Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/kE0awDumt3U3q2Y6lJ4dX6V0REQ.roa
File: kE0awDumt3U3q2Y6lJ4dX6V0REQ.roa (raw, json)
Hash identifier: +kuSGUEp9MX8b5mf9eKqZuFo+6P3sToc+097fMWy/P8=
Subject key identifier: 90:4D:1A:C0:3B:A6:B7:75:37:AB:66:3A:94:9E:1D:5F:A5:74:44:44
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 01FE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kE0awDumt3U3q2Y6lJ4dX6V0REQ.roa
Signing time: Tue 06 Sep 2022 03:53:30 +0000
ROA not before: Tue 06 Sep 2022 03:53:30 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 7018
IP address blocks: 112.75.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Sep 6 03:53:30 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=904D1AC03BA6B77537AB663A949E1D5FA5744444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:b1:a7:08:f5:14:d7:85:93:af:fc:17:00:
28:81:52:98:93:f4:5a:31:86:23:c7:97:17:7c:7b:
df:d8:c5:21:e3:9d:e0:b7:76:60:d3:99:98:df:a4:
16:1b:7e:ec:cc:99:3b:da:b9:3b:9f:47:a2:21:ba:
b7:a9:4a:2d:e7:44:a9:a4:57:e6:79:57:a6:33:71:
08:32:70:47:ec:31:72:a7:45:24:6f:40:61:4d:b5:
97:2e:99:4f:c8:cb:6a:10:78:e6:f5:b8:1c:34:88:
a4:ed:13:0e:bc:91:c8:78:0b:4e:41:b0:ab:a2:46:
a1:23:a8:55:30:56:a6:84:9d:60:93:84:85:70:a5:
ed:68:48:24:63:9e:45:00:87:26:d6:cd:93:f0:f5:
2e:02:0b:fe:85:1e:85:29:80:08:73:b5:05:3c:ca:
97:e6:1c:1c:20:38:90:35:7b:c4:ea:21:4a:82:55:
1e:85:c4:35:0b:49:c4:45:7d:86:d3:9c:65:47:f0:
dc:17:11:9c:91:78:91:f9:4e:8e:f8:bd:31:73:ae:
70:fe:b1:67:fa:a6:0d:50:e8:44:64:56:0e:9b:02:
e3:d8:b4:ca:f8:89:18:9a:8f:bb:d4:79:38:77:d0:
69:3b:8c:60:47:ac:5f:55:a9:18:ca:73:73:4d:af:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4D:1A:C0:3B:A6:B7:75:37:AB:66:3A:94:9E:1D:5F:A5:74:44:44
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kE0awDumt3U3q2Y6lJ4dX6V0REQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/17
Signature Algorithm: sha256WithRSAEncryption
bd:a6:42:67:55:d8:ff:1a:d2:c8:24:fb:b1:30:0c:64:16:1a:
01:78:6d:4d:8d:af:b1:69:08:29:73:d2:ab:ea:8e:55:29:d7:
61:1a:03:4f:1f:20:da:75:2d:f9:12:4a:59:e1:fd:51:78:7d:
29:d1:8f:31:da:16:38:71:dc:b2:36:c3:36:21:27:bd:e4:e8:
86:bf:9e:a5:26:63:f0:69:03:5c:31:2c:c4:75:ce:b5:cf:64:
85:1b:ee:4d:03:07:b4:66:c5:de:e5:5b:75:8a:0b:4f:ba:7f:
23:c0:8f:39:ae:0d:70:40:76:25:15:03:ea:1b:d2:1a:55:32:
d0:87:00:ff:a3:23:dd:f8:7c:15:00:6a:c3:13:b8:01:f0:d9:
19:29:11:a8:02:46:3e:66:c9:b2:c5:6e:a8:4e:6b:c1:96:40:
1f:d0:c8:d6:61:bf:4b:75:da:cf:43:4f:ed:29:2e:39:06:84:
fc:7d:c5:25:15:20:9a:e0:6d:75:af:4a:3a:44:1e:8d:84:f6:
ea:83:81:92:96:87:89:6c:bd:a8:33:ce:b7:01:fa:a6:cd:c1:
6c:12:d0:e0:b7:8f:0a:6e:37:35:47:16:3c:3d:1a:36:9a:fd:
14:2e:11:45:ce:ea:7d:81:12:a8:78:4e:a3:84:69:46:8e:e1:
9e:fd:2d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org