Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/5gCR0rGDsGszSzBWyDiE-G0ws9c.roa
File: 5gCR0rGDsGszSzBWyDiE-G0ws9c.roa (raw, json)
Hash identifier: X49qlQwtCkitx/5fXFcCyTddWTRqYDuHVZ5kt19xr9o=
Subject key identifier: E6:00:91:D2:B1:83:B0:6B:33:4B:30:56:C8:38:84:F8:6D:30:B3:D7
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15E2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/5gCR0rGDsGszSzBWyDiE-G0ws9c.roa
Signing time: Thu 18 Apr 2024 07:54:18 +0000
ROA not before: Thu 18 Apr 2024 07:54:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5602 (0x15e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 07:54:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E60091D2B183B06B334B3056C83884F86D30B3D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:fa:58:cc:9c:83:2e:f1:9e:26:c6:17:bf:
37:e3:48:b0:c3:bc:e9:6e:d9:5b:81:7a:42:8e:43:
ac:2f:01:28:96:be:e0:59:a1:f0:87:ad:a6:37:ce:
bc:d1:4d:72:ec:11:4e:6a:fc:49:1f:26:6b:3d:e5:
58:96:66:8e:94:de:74:3b:35:77:ea:c9:0b:8a:2e:
c2:c4:e3:70:84:18:d4:1e:a2:a3:32:f7:21:1a:01:
e6:7b:cd:12:72:d4:5f:c4:4f:01:83:d5:bb:a1:82:
cc:04:f1:f0:79:80:bd:00:fa:da:fa:39:01:50:f8:
80:cc:be:33:8c:7f:8a:0f:e2:89:aa:da:74:a2:15:
13:fa:aa:0c:fc:27:e0:a1:f7:e3:b8:9b:ff:df:be:
f1:f8:f3:dd:e5:09:84:c2:c7:d1:a6:f8:c5:a8:9f:
7e:d6:9e:c1:38:26:b8:9a:7e:a4:fb:b5:f6:91:da:
36:7e:51:37:75:43:7d:0d:99:f5:e6:34:a0:50:a0:
17:75:83:04:60:f5:9b:b8:6b:af:ef:aa:d1:5d:c9:
e1:b9:d7:ff:8a:fa:b1:f2:b3:e9:7b:93:c8:f4:09:
40:c6:52:26:ba:e0:0c:40:fd:ea:c9:96:c5:6d:4b:
b5:fb:b3:1b:08:bd:e5:27:8b:77:39:0f:6d:b9:b7:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:00:91:D2:B1:83:B0:6B:33:4B:30:56:C8:38:84:F8:6D:30:B3:D7
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/5gCR0rGDsGszSzBWyDiE-G0ws9c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:10:e0:b6:ec:77:ed:29:71:14:49:0a:40:78:d5:30:25:76:
f1:f0:13:a6:47:06:d8:df:c1:ee:55:8f:11:a5:23:5a:61:c1:
56:55:c1:58:54:25:30:f8:8f:ea:bc:28:f3:2b:07:75:ef:db:
d8:84:47:9f:f8:5e:75:8f:d9:39:12:39:88:35:3c:59:0e:48:
2a:01:e7:c2:f9:91:f5:a9:2e:f8:6d:f0:2f:cb:c9:e9:86:e0:
f2:e4:b4:c8:68:b3:7a:01:24:4b:0d:a7:9a:8c:4e:6d:67:ee:
0f:ff:be:cb:d3:3f:35:a1:56:1b:87:88:f5:5a:6a:a9:ff:66:
32:35:1d:17:f4:db:af:f3:22:f6:b7:74:88:99:8a:42:6f:cc:
1a:65:30:db:ec:60:15:23:45:ce:b4:c0:2d:8b:9c:df:33:d8:
44:6c:fa:e4:cc:5b:c7:ef:24:47:cc:c1:22:6c:74:9b:c6:b7:
bb:ff:ee:f0:f7:70:97:11:d7:2e:b1:a8:68:12:05:80:3a:a1:
c5:5c:72:04:72:27:31:27:5c:9a:70:7a:f8:59:31:17:fb:38:
0b:0e:21:90:9d:b6:0d:8a:58:37:aa:5c:1b:89:7d:b3:ae:6a:
6a:1b:31:0e:2d:f0:91:c7:c2:d2:fc:e7:96:95:15:83:e2:07:
7e:0c:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:18 2025 by rpki-client