Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vX9ZSNMsBQihck6dc_tf5AZK3e8.roa
File: vX9ZSNMsBQihck6dc_tf5AZK3e8.roa (raw, json)
Hash identifier: dRyB1NkCC0UkPDbMp6MlKAmOhHiUDoFu1ZthDSZkUBc=
Subject key identifier: BD:7F:59:48:D3:2C:05:08:A1:72:4E:9D:73:FB:5F:E4:06:4A:DD:EF
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1150
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vX9ZSNMsBQihck6dc_tf5AZK3e8.roa
Signing time: Sat 06 Apr 2024 03:22:51 +0000
ROA not before: Sat 06 Apr 2024 03:22:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4432 (0x1150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 6 03:22:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BD7F5948D32C0508A1724E9D73FB5FE4064ADDEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:22:05:44:78:f2:ed:d2:33:06:78:7b:8e:
da:58:0f:9f:35:c4:4e:ec:4d:34:89:be:9b:ac:13:
7c:c6:17:b0:2c:db:06:5c:c1:84:f4:fb:6a:6f:3a:
1a:87:49:bb:3e:5a:e1:97:32:e5:ea:d9:7b:aa:52:
25:d8:a9:cd:72:6e:fe:09:cf:32:16:e7:1e:07:4f:
3a:01:5f:98:f8:aa:59:58:19:7e:8a:0f:da:fa:56:
25:64:cc:92:e7:33:91:29:ee:35:d4:09:1f:b0:9b:
63:43:17:ab:bb:23:88:90:bd:3d:40:6a:cd:4c:f6:
f1:9b:ee:bc:66:45:16:5d:aa:42:24:9d:fd:ac:5f:
09:b4:e6:52:c5:82:00:fa:8f:b2:a8:3e:58:65:7a:
e7:2b:15:46:f1:33:97:a9:31:3f:f6:5b:4d:66:3a:
b1:1f:86:87:00:a7:a6:74:26:82:bc:b7:0e:99:0f:
4d:5b:c9:7f:f0:0e:bf:97:4e:4e:16:38:39:0e:9f:
63:eb:1a:e3:70:77:90:45:f4:a4:e8:82:2a:ff:37:
a3:a3:00:e1:6e:bf:e6:6d:78:c4:20:48:65:82:48:
24:2d:ed:11:25:4b:61:86:a5:9c:f1:d3:ed:57:fc:
cc:c7:02:68:25:5c:95:60:8b:6f:a9:4a:57:86:eb:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7F:59:48:D3:2C:05:08:A1:72:4E:9D:73:FB:5F:E4:06:4A:DD:EF
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vX9ZSNMsBQihck6dc_tf5AZK3e8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:50:06:1e:d6:35:42:01:ac:15:17:6d:a9:16:35:83:f1:f0:
3d:04:df:36:7b:40:23:23:48:34:5d:d8:81:74:8c:53:21:0b:
f5:a8:82:a5:ff:59:18:af:f5:89:be:c4:20:41:14:99:1e:d2:
b1:05:c6:90:ca:4c:10:71:79:31:8a:fc:b5:1d:f9:0b:b3:e4:
80:09:49:5f:f9:03:2d:cf:71:5b:e7:9d:8c:3d:cd:8e:e8:6c:
f6:74:c9:55:91:4a:b2:01:79:2c:13:3d:0d:34:53:72:ed:73:
e6:97:e3:8a:73:e2:ed:c8:3a:d6:56:e1:38:13:9b:fc:d2:9e:
3f:64:6c:9f:fa:2a:af:21:68:73:a8:70:30:16:0b:9f:13:c2:
98:0f:8a:ed:0e:bd:95:bd:46:46:f6:55:f8:83:99:63:a9:64:
cc:3a:0d:a5:7e:d3:f3:d6:f8:98:db:c9:2f:c1:92:c1:a2:a3:
4a:1e:87:6b:f0:52:50:1f:65:89:4f:f4:b2:16:7d:e3:69:83:
71:23:bc:2d:a6:b7:30:c5:37:23:7d:0a:46:51:a5:a6:bd:c9:
90:e8:56:5f:04:85:3c:e8:02:ea:5b:a0:b3:e3:a7:85:47:0c:
06:8c:c5:7d:93:e1:c0:59:cc:f2:d2:0d:ab:a5:53:66:0d:f8:
80:d8:1f:f8
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDYw
MzIyNTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJEN0Y1OTQ4RDMyQzA1
MDhBMTcyNEU5RDczRkI1RkU0MDY0QURERUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAvSIFRHjy7dIzBnh7jtpYD581xE7sTTSJvpusE3zGF7As2wZc
wYT0+2pvOhqHSbs+WuGXMuXq2XuqUiXYqc1ybv4JzzIW5x4HTzoBX5j4qllYGX6K
D9r6ViVkzJLnM5Ep7jXUCR+wm2NDF6u7I4iQvT1Aas1M9vGb7rxmRRZdqkIknf2s
Xwm05lLFggD6j7KoPlhleucrFUbxM5epMT/2W01mOrEfhocAp6Z0JoK8tw6ZD01b
yX/wDr+XTk4WODkOn2PrGuNwd5BF9KTogir/N6OjAOFuv+ZteMQgSGWCSCQt7REl
S2GGpZzx0+1X/MzHAmglXJVgi2+pSleG6ya9AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUvX9ZSNMsBQihck6dc/tf5AZK3e8wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3ZYOVpTTk1zQlFpaGNr
NmRjX3RmNUFaSzNlOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAllAGHtY1QgGsFRdtqRY1g/HwPQTfNntA
IyNINF3YgXSMUyEL9aiCpf9ZGK/1ib7EIEEUmR7SsQXGkMpMEHF5MYr8tR35C7Pk
gAlJX/kDLc9xW+edjD3Njuhs9nTJVZFKsgF5LBM9DTRTcu1z5pfjinPi7cg61lbh
OBOb/NKeP2Rsn/oqryFoc6hwMBYLnxPCmA+K7Q69lb1GRvZV+IOZY6lkzDoNpX7T
89b4mNvJL8GSwaKjSh6Ha/BSUB9liU/0shZ942mDcSO8Laa3MMU3I30KRlGlpr3J
kOhWXwSFPOgC6lugs+OnhUcMBozFfZPhwFnM8tINq6VTZg34gNgf+A==
-----END CERTIFICATE-----
Generated at Sat Apr 6 06:27:00 2024 by rpki-client on console-ams.rpki-client.org