Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/o_VtuKsVH58BVB5EF5jMfDT9V6o.roa
File: o_VtuKsVH58BVB5EF5jMfDT9V6o.roa (raw, json)
Hash identifier: hsQDY8t7g0QIn9x7M3+OPVpBxLSLdDRaWIsrMFk/FXY=
Subject key identifier: A3:F5:6D:B8:AB:15:1F:9F:01:54:1E:44:17:98:CC:7C:34:FD:57:AA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 148E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/o_VtuKsVH58BVB5EF5jMfDT9V6o.roa
Signing time: Sun 14 Apr 2024 18:53:16 +0000
ROA not before: Sun 14 Apr 2024 18:53:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5262 (0x148e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 18:53:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A3F56DB8AB151F9F01541E441798CC7C34FD57AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:49:c9:a6:8c:2d:07:29:6c:ef:91:16:a8:
06:d4:2d:d1:0a:f9:d9:13:39:df:77:5f:fe:1a:72:
ee:46:3b:70:b6:57:5a:5c:d8:42:9c:0b:76:68:e6:
e4:17:d3:82:89:a9:ad:72:44:ea:dc:49:ca:45:cb:
63:89:97:91:b9:05:64:b3:19:d4:fc:31:01:fa:72:
6b:eb:d5:0a:da:26:9f:69:0a:4f:5a:d7:ad:3c:e4:
9b:31:2f:0d:6e:2f:2d:bc:b4:3a:fc:56:6d:82:9c:
36:04:c2:44:28:4e:c1:3d:94:b0:33:cc:2f:9c:7a:
68:c5:80:67:3e:75:d4:41:59:93:81:28:b6:24:b3:
9c:70:fe:95:01:d1:58:e7:b0:30:c3:1e:b7:71:c6:
59:b9:07:2b:6e:fb:70:15:a7:84:a3:21:0d:f0:75:
68:79:ce:b4:e2:3a:f2:c5:dd:18:f3:af:d2:d6:de:
2e:09:2b:07:21:51:ca:73:12:df:d7:13:9b:9b:e1:
a1:59:e6:4b:b8:68:2e:aa:c7:ed:3f:b5:23:c3:f2:
33:4a:b7:f6:db:2b:fe:94:1a:10:1c:e1:1a:ab:fa:
8b:7f:bd:c3:f4:69:0f:fe:be:d3:d3:85:72:b5:59:
c0:c1:9f:37:7f:c5:0f:d2:c1:b0:9b:62:e2:be:c2:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F5:6D:B8:AB:15:1F:9F:01:54:1E:44:17:98:CC:7C:34:FD:57:AA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/o_VtuKsVH58BVB5EF5jMfDT9V6o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:ce:c4:0f:60:f7:d1:0a:8b:80:11:df:ed:32:b0:b2:7f:98:
2b:4a:42:7f:f6:16:db:f2:ee:f7:69:19:9f:0a:d5:50:de:36:
8c:32:ab:9a:07:c0:ac:3c:db:6f:da:f8:92:bf:24:8c:82:2d:
71:3d:1f:f4:e9:d1:35:3e:82:6c:d5:32:92:b6:97:84:3d:f4:
fa:d9:2e:18:19:7d:64:45:9d:90:78:0d:e5:9e:68:77:89:19:
5c:e1:36:5e:b8:08:e0:2d:5e:6e:5c:77:7d:15:7e:e8:00:d9:
6f:29:7d:9f:3b:2c:d6:4f:46:f8:ad:19:da:48:50:bc:9e:d2:
b5:d4:03:78:ce:2f:7f:51:44:b2:4f:2b:5f:bb:67:23:03:61:
90:29:7c:4c:a6:0b:91:4d:d1:95:dc:e4:39:81:0a:8e:e3:c2:
5d:5d:c5:39:28:5a:73:3f:07:84:60:7f:97:3b:3f:c7:b4:b1:
1c:62:ec:19:86:dc:17:88:16:17:24:07:89:b1:68:c1:8b:69:
1f:e9:2b:64:0e:68:8f:38:af:4f:5f:0e:5c:2f:06:c2:0c:b7:
be:75:4b:04:eb:a5:87:af:42:59:e3:56:3e:ee:53:6f:9a:21:
e4:d7:95:55:9c:dd:6a:d9:ee:88:30:cb:fa:77:a5:e8:1f:4a:
b8:ee:64:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 21:51:38 2024 by rpki-client on console-fra.rpki-client.org