Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/udXtCJnmUGanxHShVPWV-d7nnKw.roa
File: udXtCJnmUGanxHShVPWV-d7nnKw.roa (raw, json)
Hash identifier: h/kMXbd4PI6fUzF0+12KVkV8XCZ32hMIyVaxB3B8kdw=
Subject key identifier: B9:D5:ED:08:99:E6:50:66:A7:C4:74:A1:54:F5:95:F9:DE:E7:9C:AC
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0645
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/udXtCJnmUGanxHShVPWV-d7nnKw.roa
Signing time: Thu 13 Apr 2023 04:44:07 +0000
ROA not before: Thu 13 Apr 2023 04:44:07 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 139076
IP address blocks: 112.75.0.0/18 maxlen: 24
112.75.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1605 (0x645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 04:44:07 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=B9D5ED0899E65066A7C474A154F595F9DEE79CAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:84:bc:1b:0b:a1:7a:61:a4:b4:fd:bf:30:
49:cc:26:6d:43:35:3a:4c:8b:d9:59:64:47:fa:01:
50:59:6a:c8:e6:f1:72:06:b6:f1:7f:aa:97:fe:53:
a3:ee:6b:92:10:5c:90:4f:1e:55:0c:fa:82:29:33:
54:88:de:9f:14:1d:b8:ea:73:10:16:93:c3:de:37:
a2:0a:42:43:57:33:1c:7c:e9:13:17:1f:f2:1b:0a:
12:33:07:8e:9f:af:d2:25:68:0a:55:2c:89:79:dc:
4b:00:d3:d4:a6:4e:01:a8:9e:12:a3:de:41:8c:b2:
87:c7:22:6d:e7:5e:0d:fe:4c:00:b7:5c:42:82:1b:
52:69:3c:ea:ab:39:ef:9a:05:ac:c4:1d:4f:07:37:
d7:a2:26:ce:06:46:3c:c6:0f:9d:29:cf:5d:7d:44:
2c:24:9e:19:17:d2:5e:d6:6e:d6:33:b8:90:dc:1d:
a0:6e:7b:c3:c3:46:94:bd:fd:75:71:4e:62:18:44:
e1:6f:8c:1c:2a:42:5b:80:99:8f:06:b1:89:6a:fc:
4f:ab:a4:ef:5f:aa:dd:44:57:49:ad:15:23:f6:ac:
ed:ce:ce:60:0a:e7:cd:ee:f0:85:cb:30:ff:29:83:
0b:22:49:2a:e5:08:d8:cc:7b:e0:de:0a:68:26:2e:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D5:ED:08:99:E6:50:66:A7:C4:74:A1:54:F5:95:F9:DE:E7:9C:AC
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/udXtCJnmUGanxHShVPWV-d7nnKw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/18
112.75.192.0/22
Signature Algorithm: sha256WithRSAEncryption
62:6d:2f:33:ab:0e:74:76:d8:5e:0e:09:94:b2:03:69:4b:38:
27:87:36:84:9c:9a:47:03:8d:8c:72:7b:cb:cc:19:1f:4f:86:
c3:7e:59:7d:07:ca:a8:89:42:27:86:1a:14:6f:bc:2a:41:56:
51:38:66:0b:0a:bf:ef:dc:ab:23:33:fe:2b:c3:f9:72:02:c6:
93:f4:b0:ec:06:a2:fe:f8:59:5e:1b:c1:4b:59:9e:f8:b2:c2:
78:dd:48:86:fc:4e:f4:6b:5d:e7:b1:b8:68:3f:4a:c3:0f:74:
c4:23:8e:19:c1:87:13:1e:10:1b:36:2b:34:7c:4b:23:5a:ae:
c5:74:6d:57:01:05:1a:38:f1:11:ef:5c:fe:7f:f3:b5:b8:c1:
5a:56:9e:67:72:a9:86:25:85:91:c1:b7:0e:9b:0d:48:1f:68:
d5:4c:88:05:0f:e1:d0:2e:12:40:04:37:c6:62:e4:13:1f:df:
b0:ad:da:2d:a3:70:bc:36:45:2b:3d:d8:5a:ff:76:cb:ab:06:
c3:ed:33:00:84:3c:88:87:65:e7:6e:49:56:59:1b:00:89:9e:
a5:59:fe:34:17:d5:f8:73:6f:d3:e6:32:66:2d:51:e8:0a:04:
30:af:98:2e:f7:09:06:5d:e8:8d:10:86:f7:10:f9:9b:69:97:
e2:c8:ec:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org