Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/B6tBZ58tTWhXp-mDyVnSGb08DXs.roa
File: B6tBZ58tTWhXp-mDyVnSGb08DXs.roa (raw, json)
Hash identifier: dwoOIJjuM9MxsJ+AaWaPK8XqRGOhIJR9fnUFfJCzudI=
Subject key identifier: 07:AB:41:67:9F:2D:4D:68:57:A7:E9:83:C9:59:D2:19:BD:3C:0D:7B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1336
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/B6tBZ58tTWhXp-mDyVnSGb08DXs.roa
Signing time: Thu 11 Apr 2024 04:54:03 +0000
ROA not before: Thu 11 Apr 2024 04:54:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4918 (0x1336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 11 04:54:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=07AB41679F2D4D6857A7E983C959D219BD3C0D7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:cf:0f:70:48:0b:4a:2b:83:a9:5e:8b:30:
a2:b1:99:f4:58:30:dd:ff:de:b8:f8:d5:aa:35:ac:
3a:6e:34:03:ac:fa:d8:b5:78:2e:3c:b8:f1:c9:20:
76:7d:97:fb:09:da:05:63:98:25:9e:f1:8b:b2:4d:
a3:82:ab:1f:b6:b2:56:b3:02:ad:36:01:de:d6:db:
69:5b:9a:7f:14:e7:b3:13:04:a1:61:b3:67:f7:cd:
ec:db:29:c2:61:e8:a4:28:dd:5f:ea:bf:3b:57:c9:
94:c7:c5:79:32:c5:83:4d:c8:f3:f2:98:7b:17:89:
d7:ab:6b:b2:75:93:57:49:ee:ff:a8:20:40:51:c6:
85:7e:af:c3:6d:26:a9:f2:c7:39:01:11:74:40:b1:
aa:64:ae:f9:58:ef:ca:aa:4b:3d:31:6e:82:49:9a:
4e:8d:85:ff:f5:fa:4e:26:d1:f4:d4:95:e3:e8:51:
7b:7b:48:a9:95:8d:9f:d6:c2:b2:18:07:57:1d:e8:
95:a0:8c:35:7e:91:db:10:f9:f1:b2:10:a6:8d:4a:
f9:a0:1b:8c:02:0c:21:50:dd:c5:61:79:89:90:f8:
c5:fd:11:cb:d4:de:cd:b1:b0:6f:b7:b4:73:10:11:
13:c0:49:b5:60:63:e8:ea:c0:9a:f9:67:fb:40:92:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AB:41:67:9F:2D:4D:68:57:A7:E9:83:C9:59:D2:19:BD:3C:0D:7B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/B6tBZ58tTWhXp-mDyVnSGb08DXs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:a0:83:9c:a4:4a:ae:85:4c:cd:2f:84:fd:dd:81:ce:00:9d:
0d:1a:a5:5d:12:67:c1:f3:c9:a1:a1:d8:21:b8:3d:44:58:47:
dd:7b:f0:fd:81:d4:ce:88:04:7e:43:8f:60:3e:98:aa:3a:24:
2c:8a:26:13:59:b9:33:b1:18:8c:e4:14:ee:c8:ea:9b:10:cf:
9b:0b:92:48:75:28:73:de:c1:86:af:c9:be:68:41:8f:9d:b2:
2d:c4:03:87:4e:7e:0c:f4:41:7e:6f:b2:f9:64:cb:81:46:7b:
6a:38:9d:d2:d0:2a:e5:cd:f1:3d:1c:fb:c1:f1:8c:3e:0d:91:
33:24:11:28:dd:e9:48:fc:29:5d:3f:63:89:98:73:5d:82:02:
91:ea:b6:b7:8c:09:36:8e:65:fb:0b:e2:de:4f:55:6c:70:da:
06:81:d9:50:de:24:71:27:36:9e:43:ab:df:d3:39:e2:d7:fe:
74:a7:02:44:fd:ca:46:e0:03:97:cd:f7:08:81:b9:4b:52:38:
f8:1f:a7:71:55:a4:58:9a:42:7f:51:42:ea:6a:6d:c2:ac:0f:
35:81:3b:bb:53:97:32:78:8e:7b:a2:4c:d1:94:31:2f:83:81:
bc:48:90:92:b1:9e:0e:fb:63:87:1e:69:8c:8a:c1:f6:4d:86:
78:7c:0b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:35 2025 by rpki-client