Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/2NJmoQbPoXzNrp17wh3YiPKidCQ.roa
File: 2NJmoQbPoXzNrp17wh3YiPKidCQ.roa (raw, json)
Hash identifier: AJ8x6Kmmn4JOCgSkABSnbfl8u67NHXjVDEKjq3jLKnM=
Subject key identifier: D8:D2:66:A1:06:CF:A1:7C:CD:AE:9D:7B:C2:1D:D8:88:F2:A2:74:24
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 13E4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2NJmoQbPoXzNrp17wh3YiPKidCQ.roa
Signing time: Sat 13 Apr 2024 00:23:14 +0000
ROA not before: Sat 13 Apr 2024 00:23:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5092 (0x13e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 00:23:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D8D266A106CFA17CCDAE9D7BC21DD888F2A27424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:c9:46:47:e6:15:5f:ec:b9:bd:48:38:69:
0c:97:16:70:db:c3:6d:86:25:c5:6d:05:ff:05:a9:
e3:b7:04:ca:43:68:c1:0a:db:01:5f:80:00:59:10:
e8:e6:99:b7:f8:f5:50:8e:55:83:e8:0d:42:ea:86:
c9:7f:2c:cd:ef:9f:1b:e8:f1:00:91:d9:10:56:83:
03:8b:ce:16:e7:4d:12:84:af:0f:5b:2e:11:a6:2f:
1e:2e:cd:56:59:16:2b:3e:1c:07:ac:38:8e:a8:87:
88:88:90:3d:20:df:64:c4:38:21:93:66:35:5a:07:
16:1b:ed:2e:ae:f6:e8:b1:c4:0e:21:bc:e2:68:9c:
50:dc:c3:dd:3b:73:db:24:56:03:82:55:fa:b9:b5:
b2:77:25:d0:b7:cd:05:21:fd:9a:a1:39:95:07:8e:
a0:8d:22:c7:f7:77:10:5a:88:0c:46:a5:69:03:15:
ee:d0:7b:7d:03:49:24:4d:c1:4e:12:99:0f:eb:fe:
b6:2d:76:f9:71:d3:a4:1b:08:1d:9a:c7:1c:c5:3c:
1e:20:d7:e5:35:ec:89:95:f9:99:52:60:3e:6e:d9:
c0:85:04:4e:b0:de:a5:bb:8c:e0:9a:d5:76:b7:ff:
b4:1e:0a:d8:f9:d6:8c:1d:87:d6:05:82:bb:0b:9e:
d5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D2:66:A1:06:CF:A1:7C:CD:AE:9D:7B:C2:1D:D8:88:F2:A2:74:24
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2NJmoQbPoXzNrp17wh3YiPKidCQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d3:81:2b:4d:12:68:fe:6b:9f:77:f3:47:f4:02:41:07:db:9c:
6d:0e:d4:0f:1d:a1:16:77:58:08:b7:3c:0e:88:dc:51:b5:96:
cf:e0:fc:98:f2:f5:bd:64:5f:35:d2:69:36:50:1b:eb:47:d3:
63:fe:44:05:7f:46:93:bf:ef:d1:dd:c2:46:db:a3:3f:17:f1:
44:c4:c4:4a:d2:7f:56:80:77:be:a1:8f:4b:7e:d3:27:1b:3d:
11:a3:87:15:af:fe:13:ef:04:ff:4f:2c:a8:f6:48:04:77:02:
c1:e6:d6:2e:27:0e:bb:cc:86:13:f0:18:1c:8e:18:6a:35:b1:
03:22:fe:39:a2:46:75:f2:a3:27:5e:dc:f3:7d:e8:ba:81:07:
61:65:27:a8:f6:26:49:4b:27:cd:b6:40:f4:72:62:97:d5:20:
bc:64:b2:fc:b5:42:3a:65:a5:3d:38:cd:88:96:b7:c9:43:ff:
e3:36:3d:e1:3c:73:e3:d7:e0:d6:46:38:a7:cf:d0:eb:79:0a:
04:cf:3e:d8:a1:a2:14:93:09:9d:3c:15:76:d7:1a:eb:9b:04:
0d:ac:4d:5f:41:59:ee:9f:8d:cb:ac:67:81:c8:26:1d:37:78:
d2:a0:49:42:10:3d:39:b6:4e:76:7e:36:65:a3:63:2a:a7:c7:
c4:00:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:18 2025 by rpki-client