Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/DehY7ZKvTmaYf6NHaEkAOi_pdd4.roa
File: DehY7ZKvTmaYf6NHaEkAOi_pdd4.roa (raw, json)
Hash identifier: qEonm7VSCDB7SoeICYLSqGYh0CXL7T0pohh/OI2/LaE=
Subject key identifier: 0D:E8:58:ED:92:AF:4E:66:98:7F:A3:47:68:49:00:3A:2F:E9:75:DE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19B4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/DehY7ZKvTmaYf6NHaEkAOi_pdd4.roa
Signing time: Sun 28 Apr 2024 12:24:02 +0000
ROA not before: Sun 28 Apr 2024 12:24:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6580 (0x19b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 12:24:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0DE858ED92AF4E66987FA3476849003A2FE975DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:be:8e:4f:cc:93:87:63:fa:61:b2:bf:91:
4b:5f:45:f8:1d:02:07:6e:a2:8e:fe:09:25:90:51:
0b:95:c5:f5:07:cb:69:d0:d4:b7:ae:ae:38:d6:73:
61:24:41:5f:e0:d0:1c:ff:b0:cd:25:2c:b8:29:58:
44:97:55:a3:55:27:23:92:b0:c9:dc:20:9e:69:2a:
a7:70:cf:ad:16:03:0c:05:55:cc:28:a2:d7:e2:aa:
5c:5f:4f:0c:f4:20:a5:fa:f6:c2:f0:a7:3b:06:1a:
65:b9:cd:3f:33:21:92:5c:7c:d6:47:26:c4:63:78:
61:28:21:62:77:ee:4e:a8:12:13:78:f5:ff:4f:f1:
98:48:69:fa:44:47:ed:63:09:b2:38:40:d9:2a:6c:
a7:22:36:c0:b5:d7:1a:17:b7:1d:ee:8a:70:47:24:
c0:3b:ab:48:7c:4d:9c:85:c8:9e:1a:e4:91:31:e0:
19:8c:a8:99:47:39:3d:f6:cb:6c:4e:c9:c4:ce:02:
94:6b:c8:a7:98:2b:78:b1:5b:a1:67:a2:aa:2e:85:
20:e7:d0:62:0c:e3:40:26:1b:4b:4c:cb:dd:80:a0:
d8:a5:1f:ba:8e:df:4f:14:90:d3:9d:1c:31:98:ab:
50:bb:d4:48:06:3e:9d:c8:b8:d0:6f:92:c9:55:b5:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E8:58:ED:92:AF:4E:66:98:7F:A3:47:68:49:00:3A:2F:E9:75:DE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/DehY7ZKvTmaYf6NHaEkAOi_pdd4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:bb:55:81:49:c4:70:21:17:9b:bf:51:91:62:12:ef:d8:7d:
d6:fd:63:07:e1:50:5b:8d:b0:42:fc:1b:29:bd:f2:3b:35:20:
0d:22:04:10:ee:5c:16:1f:eb:a3:55:b4:5b:43:09:06:1f:47:
51:fc:b4:65:36:10:c4:76:9d:b0:5b:49:58:06:7c:ea:7d:2f:
b5:85:06:47:e6:9f:78:fe:a0:86:db:01:30:44:96:54:c7:ef:
5a:07:ec:5d:13:d2:4d:3b:e1:b2:47:69:58:8f:d2:45:20:cf:
5e:58:b5:47:91:72:b5:0e:97:f5:e3:aa:b7:22:b6:b5:ac:55:
4c:7a:d5:69:5b:9d:ca:3f:04:f4:9e:86:e1:87:d6:eb:0b:76:
18:2b:b4:4d:8c:66:96:cc:72:e1:e3:26:41:54:f5:31:1e:ca:
74:c0:24:c4:f6:7b:c6:2e:fb:8d:29:31:81:a5:14:a5:47:56:
d7:e5:ff:89:42:39:3d:fc:60:70:98:13:50:01:b7:2f:3e:98:
cb:a3:01:2f:a4:c3:f8:d1:c4:01:ee:e3:91:dd:85:2c:b3:91:
50:18:0b:22:08:50:96:b4:ec:9c:ce:66:c1:40:d9:d9:02:e6:
46:5e:10:20:57:ad:ba:f8:7c:2b:db:82:2f:c2:c9:15:e6:85:
67:2c:47:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:03:41 2025 by rpki-client