Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/lj-Zo_5neN78zsqUM3SQK28J-K8.roa
File: lj-Zo_5neN78zsqUM3SQK28J-K8.roa (raw, json)
Hash identifier: 7/Mb9ueRstPN9Iev1VX28Dx9zi42n9g9pC1YM8GeGfg=
Subject key identifier: 96:3F:99:A3:FE:67:78:DE:FC:CE:CA:94:33:74:90:2B:6F:09:F8:AF
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1580
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/lj-Zo_5neN78zsqUM3SQK28J-K8.roa
Signing time: Wed 17 Apr 2024 07:24:15 +0000
ROA not before: Wed 17 Apr 2024 07:24:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5504 (0x1580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 07:24:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=963F99A3FE6778DEFCCECA943374902B6F09F8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:f0:ac:11:76:73:c6:25:4b:42:d4:29:86:
5d:2e:3f:61:be:aa:c5:f1:79:be:da:50:e7:49:58:
9a:4a:cb:cf:89:c7:90:b6:2a:05:40:1b:92:08:0f:
73:20:93:37:a0:98:6d:a4:07:b2:b5:81:ef:f7:9c:
71:06:a5:ef:6b:f2:52:0d:95:8a:03:dc:92:15:70:
6a:5b:b1:d2:34:e5:9e:4f:83:14:62:9f:38:5e:ab:
be:c8:ce:69:17:fd:10:7b:d5:df:ad:10:29:e1:01:
61:e1:d3:56:d2:06:9d:9d:7b:28:d7:59:71:a2:3d:
57:0d:4f:5d:fb:d5:f2:b6:4f:07:05:95:af:27:40:
3b:44:37:dd:24:39:a3:30:ca:e0:b0:2f:69:3c:83:
0e:8c:49:a8:7e:c0:6d:ca:41:b5:89:23:b5:48:8f:
94:c4:08:9a:d7:ac:b7:a5:11:e8:ff:6e:b1:57:fa:
3e:83:d4:bf:3e:59:8c:ea:ab:81:7c:11:8b:d8:da:
3f:da:34:7c:0c:42:0c:51:1e:99:fb:4e:c1:aa:64:
b8:24:c3:33:9e:93:4c:29:85:94:14:99:ee:ba:2d:
d7:91:99:bc:a2:0f:77:83:68:2d:7d:75:69:06:f7:
4e:97:02:13:29:6f:99:35:9a:40:ce:1d:f6:7b:7a:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3F:99:A3:FE:67:78:DE:FC:CE:CA:94:33:74:90:2B:6F:09:F8:AF
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/lj-Zo_5neN78zsqUM3SQK28J-K8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:11:82:32:70:b9:ad:c3:a7:70:7d:b0:b7:42:3d:29:d1:80:
b7:e8:a3:61:2e:d1:7f:0b:49:86:15:71:37:17:2c:0a:49:77:
23:f6:fa:6b:c9:65:b7:96:03:c2:dc:3d:e7:33:c3:03:6e:f9:
59:99:66:99:c4:3b:0f:33:03:35:ac:89:df:cd:03:32:4b:77:
02:bc:ac:96:8d:64:4e:84:b9:01:a4:c6:2e:84:57:c8:39:34:
af:bf:88:96:52:0f:92:b3:c9:9e:a3:79:8b:e2:f4:85:6f:24:
b6:59:b9:c1:d9:46:ed:81:97:54:ee:8c:04:f2:a1:98:3e:fc:
4f:62:e8:3b:5d:8e:d8:c3:c9:d3:4b:4b:5e:ab:64:43:4e:cc:
d8:b8:06:b3:10:bf:a9:53:9e:28:28:1c:b8:8e:ad:23:78:54:
eb:dc:8f:43:6c:40:ed:44:8e:f8:9d:01:ea:a7:b2:0f:b2:4d:
fe:0f:f5:67:48:f9:57:c4:80:22:9e:bb:d5:6c:97:2c:bb:9c:
6e:fc:63:14:9a:16:3b:f4:a4:b9:1c:96:72:ff:57:1b:f6:b5:
e1:71:8f:d1:70:3d:25:21:54:8e:d0:f2:5a:27:65:ae:cf:c6:
8a:c6:dc:10:9b:41:8a:96:09:64:1a:4e:ff:5a:40:94:2c:a0:
b3:23:7d:ce
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTcw
NzI0MTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk2M0Y5OUEzRkU2Nzc4
REVGQ0NFQ0E5NDMzNzQ5MDJCNkYwOUY4QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRA/CsEXZzxiVLQtQphl0uP2G+qsXxeb7aUOdJWJpKy8+Jx5C2
KgVAG5IID3MgkzegmG2kB7K1ge/3nHEGpe9r8lINlYoD3JIVcGpbsdI05Z5PgxRi
nzheq77IzmkX/RB71d+tECnhAWHh01bSBp2deyjXWXGiPVcNT1371fK2TwcFla8n
QDtEN90kOaMwyuCwL2k8gw6MSah+wG3KQbWJI7VIj5TECJrXrLelEej/brFX+j6D
1L8+WYzqq4F8EYvY2j/aNHwMQgxRHpn7TsGqZLgkwzOek0wphZQUme66LdeRmbyi
D3eDaC19dWkG906XAhMpb5k1mkDOHfZ7ejXhAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUlj+Zo/5neN78zsqUM3SQK28J+K8wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2xqLVpvXzVuZU43OHpz
cVVNM1NRSzI4Si1LOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEADRGCMnC5rcOncH2wt0I9KdGAt+ijYS7R
fwtJhhVxNxcsCkl3I/b6a8llt5YDwtw95zPDA275WZlmmcQ7DzMDNayJ380DMkt3
Aryslo1kToS5AaTGLoRXyDk0r7+IllIPkrPJnqN5i+L0hW8ktlm5wdlG7YGXVO6M
BPKhmD78T2LoO12O2MPJ00tLXqtkQ07M2LgGsxC/qVOeKCgcuI6tI3hU69yPQ2xA
7USO+J0B6qeyD7JN/g/1Z0j5V8SAIp671WyXLLucbvxjFJoWO/SkuRyWcv9XG/a1
4XGP0XA9JSFUjtDyWidlrs/GisbcEJtBipYJZBpO/1pAlCygsyN9zg==
-----END CERTIFICATE-----
Generated at Wed Apr 17 12:33:44 2024 by rpki-client on console-ams.rpki-client.org