Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/6tSAgAQ1kk_ZjqWX0cyAyOeyrpw.roa
File: 6tSAgAQ1kk_ZjqWX0cyAyOeyrpw.roa (raw, json)
Hash identifier: Zz5RDVbP8yApekHG/khpIrazvryhEEroXbKY9voWjIc=
Subject key identifier: EA:D4:80:80:04:35:92:4F:D9:8E:A5:97:D1:CC:80:C8:E7:B2:AE:9C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A44
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6tSAgAQ1kk_ZjqWX0cyAyOeyrpw.roa
Signing time: Tue 30 Apr 2024 00:23:57 +0000
ROA not before: Tue 30 Apr 2024 00:23:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6724 (0x1a44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 30 00:23:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EAD480800435924FD98EA597D1CC80C8E7B2AE9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:f7:27:8a:f1:f7:72:2f:59:e1:04:4e:dc:
a0:f2:b6:09:ec:b3:48:2c:cd:20:cb:eb:8c:bc:4c:
49:05:83:b9:c0:b4:02:a4:d9:4a:4c:19:fa:62:53:
dd:cc:4f:09:37:f2:a3:bb:14:73:be:75:f3:6f:d4:
ea:d9:e6:20:9d:68:76:df:5c:65:fd:6d:5b:f0:d9:
7a:49:d8:be:51:0e:10:5e:95:85:38:ed:97:88:bc:
d1:b3:b0:97:73:22:ab:b8:21:d6:09:bf:71:77:83:
1d:73:55:bc:c2:1e:66:5c:01:90:ef:ab:08:30:b2:
49:a6:20:21:d8:ce:a8:a6:1f:93:1a:ab:39:04:af:
6c:fb:66:54:64:66:f8:00:4a:2b:90:d9:5b:de:6a:
90:b9:6e:92:c3:64:d0:82:e7:07:84:8b:50:02:10:
1e:c0:dd:fd:72:a7:67:08:33:21:6d:90:85:2d:7c:
b3:1a:ee:27:67:f4:e3:cf:56:f8:93:ac:33:81:af:
1e:6e:a8:c8:5f:7d:50:81:89:ff:85:01:36:95:46:
c8:be:0b:cc:01:b3:e6:27:c4:6e:b3:74:2c:d2:ca:
a5:66:3c:cc:52:bf:ea:cd:fc:d9:80:f0:01:5c:55:
6f:11:f3:c6:4a:f8:ea:d9:12:fd:08:26:a9:cf:9e:
68:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D4:80:80:04:35:92:4F:D9:8E:A5:97:D1:CC:80:C8:E7:B2:AE:9C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6tSAgAQ1kk_ZjqWX0cyAyOeyrpw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:01:a4:a8:5d:1d:0c:ea:db:1a:2e:71:ff:11:a0:bb:f5:ef:
4c:23:c8:b6:92:5f:3b:9d:61:42:05:6c:cb:5b:a2:74:81:a1:
21:24:bf:11:7c:22:bb:32:37:ca:dd:73:77:e6:d0:40:ca:6b:
fb:53:22:32:48:32:c3:ba:43:61:bd:00:88:1c:bb:eb:be:54:
15:78:63:85:18:4c:ea:b9:d8:ac:40:b3:f6:23:f4:95:d8:c6:
84:c4:6a:70:c9:39:e2:7e:4b:ef:cd:2a:99:0d:a4:5d:f2:dc:
42:62:47:1e:33:89:59:c5:d9:88:5c:61:c4:ec:92:81:9f:33:
7c:0a:83:2d:8a:df:2d:8b:4b:40:f8:0e:5f:df:4c:a0:c5:1b:
f4:c0:88:da:3a:20:8e:b0:a0:b2:bc:96:9e:e4:3a:89:b3:56:
e0:1b:53:e9:fc:2b:68:d2:c7:a9:3a:42:dc:42:ff:7b:00:bc:
c6:24:82:3c:66:26:a5:3d:80:d9:cc:bc:fe:68:96:52:9e:49:
fa:a4:6e:6c:ef:66:cd:b8:56:0b:f8:1a:33:1d:ba:c6:66:12:
c6:68:53:06:a8:08:3c:a2:ce:9b:32:64:a4:f1:d8:cd:e0:d7:
a8:92:11:a8:40:fd:40:85:38:9e:3c:79:f6:9a:4a:e6:b6:67:
bf:d0:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:01 2025 by rpki-client