Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/C9opUQE0lHhrjOb4_VEx-ITccbo.roa
File: C9opUQE0lHhrjOb4_VEx-ITccbo.roa (raw, json)
Hash identifier: fTZWyyxWJhVtNeGDy2FgiUsAm9L9Q6B1cx8j500PQY8=
Subject key identifier: 0B:DA:29:51:01:34:94:78:6B:8C:E6:F8:FD:51:31:F8:84:DC:71:BA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14FA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/C9opUQE0lHhrjOb4_VEx-ITccbo.roa
Signing time: Mon 15 Apr 2024 21:54:13 +0000
ROA not before: Mon 15 Apr 2024 21:54:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5370 (0x14fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 21:54:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0BDA2951013494786B8CE6F8FD5131F884DC71BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:1d:c7:cb:6f:3c:31:61:75:44:dc:26:bd:
38:67:23:c2:2b:31:eb:54:a9:be:8f:fc:7c:1b:64:
3a:da:18:5e:e8:bb:29:c4:13:38:5d:c4:8f:7b:a9:
55:b2:16:f1:c3:23:f4:90:18:21:08:9b:3e:35:9e:
01:19:e0:37:d3:e6:34:c2:70:f0:c0:03:25:cf:9f:
7f:f9:33:2a:28:33:61:40:4e:ba:14:fa:4d:78:84:
4f:c9:e0:ac:ee:d4:bd:29:23:bb:d5:68:5f:36:bd:
f5:b5:3a:44:b7:c7:f1:7f:40:ee:c3:aa:19:8f:5e:
24:27:1f:56:ae:8d:cb:af:7a:e8:3d:ec:f5:d6:c3:
b5:01:11:aa:7e:a2:45:33:d5:1c:e8:22:59:e6:6e:
58:ae:ef:26:c2:51:eb:e8:fa:9b:27:e3:94:c4:0a:
92:b4:c4:66:0c:72:db:5d:1a:63:07:76:42:36:c6:
8f:78:94:4d:c8:8f:d9:90:0b:3d:a3:a2:7b:44:e5:
aa:50:4b:dd:56:8e:51:b4:35:ad:1e:97:14:94:74:
0f:f6:9c:7d:1a:ca:68:c7:3b:d4:af:57:a3:5e:16:
ac:c4:f1:23:45:31:c0:f5:1d:f7:26:a6:c1:59:24:
18:31:36:c8:a2:86:94:8f:02:bd:c2:13:9c:c3:f0:
f2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DA:29:51:01:34:94:78:6B:8C:E6:F8:FD:51:31:F8:84:DC:71:BA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/C9opUQE0lHhrjOb4_VEx-ITccbo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:8c:0c:02:48:69:31:d0:3d:2d:41:8c:12:74:d6:66:61:fa:
e9:3c:b5:17:c6:9b:5e:7d:fa:4d:74:cc:40:76:68:3c:a3:84:
a8:18:53:2f:a1:61:05:23:d5:64:1e:05:57:8b:5a:c9:1a:08:
ad:69:7b:51:5e:6c:1d:d1:ca:2c:4f:ba:8f:a7:78:83:c6:e0:
05:aa:93:85:3e:32:b6:e1:38:16:a4:ce:92:ea:50:d9:10:9a:
1b:87:f1:41:37:7d:0d:2a:81:29:dc:e2:b9:f1:c9:2b:8c:0c:
b9:4c:89:42:f0:44:fb:13:b1:c0:49:8d:36:6f:fd:ae:41:94:
68:75:00:d8:94:f6:8d:2c:f3:0a:b4:eb:18:bd:c4:ab:87:2c:
ce:20:5c:f8:47:84:c5:d0:e6:04:6f:09:28:7c:56:1b:2a:50:
11:1d:e7:4b:6e:cd:09:b6:f1:9c:6d:1e:cb:17:12:7f:af:d8:
e8:eb:85:5a:29:a0:74:94:96:ee:ec:bc:9e:3e:63:61:3f:45:
5a:17:d0:6f:77:3e:c7:67:ae:e7:aa:59:be:b9:ac:d7:87:d9:
bd:70:ef:b0:c9:ec:dc:d0:da:4b:78:77:26:7f:7d:26:99:63:
cd:c0:c3:9a:0d:e3:3b:f9:e0:fb:29:06:92:3d:34:05:fe:ac:
28:96:7d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:47 2025 by rpki-client