Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/zjGQoWyjbKskDBDf45YpplcFuis.roa
File: zjGQoWyjbKskDBDf45YpplcFuis.roa (raw, json)
Hash identifier: njRtlfYJpyKX5blS7vXH7RCtHNLTc/5t4Bgpl1NBJO4=
Subject key identifier: CE:31:90:A1:6C:A3:6C:AB:24:0C:10:DF:E3:96:29:A6:57:05:BA:2B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 064A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zjGQoWyjbKskDBDf45YpplcFuis.roa
Signing time: Thu 13 Apr 2023 05:12:21 +0000
ROA not before: Thu 13 Apr 2023 05:12:21 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 7018
IP address blocks: 112.75.0.0/17 maxlen: 24
112.75.96.0/22 maxlen: 24
112.75.100.0/22 maxlen: 24
112.75.104.0/22 maxlen: 24
112.75.108.0/22 maxlen: 24
112.75.112.0/22 maxlen: 24
112.75.116.0/22 maxlen: 24
112.75.120.0/22 maxlen: 24
112.75.124.0/22 maxlen: 24
112.75.132.0/22 maxlen: 24
112.75.140.0/22 maxlen: 24
112.75.148.0/22 maxlen: 24
112.75.156.0/22 maxlen: 24
112.75.164.0/22 maxlen: 24
112.75.172.0/22 maxlen: 24
112.75.180.0/22 maxlen: 24
112.75.188.0/22 maxlen: 24
112.75.196.0/22 maxlen: 24
112.75.204.0/22 maxlen: 24
112.75.212.0/22 maxlen: 24
112.75.220.0/22 maxlen: 24
112.75.228.0/22 maxlen: 24
112.75.236.0/22 maxlen: 24
112.75.244.0/22 maxlen: 24
112.75.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1610 (0x64a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 05:12:21 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=CE3190A16CA36CAB240C10DFE39629A65705BA2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0d:57:b2:fe:39:9f:46:2c:d7:9e:15:ad:8b:
8f:08:5e:5c:87:1c:85:6b:b9:53:c0:dd:be:b3:58:
4e:36:1f:6c:36:ce:a5:44:db:fd:36:ee:b6:28:7a:
8b:36:5e:a7:1f:93:54:74:23:3b:a2:36:d5:37:83:
76:11:62:ef:7e:c9:b0:c7:d4:e5:cf:29:39:df:0b:
47:51:7f:30:b7:b9:45:78:95:a5:8b:08:31:8e:cb:
f2:88:e9:76:95:0e:c8:82:1b:13:22:ee:a4:05:96:
ca:88:e9:06:56:8d:af:30:99:0e:35:a4:e1:f6:fa:
71:2b:0f:91:26:d9:7d:ef:ad:5a:64:3b:d4:33:b6:
d1:8d:08:40:a0:43:76:89:62:67:6b:eb:a8:6a:a7:
e6:4b:c8:4b:d8:05:b0:f1:f5:89:53:14:ad:a2:fb:
91:a1:94:5c:4d:8c:65:88:8a:b5:3e:a6:d4:f7:d2:
b3:ca:11:fe:b5:2e:ca:91:85:b2:80:d0:8f:28:3b:
fe:47:93:72:73:42:39:da:99:43:fa:7f:2b:f0:3a:
49:8d:9b:28:1e:dc:4e:c8:f7:92:f3:a7:8f:fa:0d:
56:de:77:0f:55:d0:e0:ed:58:5f:11:0d:ed:7b:60:
4f:18:31:04:13:c2:80:47:8a:4e:95:87:ab:2a:69:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:31:90:A1:6C:A3:6C:AB:24:0C:10:DF:E3:96:29:A6:57:05:BA:2B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zjGQoWyjbKskDBDf45YpplcFuis.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/17
112.75.132.0/22
112.75.140.0/22
112.75.148.0/22
112.75.156.0/22
112.75.164.0/22
112.75.172.0/22
112.75.180.0/22
112.75.188.0/22
112.75.196.0/22
112.75.204.0/22
112.75.212.0/22
112.75.220.0/22
112.75.228.0/22
112.75.236.0/22
112.75.244.0/22
112.75.252.0/22
Signature Algorithm: sha256WithRSAEncryption
50:10:40:b4:c8:40:dc:da:06:37:8e:01:11:d9:95:8d:dd:8f:
0a:63:82:a7:1a:92:3c:ef:f8:f8:40:1f:c4:a9:fe:80:64:de:
18:4b:f3:90:c9:72:4c:77:7a:c0:06:e5:f6:da:40:14:57:83:
4c:59:1f:11:22:38:0b:d5:e1:6c:a4:f6:67:bb:1b:92:11:03:
18:66:f9:21:92:f3:7a:69:c9:74:3e:a2:81:4f:9d:15:88:53:
60:ca:d9:a4:d7:a7:c3:6e:5a:98:a5:56:3c:e2:fa:41:e5:78:
c2:59:0d:35:9e:ad:0c:14:8a:df:cd:a8:75:05:91:c9:91:02:
b5:cb:24:fd:2a:18:97:14:47:25:d5:e5:51:ff:71:68:04:98:
7e:b6:96:ea:9d:c4:a8:56:a7:2c:ea:82:0c:8f:7e:41:5a:53:
d6:b3:da:bb:55:ff:0f:b4:ba:8a:3d:74:ae:9d:65:6e:61:c6:
78:66:31:88:e7:7b:02:1a:01:bd:e3:11:ea:e4:ea:d1:0b:6b:
b6:1e:8f:49:44:e6:c2:eb:99:b6:f6:a0:39:bc:64:69:4a:36:
82:6d:0b:28:13:c8:66:f3:b6:ee:5c:ab:37:98:13:b9:d0:77:
88:4f:df:a6:5a:c9:80:71:db:37:6a:45:b6:93:e8:6d:98:29:
22:41:0b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org