Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/GC0yOxVCL4Zv0l58AqWCUoe2BcU.roa
File: GC0yOxVCL4Zv0l58AqWCUoe2BcU.roa (raw, json)
Hash identifier: cxGIVQnJhh0NjjUUQqZvttzB1NDpqMndSVDpZctk038=
Subject key identifier: 18:2D:32:3B:15:42:2F:86:6F:D2:5E:7C:02:A5:82:52:87:B6:05:C5
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 188A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GC0yOxVCL4Zv0l58AqWCUoe2BcU.roa
Signing time: Thu 25 Apr 2024 09:53:40 +0000
ROA not before: Thu 25 Apr 2024 09:53:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6282 (0x188a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 09:53:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=182D323B15422F866FD25E7C02A5825287B605C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:d2:64:31:3c:65:ff:15:32:8f:fd:1e:5d:
77:a2:0f:c1:9d:ec:f0:e6:4e:4c:97:4d:44:01:d3:
77:b4:6f:14:8d:24:ac:00:b3:31:85:4a:24:58:15:
f9:b8:7f:be:e9:ab:85:e7:86:3f:7d:c7:60:9f:02:
03:b4:2b:91:53:83:f8:ba:8c:07:8f:02:c1:6d:91:
18:eb:78:2b:b4:12:d2:37:21:ed:ed:f8:dd:60:15:
0e:16:37:d0:23:b5:4f:7f:c9:e6:17:0f:ea:2b:76:
05:f6:99:20:ac:55:24:42:4b:43:a1:d2:08:c7:c8:
31:ba:8b:d0:e0:76:a4:de:03:32:9b:20:1d:2f:dc:
c6:3d:eb:ac:4e:23:7c:4f:dd:f0:b2:a4:30:26:6e:
26:f4:47:f7:a2:98:fc:5d:50:c7:45:00:42:f6:da:
74:59:4b:51:1a:79:5f:d0:1c:68:6f:0e:fa:1c:f4:
73:59:4a:83:58:69:6a:58:48:96:9f:68:ce:fa:7e:
48:86:03:d0:5a:6d:64:1e:54:a3:08:47:65:34:ad:
91:41:58:e1:ab:2c:75:da:29:15:7a:04:b5:1f:89:
41:b3:40:4b:4d:d4:4c:4c:28:ed:0f:34:ac:02:c5:
27:24:ac:db:5e:96:17:05:74:ca:fb:47:ba:09:fa:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2D:32:3B:15:42:2F:86:6F:D2:5E:7C:02:A5:82:52:87:B6:05:C5
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GC0yOxVCL4Zv0l58AqWCUoe2BcU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:76:29:2f:e2:ad:92:12:54:50:f5:b2:43:7c:2e:61:1d:88:
62:b9:f5:1c:0c:d1:a5:44:b8:b2:1c:cc:7c:cc:d1:22:c9:c3:
94:97:29:95:8d:54:b1:c6:db:75:02:9d:bf:70:b1:38:81:c9:
42:e0:6a:77:3a:a6:b8:02:9c:0f:f1:3a:1d:aa:df:bb:08:d3:
cf:44:4b:5a:e0:a2:59:48:46:80:87:7e:69:cb:6e:6a:dc:16:
b8:7f:2d:95:ee:15:b0:ff:2f:39:66:cf:85:42:50:57:58:ff:
0a:0f:b4:57:2b:e1:11:d3:ad:2e:d9:61:04:4a:a9:b7:85:25:
3f:a3:50:61:02:91:68:ec:57:54:d3:6d:c7:5f:20:03:bf:ed:
70:e9:04:ea:bb:90:8c:3e:2e:ba:89:70:a3:e2:13:01:cf:8e:
e4:ce:62:bf:10:d8:5d:34:98:ab:5e:b9:3f:b5:63:53:2d:17:
1d:0d:ef:58:e5:e5:6a:e8:14:64:2d:fc:47:60:7c:66:fa:9e:
77:76:1a:43:33:10:f7:5a:a4:80:aa:63:b2:ce:f4:f4:73:41:
1a:72:dd:d0:e2:5f:46:5c:5c:c8:f8:92:20:4d:63:a3:8d:d2:
1b:d3:66:d6:8a:55:78:75:2c:83:08:c7:22:27:39:62:58:51:
4c:b1:d5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:21 2025 by rpki-client