Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/i3phSmoulopXlIBVy6vheZJr2Ew.roa
File: i3phSmoulopXlIBVy6vheZJr2Ew.roa (raw, json)
Hash identifier: jU88x8J+3kGWaSkhrQ9gZxslvwgl6X25mvKJ10lFT5w=
Subject key identifier: 8B:7A:61:4A:6A:2E:96:8A:57:94:80:55:CB:AB:E1:79:92:6B:D8:4C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15C2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/i3phSmoulopXlIBVy6vheZJr2Ew.roa
Signing time: Wed 17 Apr 2024 23:53:24 +0000
ROA not before: Wed 17 Apr 2024 23:53:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5570 (0x15c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 23:53:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8B7A614A6A2E968A57948055CBABE179926BD84C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:98:b0:8e:8d:73:68:dc:b2:e0:ea:40:0d:
b6:96:74:90:f1:36:1d:84:f5:d3:41:e8:1d:24:0a:
28:70:3b:54:1f:b7:1e:5c:72:02:8b:5e:cb:e6:a9:
3d:70:ad:73:2d:94:a8:94:ac:a9:3b:be:26:db:b2:
8f:a7:76:c5:19:fc:7b:28:03:1c:29:c3:70:58:8d:
5f:f6:07:3b:a7:91:89:49:14:5f:4e:b6:e9:c9:c5:
7c:de:dd:da:45:65:ec:c7:82:35:ff:9b:46:1d:bc:
dd:63:ca:16:2e:f4:d4:11:50:0b:73:98:c9:da:42:
c3:ee:b3:2b:07:29:63:ff:60:40:68:3d:fd:9f:ee:
fe:e0:4b:1f:25:8f:f4:4b:b2:91:46:55:36:39:ae:
22:9b:f5:ed:80:4a:82:f2:af:ec:9f:2f:2d:81:32:
39:f4:db:2d:19:37:c7:0c:71:31:cd:b3:5e:cb:20:
2a:04:61:57:31:08:56:d7:9c:c8:8b:55:4b:91:fd:
06:9a:5a:6a:13:ca:a8:0d:3b:3e:5e:fa:c9:97:f4:
4f:38:1d:92:36:3a:3b:38:a8:96:e2:29:c4:82:1a:
69:db:c1:cf:05:f2:af:b4:2d:c0:c4:81:e7:0e:6d:
c4:f9:26:7e:20:6d:59:98:cc:bc:39:34:cf:db:30:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7A:61:4A:6A:2E:96:8A:57:94:80:55:CB:AB:E1:79:92:6B:D8:4C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/i3phSmoulopXlIBVy6vheZJr2Ew.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:84:a8:e7:33:ca:10:aa:f9:0c:ad:7d:a9:7d:62:b6:b0:ee:
c1:dc:64:ae:11:7c:7f:86:02:74:61:f5:77:37:cb:8b:8d:24:
b3:bb:e4:fb:69:7e:cb:05:b3:74:3b:1a:76:91:40:f3:8d:aa:
ba:70:00:88:41:b0:23:d1:76:5a:76:d5:69:fc:d4:62:c5:25:
ca:2d:aa:f5:4a:91:e5:94:2f:22:8e:64:1c:77:d0:87:88:58:
27:58:85:ab:98:69:17:07:8f:a3:20:92:30:a9:ef:3b:33:e9:
07:7f:38:68:80:a1:d6:09:ce:a9:c1:87:85:9d:f2:c7:0b:bc:
c4:0e:a9:3c:19:4c:1f:63:65:7f:72:93:e8:cc:82:ce:41:b9:
ba:0b:79:01:12:7e:c9:e2:f7:c0:12:50:22:1e:f1:3b:d9:da:
a7:e3:ce:a2:0d:81:83:8b:af:d0:3e:50:2c:25:41:19:9d:f5:
d3:33:04:d4:05:0a:cf:96:9c:89:56:87:6c:f0:97:8a:bf:57:
0d:01:c4:0e:2a:6d:6f:b3:1b:0c:c0:ff:95:14:1e:9f:db:0a:
11:c6:ca:ce:ca:ac:f5:ca:c3:25:bb:65:a6:89:fa:e8:08:53:
55:5c:5a:cd:c9:54:73:7a:70:28:61:a6:6f:83:38:e2:8f:78:
4f:8b:cb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 02:54:29 2024 by rpki-client on console-ams.rpki-client.org