Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/4c5PDvxdyjcFezQeNlgb2oFNI2k.roa
File: 4c5PDvxdyjcFezQeNlgb2oFNI2k.roa (raw, json)
Hash identifier: q15AUsRAJCRsEPv+JaFBAz07fdr+CzwNrnDiLtPTV3c=
Subject key identifier: E1:CE:4F:0E:FC:5D:CA:37:05:7B:34:1E:36:58:1B:DA:81:4D:23:69
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A12
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4c5PDvxdyjcFezQeNlgb2oFNI2k.roa
Signing time: Mon 29 Apr 2024 11:53:59 +0000
ROA not before: Mon 29 Apr 2024 11:53:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6674 (0x1a12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 29 11:53:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E1CE4F0EFC5DCA37057B341E36581BDA814D2369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:f0:fc:4d:40:29:d8:c0:14:4a:3d:a5:6b:
2d:cb:07:28:a3:50:34:9f:da:98:96:1e:25:b8:4f:
84:b4:77:05:fc:bc:50:b8:00:79:cc:ac:ae:79:9f:
82:65:eb:7c:69:07:4b:d1:b0:89:3b:12:20:7d:b7:
2a:3d:98:b3:19:46:22:5c:09:a7:48:e4:e7:55:c6:
dc:93:39:14:2a:16:11:35:5d:54:8a:62:69:74:fe:
a9:29:3d:78:59:25:31:fc:88:f7:6d:17:f2:06:aa:
65:49:59:22:8f:02:7b:22:38:78:99:0b:79:13:41:
80:49:f6:54:a4:a6:ec:39:80:6e:ca:9d:22:f9:db:
35:c1:4d:02:73:33:ea:32:42:7e:41:4c:c5:e7:39:
00:d7:60:10:66:7b:6c:5e:ad:01:19:05:d3:ce:10:
e6:9b:30:7a:b1:1e:26:d9:53:14:33:33:01:31:fb:
3f:ee:d7:11:30:5b:b1:68:46:20:c4:4d:ac:16:40:
41:6c:85:44:76:7b:ce:0b:36:60:cc:f4:1c:be:2e:
5d:23:80:2b:5c:98:dc:d6:2e:64:28:af:8a:c2:a6:
cc:10:bc:be:38:9c:25:65:90:6b:30:63:c5:a9:82:
ab:99:ef:62:87:da:8e:2a:9c:fd:c6:90:bf:30:92:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CE:4F:0E:FC:5D:CA:37:05:7B:34:1E:36:58:1B:DA:81:4D:23:69
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4c5PDvxdyjcFezQeNlgb2oFNI2k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:84:64:a8:67:db:87:b5:05:74:02:99:4e:c5:c3:ef:0b:c3:
f6:a8:f2:43:07:28:a0:10:ad:eb:c7:34:4b:5e:4c:21:16:88:
70:46:3a:b4:64:aa:ff:98:fb:f8:49:37:0f:ea:2e:cc:87:7f:
72:d0:10:14:46:f6:81:33:8a:98:f7:4e:5c:f5:96:45:11:cd:
b1:e3:98:1e:e0:1f:41:41:80:65:38:96:0b:22:96:9d:cf:06:
22:2c:38:36:38:1f:c1:45:f9:ca:3d:c6:26:44:44:1b:04:3e:
25:ad:72:0a:8c:06:0d:da:91:e4:44:04:97:d1:bb:95:e6:8e:
94:9e:26:74:3b:8f:2b:b0:9d:d0:6d:64:c9:6e:78:73:c0:70:
03:b8:22:fc:2a:3b:83:60:12:55:be:2b:ba:8c:68:dc:12:ef:
35:24:e0:61:2c:86:0f:a8:78:2d:e8:d4:fd:85:df:dd:e3:19:
5e:4c:50:00:1a:58:3a:c2:de:28:9e:c1:5d:0a:38:29:fb:40:
ad:b1:16:d1:c9:31:b2:41:ff:d8:9a:a0:4e:46:db:63:81:3a:
48:8d:19:aa:ac:4e:ea:c4:0d:1a:ca:32:e3:c1:55:21:a8:72:
10:12:29:54:e6:d6:db:01:bf:5b:ee:6d:07:4c:a7:26:c1:b0:
1f:39:a8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:01:47 2025 by rpki-client