Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ozb4LsOsdtGYflZcup-gfCWrONE.roa
File: ozb4LsOsdtGYflZcup-gfCWrONE.roa (raw, json)
Hash identifier: YOwmv4Y6CURuVbi/YojT4uM4ezbTqNrWXUy3WmBiFIU=
Subject key identifier: A3:36:F8:2E:C3:AC:76:D1:98:7E:56:5C:BA:9F:A0:7C:25:AB:38:D1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1092
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ozb4LsOsdtGYflZcup-gfCWrONE.roa
Signing time: Thu 04 Apr 2024 03:52:46 +0000
ROA not before: Thu 04 Apr 2024 03:52:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4242 (0x1092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 4 03:52:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A336F82EC3AC76D1987E565CBA9FA07C25AB38D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:e1:e5:6b:60:88:04:ab:41:7a:6e:29:a8:
60:dc:d2:79:a9:e7:77:15:9d:13:1f:82:70:e5:54:
a2:2a:8b:dd:73:a7:cb:91:e6:87:7a:37:0a:db:91:
11:bd:db:07:37:f2:8a:c2:d7:9a:4d:d9:b5:83:95:
d2:64:b4:57:b5:bd:73:e2:3a:78:37:f3:e6:9a:6a:
25:3f:8c:db:26:1e:92:c7:21:ad:4e:86:de:c2:87:
12:93:cf:96:5a:8f:e3:5c:31:64:e8:43:fe:d6:27:
58:8e:47:6f:65:e6:40:df:2b:ce:59:56:6d:77:63:
dd:92:c9:ba:0e:79:52:79:69:b3:4b:07:a1:30:e6:
80:1e:5b:fa:bb:e7:fd:ac:2a:09:04:05:fd:ec:6b:
7f:c9:4f:62:73:84:40:c4:bb:c1:f6:cc:88:41:b6:
3e:f5:76:7b:68:07:8f:a9:9f:cb:c6:b1:f4:04:5b:
f8:2f:1b:bb:10:73:a8:a8:bb:ff:a7:5f:31:e3:31:
da:a4:5d:18:91:f7:24:17:f4:51:c4:4c:2e:7f:c1:
32:2e:e6:b3:61:b4:a4:17:9a:51:2e:a2:12:c1:d4:
1a:d2:5b:2b:25:ba:20:8d:71:13:88:d7:59:04:04:
c5:11:58:d6:72:f2:f0:27:b2:1f:6d:5c:57:78:43:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:36:F8:2E:C3:AC:76:D1:98:7E:56:5C:BA:9F:A0:7C:25:AB:38:D1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ozb4LsOsdtGYflZcup-gfCWrONE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:81:13:24:9c:c5:8b:fc:4a:e6:87:8e:2a:b6:9a:83:73:a6:
97:64:97:8e:72:74:6d:bd:0d:c5:9b:c7:18:94:e2:ac:7a:52:
ab:1e:c8:5e:2b:a9:82:e5:c7:35:f8:3a:93:a6:26:90:c4:4d:
24:a5:05:71:fe:30:b5:ad:d6:70:30:dd:e0:16:44:19:51:29:
11:63:1c:36:e8:ee:83:c0:d8:a1:fe:e3:a4:6e:f6:88:3e:9a:
b4:eb:0f:17:19:7b:81:cc:1a:97:90:4b:e9:4b:96:85:e4:98:
16:93:ff:2f:13:62:87:a0:95:00:22:39:a0:89:bf:56:a8:68:
ab:9a:c7:a4:a4:16:12:77:ed:cf:50:30:41:34:c5:ac:01:63:
81:ed:62:63:f0:5e:90:ca:73:14:b8:1f:6b:96:e1:31:88:e3:
78:3d:f9:f0:dc:2b:d2:bd:c9:db:40:47:1f:b8:13:28:48:ea:
6a:b4:d3:c8:ea:1b:b3:28:ed:3f:cf:43:11:eb:27:15:f9:ef:
4a:df:79:ae:74:82:a4:4f:ee:cc:9b:14:77:6d:90:b5:d4:94:
53:1e:3f:b8:23:f2:ae:1c:03:f1:3b:8e:38:c1:67:3e:32:70:
0e:d2:be:74:6a:e8:3c:9f:17:3d:61:f4:c3:ef:7f:a1:48:d8:
3c:16:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 06:45:21 2024 by rpki-client on console-ams.rpki-client.org