Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/HRhse8jslLk_cwzcGwgxKr1O_FI.roa
File: HRhse8jslLk_cwzcGwgxKr1O_FI.roa (raw, json)
Hash identifier: Mzgqs9yeZG9qqF08V9nAfpulT+P3J6lAETyAwN4MR6g=
Subject key identifier: 1D:18:6C:7B:C8:EC:94:B9:3F:73:0C:DC:1B:08:31:2A:BD:4E:FC:52
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15B2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HRhse8jslLk_cwzcGwgxKr1O_FI.roa
Signing time: Wed 17 Apr 2024 19:53:27 +0000
ROA not before: Wed 17 Apr 2024 19:53:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5554 (0x15b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 19:53:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1D186C7BC8EC94B93F730CDC1B08312ABD4EFC52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:54:17:c8:23:e3:a8:4e:b7:ad:6d:6f:e9:
be:58:b8:c0:dc:5f:f0:cb:c9:77:87:af:7e:e1:ab:
88:4c:b2:09:62:00:c7:ea:7c:0e:6b:0c:d2:cc:cf:
c3:01:4c:fa:4c:08:33:c0:8b:69:52:09:d9:44:92:
a5:88:cb:0b:b8:39:88:da:6b:45:6b:c4:1b:4d:a9:
7f:3d:3b:31:18:4d:02:a2:1e:ad:07:1f:8e:c9:37:
a7:1d:c8:53:12:b9:db:e5:7e:28:8e:95:51:44:bf:
9d:b6:cb:d1:c8:17:e4:21:f9:20:40:a5:17:29:b4:
03:31:a4:6b:f8:ab:0f:99:13:1d:60:89:a9:14:2a:
f8:ac:34:97:80:2a:84:3e:28:0e:56:bd:2f:8a:7e:
f2:1c:d2:bc:6a:45:c9:cb:7b:1c:a7:c8:7d:5c:70:
c8:d4:fa:c3:d5:de:a4:4c:53:5c:1b:65:69:a8:e1:
df:b7:3a:6b:86:d1:79:21:f1:05:2a:0b:e0:66:0e:
35:9c:70:8c:09:7a:02:f2:4f:8a:97:cb:9d:6e:66:
7e:a7:c2:08:d8:b9:03:c5:31:6d:03:e3:2c:d6:3c:
f0:b7:27:19:50:cf:64:fe:fc:39:4a:17:ff:9a:7a:
9d:93:ea:53:c3:fc:af:be:3f:1a:06:57:20:61:dc:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:18:6C:7B:C8:EC:94:B9:3F:73:0C:DC:1B:08:31:2A:BD:4E:FC:52
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HRhse8jslLk_cwzcGwgxKr1O_FI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ca:47:8a:51:63:17:3d:c8:7c:a9:42:b7:13:9b:e2:b3:b6:57:
bc:61:ce:9e:38:4e:c2:8f:43:cb:e7:73:ff:46:70:f2:39:1f:
21:67:1f:40:1a:6c:17:2f:0c:55:ce:37:81:2c:d6:3b:a3:45:
72:f6:97:99:19:1f:bb:8b:6f:7c:d9:57:c0:ec:02:aa:a3:1e:
91:32:78:c7:99:56:ff:87:0c:81:ca:82:6a:55:32:55:a4:5a:
af:fd:5c:40:fa:90:a6:41:d0:bc:e7:9f:0d:39:1c:e3:3f:2f:
bd:59:76:0f:4c:ff:0a:74:91:b9:7a:be:5f:28:07:a4:d0:b8:
09:69:d6:f8:26:cd:50:0b:5c:cc:a4:8c:3e:2b:58:86:a4:48:
57:37:13:49:25:8f:a4:d1:9b:07:56:17:38:9f:fc:2d:ad:80:
5c:e7:05:e9:88:56:12:81:7c:01:b8:29:a2:30:1a:80:7e:f0:
b0:74:0d:ea:a2:f9:e4:f2:89:ba:ee:a8:3f:c6:10:23:58:b9:
61:f5:14:30:e1:46:52:f4:a0:ba:b0:e8:7e:a8:4f:c8:d1:e6:
27:8f:1e:41:c0:48:13:de:38:d6:24:2f:41:9a:97:52:fc:95:
88:69:63:e6:ec:ea:3b:52:12:58:48:2f:c1:0b:4b:3a:82:03:
b5:5c:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:59 2025 by rpki-client