 May 2024 16:54:17 +0000
ROA not before: Sat 04 May 2024 16:54:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7174 (0x1c06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 4 16:54:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=729D0D6095B3288EB9489E643F41E6960A56DF35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:01:c2:22:55:d5:bc:7c:38:c5:dd:54:eb:
36:a7:21:29:19:5a:8b:bd:35:82:47:95:59:7d:30:
69:92:85:45:16:59:9e:9d:04:a8:91:f2:20:05:37:
4f:b9:6a:cf:3a:1e:9a:c8:95:ab:f4:2b:46:dd:ea:
9b:59:e9:45:5b:74:2a:f7:b3:5e:f5:fe:e4:38:4b:
e7:d0:4c:b5:26:11:b1:22:0d:98:a1:4c:9b:74:ae:
8b:34:7e:12:89:f4:81:6f:d6:fc:2e:c3:6b:2b:46:
90:a0:01:86:53:10:0d:e6:d1:6c:17:d0:6d:d7:eb:
02:37:c4:37:35:80:3b:68:4e:fa:72:2f:0c:45:81:
f8:6e:b2:39:a5:5c:2e:68:2e:fd:98:10:11:6e:b2:
8c:e3:a5:22:b2:59:da:9d:52:11:bc:b2:52:34:b8:
84:42:00:6d:56:bd:43:be:81:f7:88:22:d9:3d:6c:
01:1c:bb:3c:4f:21:70:46:fb:8d:f3:06:5e:74:d8:
0a:b9:fb:a3:aa:02:a3:47:37:b7:ca:5c:6b:b2:33:
43:43:2c:67:80:ea:13:d2:36:99:e9:06:cc:a9:25:
cb:26:e9:22:f6:b3:8b:cd:b5:33:2e:69:cf:ff:7b:
9e:21:14:d3:50:87:a0:b2:53:bb:5c:2c:35:d7:70:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9D:0D:60:95:B3:28:8E:B9:48:9E:64:3F:41:E6:96:0A:56:DF:35
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cp0NYJWzKI65SJ5kP0HmlgpW3zU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:51:53:b9:c0:9f:ae:65:73:30:38:8d:0a:df:03:a4:48:3f:
62:bb:dd:43:ba:75:c5:2c:b8:49:d6:c7:6e:8c:71:c2:19:d7:
c5:a5:18:7e:1e:5e:4e:66:38:9d:98:42:37:08:93:0b:98:81:
1d:fd:b4:45:58:40:93:65:1c:5c:b6:7b:f2:61:ac:d6:65:43:
6b:21:d3:7f:24:f4:fa:ca:89:ce:61:14:bf:17:18:17:3a:06:
53:ac:96:71:14:54:c0:0e:83:b0:be:56:d4:82:64:33:fd:d1:
b8:2e:02:4f:24:d7:b8:1c:02:29:c6:97:45:81:64:60:8f:76:
1b:08:4b:63:f6:0c:89:f2:7f:83:3b:fa:84:68:53:b9:c2:84:
d9:fe:3e:7d:7d:3d:1d:fb:30:a3:a5:5b:a1:f1:da:31:a2:9b:
cc:16:9c:3e:a4:69:0c:e9:fc:97:6b:2b:29:b8:01:86:13:85:
11:39:8d:6f:cf:19:63:b0:a4:b3:4b:ab:09:12:79:67:50:90:
e8:ad:db:83:52:ff:cc:ec:34:03:ea:7a:7c:dd:75:5a:24:2d:
6e:f3:e0:f5:02:cb:f5:bf:1c:96:68:b6:ec:2b:4a:9c:e0:12:
2d:b9:58:97:00:df:c9:c4:75:d4:5e:99:88:3a:6c:51:1d:a6:
20:cf:f4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 19:57:12 2024 by rpki-client on console-fra.rpki-client.org