Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/4y8qGeiW1Qu4cRPl4SLA60oPn0s.roa
File: 4y8qGeiW1Qu4cRPl4SLA60oPn0s.roa (raw, json)
Hash identifier: gAwkx+uneDNqjsrxWwZaVC5unDUnXp/jRaIY3MSJ64w=
Subject key identifier: E3:2F:2A:19:E8:96:D5:0B:B8:71:13:E5:E1:22:C0:EB:4A:0F:9F:4B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1596
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4y8qGeiW1Qu4cRPl4SLA60oPn0s.roa
Signing time: Wed 17 Apr 2024 12:53:23 +0000
ROA not before: Wed 17 Apr 2024 12:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5526 (0x1596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 12:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E32F2A19E896D50BB87113E5E122C0EB4A0F9F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:6f:2f:42:db:82:e2:88:fb:37:18:8f:c0:
f7:00:1e:cc:f3:dd:5b:47:7c:d3:3f:62:e7:8b:e7:
00:98:ba:d4:cf:a0:83:87:1e:92:29:83:4a:e7:a8:
af:bd:bf:5f:ae:a2:0a:90:cd:d2:ed:ca:5e:5e:75:
6a:d2:79:5e:01:c1:4f:a7:47:53:4d:90:5e:74:bc:
b2:5b:93:51:73:8a:0e:04:82:63:12:4a:92:3a:31:
c6:76:cc:2c:44:c6:4d:0b:71:b5:26:46:30:03:85:
1c:3b:77:20:b4:06:97:1a:75:fc:ce:34:a3:5f:68:
52:38:b5:86:7d:ae:86:76:dd:67:71:01:b5:1a:7d:
94:a2:44:5a:6e:38:34:31:cc:f5:cf:36:77:54:68:
1c:6e:b0:14:e2:d0:ad:a0:7f:6e:66:fe:52:0e:66:
29:49:5b:28:8a:6f:20:7d:a6:b0:0e:9f:b0:e2:97:
4f:63:a5:1a:0f:b6:78:1c:ee:fb:68:fe:8c:b2:b5:
27:8d:0f:82:84:94:86:b7:94:11:21:b5:10:f4:ec:
0e:41:ca:c0:8f:c0:12:8d:58:e5:c5:5d:44:e5:68:
1c:69:66:a8:0b:58:f5:7f:f9:55:ed:a3:5e:b7:e1:
7f:97:a5:15:f9:86:5c:28:0a:e0:13:aa:45:99:0e:
4c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2F:2A:19:E8:96:D5:0B:B8:71:13:E5:E1:22:C0:EB:4A:0F:9F:4B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4y8qGeiW1Qu4cRPl4SLA60oPn0s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:9e:55:89:23:4d:92:f0:94:b8:97:7b:df:89:3f:bd:95:3c:
68:aa:34:da:6f:7d:52:7d:55:0d:bf:22:d1:00:16:1c:82:1c:
e2:7e:60:0c:28:68:45:62:bb:78:7f:29:ae:ff:0c:1b:ed:b4:
9e:c2:75:87:11:cd:1f:d9:69:0c:3b:d7:fd:7f:41:e2:99:c2:
c5:69:aa:19:e6:13:53:17:96:ec:dc:f9:7e:d3:76:08:5b:14:
09:dc:6b:35:ef:7c:27:e5:a6:11:30:42:bd:d9:4d:8f:8a:f5:
10:af:9b:b7:ac:17:31:1d:11:7d:a9:d9:f2:ce:45:ce:d2:65:
77:b3:50:09:8a:69:8f:5a:b0:02:05:cb:2a:21:40:8c:4a:c4:
99:25:7c:ac:2f:21:56:20:c7:fb:2f:80:62:76:1b:d9:0a:68:
fb:15:8c:43:49:cf:24:7e:06:74:1e:f8:fa:7b:4e:81:da:99:
5e:cf:a8:92:60:63:6d:aa:a1:f1:38:68:45:3a:cd:bb:3e:c4:
eb:d9:54:2b:87:d3:f1:df:40:31:8d:0a:61:f6:cb:7b:c2:df:
52:f2:fa:93:a4:76:6d:8f:45:74:56:6e:6e:93:44:ba:92:4a:
6c:c7:1b:e3:ba:be:4a:7e:c1:dc:98:c3:12:bd:83:c3:eb:fd:
b1:47:7a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:43 2025 by rpki-client