Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/GAnC_j5StAl_K4N6pVruNd1xJWE.roa
File: GAnC_j5StAl_K4N6pVruNd1xJWE.roa (raw, json)
Hash identifier: iEG3+jo53P+6hV+up8ZHM+Xclchhp8Ajv8OE9Jt6QDk=
Subject key identifier: 18:09:C2:FE:3E:52:B4:09:7F:2B:83:7A:A5:5A:EE:35:DD:71:25:61
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 157E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GAnC_j5StAl_K4N6pVruNd1xJWE.roa
Signing time: Wed 17 Apr 2024 06:53:21 +0000
ROA not before: Wed 17 Apr 2024 06:53:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5502 (0x157e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 06:53:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1809C2FE3E52B4097F2B837AA55AEE35DD712561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:c7:8c:f8:4c:fe:5f:cd:4b:a2:e6:35:9e:
ea:ab:d4:2c:4a:18:b9:0c:9e:cb:1c:d0:05:93:b4:
e5:f8:26:2b:d4:21:d5:08:cb:a6:bb:7d:7f:f5:d3:
16:e7:01:62:49:ef:56:76:b2:aa:85:d6:93:17:d2:
a3:82:0a:c5:80:7c:22:f1:c6:83:15:f9:48:e8:9f:
c0:c2:65:21:d1:35:78:46:e5:af:d4:98:52:4f:cb:
e5:ae:16:fd:3b:9d:4a:dd:07:ec:81:ba:88:98:df:
1e:b9:f7:39:e3:c1:1b:0e:2c:44:7a:0c:95:f3:a6:
37:ec:77:bc:29:24:bf:88:1b:ba:bb:55:48:aa:7f:
d1:98:c0:96:42:aa:7d:dd:11:42:df:d7:d8:24:99:
bc:f5:0b:b9:e7:f6:12:0b:2c:78:9b:71:b9:ea:32:
79:b3:5c:d9:25:22:88:09:11:62:44:15:15:9c:c7:
3c:01:ac:a0:73:b4:0c:c1:84:d3:a2:07:cc:85:68:
ff:40:6a:51:8f:a7:a0:c0:14:ce:a0:4e:05:1b:31:
ab:a4:26:e9:fa:85:b3:de:10:25:6a:2d:49:eb:b2:
cd:25:de:c0:f1:5d:1b:b8:82:d5:85:23:c9:ef:19:
db:5e:4e:be:33:d1:2b:1f:00:e6:d8:8b:88:99:62:
d3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:09:C2:FE:3E:52:B4:09:7F:2B:83:7A:A5:5A:EE:35:DD:71:25:61
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GAnC_j5StAl_K4N6pVruNd1xJWE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:6c:24:01:fb:37:e4:d2:09:0e:97:d8:8a:cb:ff:ee:43:f9:
b2:6a:9e:7d:fe:d6:5e:ef:54:9d:ca:51:30:7c:38:f8:d2:06:
28:57:eb:c9:b5:96:e2:7d:16:b2:8b:8b:09:40:21:0e:09:b0:
3b:85:f6:78:b1:7d:18:38:18:1e:25:c9:21:a2:6e:3a:4d:60:
28:73:be:af:9c:ee:43:55:26:23:18:c1:9b:d5:e3:8b:85:a0:
de:1c:3f:1f:dd:cf:1d:ec:4b:64:98:42:01:7f:cf:38:fc:87:
50:c8:30:9a:07:5a:41:a3:8d:dd:2c:7c:de:ef:45:e6:4c:5a:
10:20:50:06:c9:09:1b:89:55:0b:c0:11:0a:e2:94:6d:96:e1:
d6:25:11:d5:93:07:a8:a4:f5:a6:72:ac:88:c7:7d:1a:e3:b9:
86:af:0e:53:3b:5b:8a:9c:3c:7a:23:12:03:65:89:f8:ff:3d:
35:82:d7:dc:07:02:97:f3:43:98:79:17:c4:63:f6:7c:60:6f:
8b:f2:00:0f:56:e5:53:be:38:fa:4b:5f:7b:cc:25:46:93:a8:
8d:bc:af:1f:4f:63:b3:bd:19:f2:e9:19:1e:cd:ed:4c:16:14:
2c:3a:a6:4a:fb:4b:20:68:21:ae:c9:fe:27:5d:0e:af:35:e5:
b4:b2:1e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:20:02 2025 by rpki-client