Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Fzn8gfr4imWrTGLFE9cxNuH-2sI.roa
File: Fzn8gfr4imWrTGLFE9cxNuH-2sI.roa (raw, json)
Hash identifier: 7SthB2FoeFN0nSUgVtAdL6umAYJz7mmvmVXE4kfff0Q=
Subject key identifier: 17:39:FC:81:FA:F8:8A:65:AB:4C:62:C5:13:D7:31:36:E1:FE:DA:C2
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E16
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Fzn8gfr4imWrTGLFE9cxNuH-2sI.roa
Signing time: Thu 28 Mar 2024 12:52:29 +0000
ROA not before: Thu 28 Mar 2024 12:52:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3606 (0xe16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 28 12:52:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1739FC81FAF88A65AB4C62C513D73136E1FEDAC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ef:36:a1:67:f5:95:40:70:18:96:78:91:c6:
58:96:bf:95:37:b8:97:2c:4c:fa:c0:98:fa:3b:75:
a0:a8:b3:8b:d5:0d:94:ee:9b:80:02:7e:29:27:35:
14:10:9c:62:c8:ee:7c:f2:e7:18:bc:0f:c0:78:be:
93:1b:9b:28:4b:c3:24:6f:08:25:1a:59:d5:79:53:
b4:4d:1c:f1:9c:e5:88:03:4d:19:d8:9d:8a:af:43:
b8:8d:39:dd:2c:db:0f:d5:d5:17:48:6e:fc:ed:37:
bb:15:71:8e:db:fe:62:ce:32:fb:da:20:9f:18:73:
68:d5:c6:40:65:54:cd:73:af:cf:62:2b:e8:6e:db:
ca:52:71:97:69:09:ae:3a:3f:bc:99:ef:13:74:ae:
77:25:a2:0f:a0:22:11:99:a3:cb:79:ce:d2:02:fb:
84:8b:70:62:f0:6e:6a:ad:c5:8b:86:41:f5:95:5a:
ce:7f:4d:20:6c:c8:3b:69:74:c8:c8:47:b8:04:99:
14:8a:f8:1f:90:04:d0:00:1b:81:2e:5e:9e:1e:08:
69:c9:6f:d7:29:37:bd:72:63:77:3b:36:07:06:69:
b3:e6:11:37:f1:19:ba:16:6a:02:82:21:fa:ab:7a:
86:e0:ea:d7:54:ad:13:ec:88:c5:79:48:28:af:b5:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:39:FC:81:FA:F8:8A:65:AB:4C:62:C5:13:D7:31:36:E1:FE:DA:C2
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Fzn8gfr4imWrTGLFE9cxNuH-2sI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d4:9f:b4:3e:78:51:23:93:04:47:9d:e9:b4:ee:28:4e:32:ad:
f7:fb:05:4f:ee:9a:a4:67:54:7e:e5:78:a1:44:66:46:0c:48:
93:6f:ac:e0:b9:51:9f:70:b0:28:bb:6b:99:ef:50:52:14:84:
7f:be:20:b1:c0:d1:a3:42:16:7a:84:00:45:a7:34:52:12:be:
1b:a6:9b:54:57:28:e3:85:77:6d:2d:fa:72:1f:60:5f:18:43:
bc:27:87:30:50:f4:4d:97:11:a9:ac:fe:6e:c2:a4:97:47:44:
69:f6:17:5d:82:ef:d7:34:d8:32:a1:05:ff:29:28:61:99:27:
0c:40:da:71:69:06:39:36:0c:2e:2a:94:50:f4:ac:c0:31:6a:
12:d0:aa:dd:64:98:53:30:6f:26:3f:bf:ed:68:8c:96:5f:a3:
fd:12:2b:ea:6a:12:29:6c:03:a9:6b:50:f5:cd:8f:23:32:60:
0c:ee:d5:33:1b:8d:32:88:37:c6:9a:60:26:d3:a3:24:1e:b5:
aa:50:83:6f:78:d1:63:50:e8:63:3b:ac:87:dd:c9:f5:0f:96:
7d:35:95:45:93:84:ed:57:1f:db:36:c7:01:d8:00:24:51:28:
1b:d5:6c:c1:c7:79:55:28:b6:97:f9:26:76:71:44:f0:ef:cb:
04:71:11:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:51:56 2025 by rpki-client