Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/-XIsKKtpfqGML2n-vAzcEdOL9Qs.roa
File: -XIsKKtpfqGML2n-vAzcEdOL9Qs.roa (raw, json)
Hash identifier: Zo4/aajQnYBxI2VN9DesGKwARB420UdzsaU8gDcYzuw=
Subject key identifier: F9:72:2C:28:AB:69:7E:A1:8C:2F:69:FE:BC:0C:DC:11:D3:8B:F5:0B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F08
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-XIsKKtpfqGML2n-vAzcEdOL9Qs.roa
Signing time: Sun 31 Mar 2024 01:22:36 +0000
ROA not before: Sun 31 Mar 2024 01:22:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3848 (0xf08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 01:22:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F9722C28AB697EA18C2F69FEBC0CDC11D38BF50B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:b4:7e:87:26:93:f3:52:00:36:2c:df:4f:
c5:0c:c5:14:56:87:77:73:bf:6b:04:aa:da:1a:ce:
a2:92:7a:4a:28:cb:0c:08:cc:be:ae:e4:77:23:07:
c7:55:ca:8d:61:c4:0f:a7:27:85:83:ff:73:bc:ec:
67:4c:68:07:d9:c8:1f:a6:fd:40:d7:38:bf:20:18:
ed:9f:06:d9:2c:e3:62:50:37:4f:f9:a8:97:d1:51:
5f:9e:22:cf:88:ac:67:8c:67:fc:a3:6a:fc:f3:f9:
36:35:a5:87:a8:8b:1c:77:02:32:3f:5b:7b:cc:71:
16:41:d5:f6:22:98:ab:cb:cc:9c:c6:3e:4c:74:2b:
27:99:ea:d6:3d:0e:f3:5f:44:0d:28:f6:58:7b:dc:
8d:ee:60:f2:4a:24:20:ad:cd:1a:73:7d:04:be:2b:
5a:df:d4:aa:f1:c1:bf:96:0f:7b:99:26:ea:0f:57:
f4:e7:f0:a2:78:18:ca:7d:3b:33:84:f3:07:62:44:
92:eb:33:05:74:96:d5:58:41:a0:ad:a6:bf:58:01:
0e:a3:4b:b7:e6:0d:30:5e:aa:ea:93:c7:93:34:08:
84:e7:73:36:7a:1a:65:27:89:87:23:00:20:36:a6:
e0:25:bd:46:e8:cb:c8:81:12:1d:3a:c0:72:ec:f9:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:72:2C:28:AB:69:7E:A1:8C:2F:69:FE:BC:0C:DC:11:D3:8B:F5:0B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-XIsKKtpfqGML2n-vAzcEdOL9Qs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:27:54:98:8c:1c:d1:0a:2b:ed:1c:f3:ef:f8:26:6d:f6:34:
8f:bd:b9:03:04:6a:c0:cb:1d:f0:30:d9:17:66:d8:cf:a0:fd:
65:a4:49:2b:09:3c:19:ba:d0:ad:87:b7:19:6f:bb:8b:33:91:
98:cb:9c:4b:44:69:80:b3:b7:84:6a:d3:35:44:f3:62:80:5d:
55:ad:70:bf:2a:7a:15:5b:67:4f:f6:86:a5:5c:6e:89:b2:71:
54:17:d9:1d:af:39:41:30:28:14:57:1d:a9:e0:df:6f:a5:29:
26:0f:6d:34:3a:e7:a2:18:17:11:93:6b:31:b6:68:a8:aa:98:
44:87:9b:7b:ef:67:b3:18:55:40:80:49:8f:84:6c:19:14:5a:
7f:df:62:27:ca:64:d7:ec:d7:48:85:b1:b5:49:77:74:0e:3b:
f7:21:f2:81:a6:65:3c:84:13:be:f7:17:e6:cb:5d:67:1b:44:
66:d6:25:b0:cc:0b:59:71:5f:b3:40:b7:39:64:2e:3f:03:b6:
d5:09:ad:1d:50:3f:30:c2:3f:f9:f0:8c:4f:86:aa:17:97:2b:
d9:65:57:a1:32:5d:53:a7:91:d1:2e:4f:9e:ce:0f:49:a3:9b:
5b:34:2a:df:8e:f3:0d:9a:28:66:8e:be:52:94:64:90:69:70:
54:13:52:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:41 2025 by rpki-client