Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/sfvy0AhbREAfZNsR_l1eVaIZ4U4.roa
File: sfvy0AhbREAfZNsR_l1eVaIZ4U4.roa (raw, json)
Hash identifier: 1n9OLLEh4xZi7U05CqZpUFCpsF0KAP0bV9E5eQvYEII=
Subject key identifier: B1:FB:F2:D0:08:5B:44:40:1F:64:DB:11:FE:5D:5E:55:A2:19:E1:4E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1460
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/sfvy0AhbREAfZNsR_l1eVaIZ4U4.roa
Signing time: Sun 14 Apr 2024 07:23:15 +0000
ROA not before: Sun 14 Apr 2024 07:23:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5216 (0x1460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 07:23:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B1FBF2D0085B44401F64DB11FE5D5E55A219E14E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:57:4b:cd:4f:2d:69:61:46:e9:5e:57:46:
93:0c:76:b7:6b:3b:12:84:65:fe:a6:f5:1b:73:9b:
6b:40:fd:9d:55:4d:3a:8e:66:f2:a4:dc:d1:7a:ae:
1b:5e:4c:87:ab:95:97:84:1c:98:e1:00:f3:01:12:
a5:44:a0:61:e5:35:b4:eb:1f:30:45:79:1d:f9:d1:
82:0a:7c:1f:dd:e3:1a:d1:12:88:0e:6b:49:9e:31:
4a:62:42:31:6e:5b:0f:6a:c6:91:17:18:5c:20:38:
50:1e:b4:c1:25:9b:4d:2e:21:05:59:21:70:7f:64:
32:23:80:07:b8:b7:c8:dc:0f:92:87:0d:ee:85:7b:
9d:bf:f5:6d:d1:99:4c:06:7d:06:5b:3a:67:9e:8c:
7d:ea:a0:fd:0a:07:d3:93:dd:76:c6:e9:7c:99:46:
81:72:93:eb:2f:49:38:90:c1:bb:a4:a3:7c:f0:e1:
dd:44:8d:1c:b9:dd:c1:90:69:0e:5a:83:aa:3c:6a:
1f:e9:4d:11:a0:e1:90:5c:5b:94:d4:f0:c0:3d:e9:
aa:59:50:7c:dd:e0:a9:74:a2:b7:23:e0:11:2b:ce:
62:6a:7f:35:0a:63:8a:d1:a0:cf:af:04:24:d6:b4:
97:7a:16:28:b0:ce:cb:1b:ee:84:6f:3c:a4:35:bf:
dd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:F2:D0:08:5B:44:40:1F:64:DB:11:FE:5D:5E:55:A2:19:E1:4E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/sfvy0AhbREAfZNsR_l1eVaIZ4U4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:10:59:c1:a7:f2:9f:0d:a0:a2:8f:0a:e7:45:10:57:1f:67:
86:60:a0:6c:e9:1f:03:47:d1:75:57:19:0d:0a:f3:17:4c:b8:
f9:6a:c5:46:59:e5:d7:84:1e:98:f4:48:8e:e2:4f:e3:6c:4a:
3f:cc:4f:f8:4d:df:43:7a:bb:41:01:05:94:e8:b4:42:94:30:
22:77:75:c6:64:bb:bd:4d:43:01:14:fa:8b:a6:13:a7:b4:b0:
3d:c1:4c:fc:ad:e2:4f:68:6c:f1:6c:9f:4f:d0:2e:52:a6:1a:
32:16:f4:42:54:a9:45:3a:c5:fc:61:d1:4e:38:32:53:c9:f3:
b7:38:97:f5:31:e2:1c:9a:b6:5c:f6:ca:54:4d:3d:9a:d9:96:
24:1f:4c:1a:8e:9d:dd:a9:79:9f:27:ad:54:72:1e:66:51:c6:
8a:8a:fb:22:19:ea:14:62:56:71:6a:65:9c:f2:20:c6:e1:c3:
0d:ed:56:50:83:4d:0e:a5:03:7f:d5:0a:c5:6e:1b:cc:d9:87:
88:2f:4a:ea:98:66:63:c4:59:f5:91:cb:17:6b:d8:bd:74:08:
be:ec:ca:bc:0f:38:ab:78:fc:8b:87:e9:f9:2b:c7:85:c8:4b:
d7:7f:fd:16:cf:79:35:f1:0e:be:24:39:b7:06:7c:55:bb:ca:
81:51:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 10:59:55 2024 by rpki-client on console-fra.rpki-client.org