Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/E22yYZqPfGlsCBJFospwZiBCods.roa
File: E22yYZqPfGlsCBJFospwZiBCods.roa (raw, json)
Hash identifier: 86emt7fC3uhEuSMyIiUjl7gMUrutHZBzLic7Fx6tDGY=
Subject key identifier: 13:6D:B2:61:9A:8F:7C:69:6C:08:12:45:A2:CA:70:66:20:42:A1:DB
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16CE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/E22yYZqPfGlsCBJFospwZiBCods.roa
Signing time: Sat 20 Apr 2024 18:54:23 +0000
ROA not before: Sat 20 Apr 2024 18:54:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5838 (0x16ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 18:54:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=136DB2619A8F7C696C081245A2CA70662042A1DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:6e:ca:5a:d5:f1:65:1a:a4:a5:8a:39:3f:
b3:06:3d:96:94:cd:71:6f:3e:97:ec:4b:94:a7:6c:
a9:05:9e:2c:a3:94:c4:f2:70:99:d8:21:18:a7:cc:
05:da:eb:24:01:6b:b4:e0:ef:3b:31:e5:a5:5c:06:
87:07:5e:83:1c:a0:ce:53:ec:54:73:a2:b4:63:4a:
c8:b1:46:6c:21:32:eb:c2:23:b7:01:46:fc:f4:4f:
04:32:be:0b:f9:b7:a6:f3:9c:7f:c8:1e:f4:c3:cb:
1e:c2:16:36:f0:45:55:00:1b:0f:eb:cc:93:9d:0d:
ba:ad:ce:c1:e2:c2:fc:10:3d:38:1e:8d:f7:65:12:
36:14:0c:d5:e5:47:83:af:4f:42:21:43:61:4b:04:
3b:94:17:ad:13:5b:0b:9d:31:04:2d:12:23:20:6e:
75:77:ad:5e:41:9f:d3:cb:ff:c9:3e:a6:2e:43:45:
52:9b:43:e5:60:92:04:15:e5:33:7d:6f:a9:78:5f:
19:ca:a6:e4:10:00:ef:d2:9c:68:b5:51:e3:b2:95:
83:47:a7:3f:c2:10:b6:a5:1a:69:c3:fc:78:76:49:
a5:d2:7e:ab:ac:f5:bc:b2:14:71:22:7f:10:c6:8a:
70:cd:5f:57:92:7a:7d:e5:e1:d9:e2:7d:36:12:4e:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6D:B2:61:9A:8F:7C:69:6C:08:12:45:A2:CA:70:66:20:42:A1:DB
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/E22yYZqPfGlsCBJFospwZiBCods.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:38:34:ed:ee:2d:0d:39:07:6e:3c:02:fe:99:d9:f4:55:1b:
67:ae:8c:43:9b:8e:53:28:64:56:9f:9c:5e:f6:3f:c7:ce:49:
e9:ef:8d:88:7c:2d:00:74:f4:f0:d2:6e:c8:22:96:90:88:53:
57:8a:73:81:1b:5a:70:89:a9:2d:57:17:5e:6c:73:fc:19:b6:
3b:bf:92:19:f5:99:4f:73:fc:48:11:3d:68:25:96:25:7a:2a:
da:44:f0:4b:60:c2:93:7f:6b:dd:a4:d2:26:b2:8d:1f:24:d3:
7f:39:1a:04:08:fd:2d:b7:58:71:40:0d:37:5a:5d:08:98:1f:
8f:41:5d:06:f5:f6:11:a7:83:63:c3:62:62:3a:f7:cb:ef:c6:
93:79:eb:12:ea:13:42:01:d3:78:78:51:e7:e4:4a:60:97:d0:
05:6d:b6:c4:ad:9f:ac:e4:f8:e8:1a:ea:30:cd:a5:53:46:08:
61:71:83:34:cd:cf:9b:7f:fc:c5:27:98:48:88:27:b1:3f:be:
54:29:6e:aa:61:6c:74:d0:aa:a4:4b:42:d3:e8:a3:1c:1c:f5:
a6:c1:0d:d1:a2:e3:5b:84:1f:0a:83:9b:a2:43:6c:b4:8e:6b:
4b:b1:28:58:12:13:09:f3:2f:93:bc:3e:3d:70:6a:1f:2b:1b:
f6:66:81:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:20 2025 by rpki-client