Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/kg17z46y_YBMavVqIZYwKAO_T1s.roa
File: kg17z46y_YBMavVqIZYwKAO_T1s.roa (raw, json)
Hash identifier: dsOrTB9zag+OMNc4Z9lHtG/yJXUGbVJJXpmgHn2t62o=
Subject key identifier: 92:0D:7B:CF:8E:B2:FD:80:4C:6A:F5:6A:21:96:30:28:03:BF:4F:5B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E62
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kg17z46y_YBMavVqIZYwKAO_T1s.roa
Signing time: Fri 29 Mar 2024 07:52:28 +0000
ROA not before: Fri 29 Mar 2024 07:52:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3682 (0xe62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 29 07:52:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=920D7BCF8EB2FD804C6AF56A2196302803BF4F5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:dd:3d:33:cd:fc:ec:b1:e4:56:c8:0e:27:
b8:ac:d3:08:e4:a7:e2:69:2d:11:6d:e8:22:ef:41:
2b:fe:8d:26:32:8a:31:0b:47:b2:38:32:cf:ac:6a:
85:50:b1:06:e4:f3:6d:4c:fa:d8:2d:aa:fe:23:d2:
d6:22:15:6b:92:06:2e:ee:1f:44:8d:42:53:05:e3:
18:70:62:5e:00:40:92:18:f5:83:a9:e1:a6:c5:8c:
da:29:93:01:15:0d:ea:ab:ae:c7:92:a6:0f:db:2b:
76:c7:88:6e:8a:2d:d9:67:e0:db:fd:17:e5:3c:29:
81:a0:85:32:25:71:eb:8a:ae:20:bb:35:83:32:cf:
59:45:45:5c:09:89:31:03:ec:4f:b3:0d:d3:c8:09:
df:f9:01:5c:34:9e:ca:d6:92:ed:4d:92:1e:a8:77:
75:87:a4:b1:18:24:7e:07:9e:ec:93:86:b5:32:b5:
12:5e:fc:b5:2b:4a:5e:fd:cb:a6:9e:c1:3f:40:63:
f4:96:24:3c:40:96:4d:d6:2b:2d:e1:d9:98:98:2e:
aa:b8:ba:56:5d:73:78:f3:d7:d4:fd:d1:41:e7:5b:
a4:ca:a3:5c:bf:db:5e:d5:33:b0:e1:99:2d:2d:3a:
70:f5:86:22:e3:c8:cf:83:44:92:94:5f:d8:f9:e9:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:7B:CF:8E:B2:FD:80:4C:6A:F5:6A:21:96:30:28:03:BF:4F:5B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kg17z46y_YBMavVqIZYwKAO_T1s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:83:14:19:46:ee:52:32:52:e7:aa:9a:7f:46:69:d9:c1:2c:
98:70:35:5a:fb:58:07:ec:1d:c0:27:0a:ac:ca:21:94:0f:28:
07:ed:87:16:c8:74:0c:9a:cc:ed:71:48:ca:e6:0a:8f:77:b7:
ec:78:49:14:03:de:34:8e:5b:8e:f1:8c:e9:a7:fa:41:25:cc:
34:e8:59:b2:eb:de:91:88:3e:ce:7b:c1:30:0f:c5:c2:31:4d:
a5:22:65:e5:f4:ea:06:0f:40:a0:05:ac:17:0b:59:01:52:dc:
7d:24:95:6e:20:88:a6:3e:96:fe:13:bf:d2:0b:21:b5:4c:92:
77:c7:3d:d3:c8:b3:a6:8d:d8:a0:5b:59:72:3c:0e:0e:97:56:
0b:1a:4a:1d:58:e4:87:ad:94:d5:07:e6:27:4c:4a:03:75:58:
7f:15:f5:98:45:06:84:de:50:df:71:29:a2:0c:9c:3e:41:2b:
32:76:4c:c8:9f:4b:c8:fd:25:76:64:2b:6d:92:e2:35:19:4b:
0f:81:6c:1b:b0:e9:06:bd:7d:71:78:24:45:2b:14:ba:1b:0d:
0b:c3:b6:f2:4e:24:0e:9e:d6:74:78:0e:8b:c7:25:64:50:2e:
46:6d:bb:6c:cf:6e:38:3a:b1:b8:b2:08:95:db:1b:fa:d2:1c:
c6:fa:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 13:00:41 2024 by rpki-client on console-ams.rpki-client.org