Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/plofKVO1WgizexjM774DL0xfUj4.roa
File: plofKVO1WgizexjM774DL0xfUj4.roa (raw, json)
Hash identifier: o/Qz4rdGCiTQr7HnXQkHNXCi/9lpJzOYNKRffPvMmJE=
Subject key identifier: A6:5A:1F:29:53:B5:5A:08:B3:7B:18:CC:EF:BE:03:2F:4C:5F:52:3E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0223
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/plofKVO1WgizexjM774DL0xfUj4.roa
Signing time: Tue 13 Sep 2022 01:03:33 +0000
ROA not before: Tue 13 Sep 2022 01:03:33 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 996
IP address blocks: 112.75.48.0/22 maxlen: 24
112.75.52.0/22 maxlen: 24
112.75.56.0/22 maxlen: 24
112.75.60.0/22 maxlen: 24
112.75.64.0/22 maxlen: 24
112.75.68.0/22 maxlen: 24
112.75.72.0/22 maxlen: 24
112.75.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Sep 13 01:03:33 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=A65A1F2953B55A08B37B18CCEFBE032F4C5F523E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:a5:fd:4d:d1:21:72:3a:36:ca:30:1c:bc:
eb:1d:7f:55:0c:62:56:a2:22:b5:8f:3e:f1:0d:0e:
a2:87:a7:84:23:8e:d5:01:6a:db:24:e8:c2:86:ce:
9a:15:2f:f2:84:f6:ce:a0:c9:e0:2b:13:04:2a:0f:
da:eb:3d:d7:0f:22:28:87:93:00:43:cb:75:ef:02:
be:f9:d1:f1:f3:c7:65:60:ba:18:92:19:f7:6b:c1:
e5:7e:4e:78:27:86:8b:08:ac:88:bc:78:88:31:c2:
3c:7b:da:d0:70:80:38:ca:03:67:37:82:47:b8:24:
20:45:a8:04:2c:8a:55:9f:fe:76:b8:62:4b:ac:3e:
b8:d3:ad:0a:4a:ac:93:a6:bf:34:29:fc:0b:82:20:
26:9f:c9:4f:9d:4b:8b:61:c9:77:4b:8f:4c:65:97:
aa:c8:c7:e6:a2:f2:75:e9:2a:82:5d:9f:23:31:c1:
99:06:94:e5:4c:47:e1:fa:2a:11:43:7c:8b:e0:8d:
a5:b8:f8:54:8b:b7:12:31:b5:29:1c:0b:e6:85:ae:
97:41:f1:19:4c:b1:9e:75:28:26:45:fe:3a:27:e0:
9c:ab:1d:9e:65:68:1f:48:09:11:51:86:88:b7:a9:
07:6c:7f:3b:e1:73:f2:79:88:b8:a0:eb:7a:f9:67:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5A:1F:29:53:B5:5A:08:B3:7B:18:CC:EF:BE:03:2F:4C:5F:52:3E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/plofKVO1WgizexjM774DL0xfUj4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.48.0-112.75.79.255
Signature Algorithm: sha256WithRSAEncryption
b3:45:07:47:87:34:21:4e:68:c4:28:e9:57:93:ed:47:b1:f8:
0b:f0:39:7d:a1:0a:ab:80:76:11:69:02:9f:09:0d:bf:6e:30:
67:34:aa:b8:8c:6a:2c:f2:8c:eb:04:11:5a:6b:b4:1b:38:1d:
77:90:81:94:12:c4:12:12:ef:44:d5:f4:44:1e:72:de:f6:6d:
dd:9b:57:6c:59:37:09:3d:42:b5:60:95:7d:b4:9d:61:e2:1d:
8e:e7:73:b3:31:15:47:47:f7:21:33:af:16:20:6a:9b:87:ed:
58:95:41:e0:e5:5e:86:2f:7e:cf:f5:6a:31:4b:68:ec:c4:54:
b7:bc:5e:e8:8e:d7:a7:d1:47:03:0d:5f:30:20:7b:ca:a4:83:
6e:ce:c3:03:67:e6:36:df:8d:1f:39:9a:e5:75:29:28:73:15:
f3:13:9c:77:ab:3f:ff:8e:ae:ae:14:bd:26:02:20:cd:94:3c:
17:8d:c5:b2:77:6d:1f:05:e9:e5:52:f4:29:1d:d9:61:66:d9:
b1:3d:a6:08:33:67:ec:50:fc:25:c7:42:f0:8f:6e:77:b6:f7:
64:3c:03:88:2d:24:8a:64:c8:4e:6a:7e:cf:d3:05:ff:b9:5b:
f5:1d:e5:a9:6c:b8:79:2a:64:1d:82:90:5f:61:00:b4:24:45:
85:b6:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org