Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/BQxp2iOR0RFfmWlmBp42iQrpees.roa
File: BQxp2iOR0RFfmWlmBp42iQrpees.roa (raw, json)
Hash identifier: p7LxSoxBJGzTUsNHbdrtJSI7lfaGGtAy3ZynJ3HlNlQ=
Subject key identifier: 05:0C:69:DA:23:91:D1:11:5F:99:69:66:06:9E:36:89:0A:E9:79:EB
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 11C8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/BQxp2iOR0RFfmWlmBp42iQrpees.roa
Signing time: Sun 07 Apr 2024 09:23:48 +0000
ROA not before: Sun 07 Apr 2024 09:23:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4552 (0x11c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 7 09:23:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=050C69DA2391D1115F996966069E36890AE979EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:47:55:72:8d:23:d7:24:d4:4d:9c:e6:a8:
00:98:49:84:d7:2f:35:8c:29:2f:a3:fa:68:34:4f:
8a:c6:f9:68:6b:b2:2c:14:93:ae:52:6c:bf:3d:1e:
54:44:b6:16:dd:49:f8:bd:45:03:32:04:b0:46:df:
c8:00:34:1b:ed:6e:11:e0:5a:b9:5d:e2:b9:a9:04:
21:80:ae:b6:2e:94:f7:bb:ad:58:13:4f:32:e2:ed:
a5:88:32:6c:8d:30:6d:c0:1a:ec:03:e7:ec:38:29:
5b:d4:19:b7:74:cc:b2:fa:94:08:ef:17:45:24:83:
19:86:2b:6d:71:38:22:07:10:ae:49:86:8a:9b:08:
bf:7b:3c:db:b1:d2:ca:c8:b4:ae:c2:d8:ab:63:06:
23:3c:8d:65:5b:64:a3:d1:65:8e:27:08:73:72:dd:
e9:2d:09:61:90:9b:fc:23:2a:78:4c:e3:3a:eb:8d:
1a:1e:b9:76:1e:e5:67:b5:52:35:fd:dc:6c:e9:aa:
9e:99:c3:3b:02:4d:ea:aa:ac:1c:ce:38:51:e3:55:
b2:a7:e5:2d:65:a8:7a:3a:6f:11:a8:3d:5b:22:9e:
0b:d2:78:0d:57:64:6b:62:79:e0:ce:1f:a6:1d:b2:
84:ce:80:8e:e3:72:12:6b:d1:64:10:a7:8d:71:16:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0C:69:DA:23:91:D1:11:5F:99:69:66:06:9E:36:89:0A:E9:79:EB
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/BQxp2iOR0RFfmWlmBp42iQrpees.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:e3:7d:bd:95:45:9b:0b:92:95:31:f1:40:c9:6a:ce:9c:d5:
1f:42:69:a9:59:b6:22:86:f4:73:20:86:ab:e2:5a:98:28:2f:
e0:67:76:fb:8f:c2:05:85:78:df:33:0d:57:a4:5b:98:74:e5:
88:52:42:1f:2d:55:dd:7b:f1:42:a5:9d:52:b5:8e:c5:70:41:
c9:89:a7:46:62:a2:4c:97:ce:e0:63:75:55:61:05:47:38:1f:
31:35:6d:f5:5e:f6:ee:75:37:cf:81:39:03:af:db:5a:68:b8:
8b:9e:97:01:07:ac:ab:8e:93:54:27:4c:df:e5:c4:19:8f:e2:
35:bd:7f:46:c3:4a:54:03:76:a5:99:5b:f7:93:3c:43:ce:42:
c2:6e:3b:d3:e3:c0:da:e7:ef:4b:71:1e:ec:2f:3d:6e:77:f1:
a6:ea:09:01:0b:68:de:11:5f:ca:c1:92:89:af:75:13:24:40:
2d:78:fc:60:3c:25:be:38:d4:14:7a:c9:98:6f:e0:ad:53:44:
01:79:01:f6:f9:02:ad:81:fa:74:bc:dd:51:97:cb:3e:20:ec:
0c:5a:26:b8:3e:e2:fd:d8:b0:29:ef:19:2d:6c:88:d4:35:73:
58:ed:16:04:0c:02:aa:9b:e4:90:67:be:d1:86:33:24:25:e7:
1f:51:46:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:13 2025 by rpki-client