Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/IgJOX6hPn9oYEnKj044Xuioe5wM.roa
File: IgJOX6hPn9oYEnKj044Xuioe5wM.roa (raw, json)
Hash identifier: YU56L/9qVpyDz16cyVXu4+JjTT1lubsytWuIHjnVtLM=
Subject key identifier: 22:02:4E:5F:A8:4F:9F:DA:18:12:72:A3:D3:8E:17:BA:2A:1E:E7:03
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C9A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IgJOX6hPn9oYEnKj044Xuioe5wM.roa
Signing time: Mon 06 May 2024 05:54:33 +0000
ROA not before: Mon 06 May 2024 05:54:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7322 (0x1c9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 05:54:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=22024E5FA84F9FDA181272A3D38E17BA2A1EE703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b7:1b:a6:f2:32:f1:2e:df:33:9a:25:67:ba:
9e:e0:8b:2d:c6:f0:d4:34:2a:c9:69:50:bd:82:ed:
99:30:53:74:77:e0:d7:50:5c:2e:02:a8:a4:be:42:
e6:37:08:69:8d:47:b5:d5:f9:8b:7f:f0:bc:2e:d1:
bd:02:0c:b8:5c:cf:2a:23:df:d5:8a:0e:0c:62:1a:
a1:b6:20:4e:86:27:81:49:41:ad:55:d6:83:21:9e:
e6:92:39:35:84:11:50:ca:2b:4c:50:9c:ed:6d:94:
7e:dd:52:a0:61:40:ef:0b:42:91:3a:e2:11:a2:b7:
10:7d:f4:be:d4:40:5b:52:9f:bc:30:af:0a:62:01:
2e:f6:6a:31:74:2d:ab:84:8d:b4:24:84:7d:6b:cc:
bd:78:2a:b7:9a:8d:00:12:a5:ea:1e:e2:67:96:72:
70:0f:f2:07:35:b8:af:11:8e:72:0e:0a:4b:48:28:
c2:78:38:d5:08:44:c9:57:b0:78:4b:4e:08:35:c0:
f3:40:fc:80:8c:d4:d8:b8:c9:8f:ba:6b:3a:38:9e:
f9:31:4c:7f:e7:ea:f8:3c:a7:50:c0:c7:b5:11:3b:
eb:30:a0:12:e9:49:a8:a3:29:d0:a9:76:5d:73:7c:
e6:e4:cc:21:97:5f:f3:b7:28:86:b1:56:68:81:59:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:02:4E:5F:A8:4F:9F:DA:18:12:72:A3:D3:8E:17:BA:2A:1E:E7:03
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IgJOX6hPn9oYEnKj044Xuioe5wM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:b6:96:42:98:d6:a8:d1:8d:ef:65:35:2a:b5:05:b2:83:70:
2c:61:15:80:de:c2:54:b0:2a:b8:3e:49:3f:f2:a1:b7:0b:d2:
a6:1c:30:60:6b:dc:34:21:d7:1c:5d:dc:91:9a:0c:73:1c:29:
83:aa:76:42:ef:af:10:1f:0b:fe:40:27:d6:0b:88:3c:d9:d5:
5b:bd:52:fe:9f:af:86:96:95:88:d8:9f:27:c0:02:fa:10:2a:
cb:a2:d0:aa:25:03:81:79:82:ed:aa:7f:38:38:9e:fe:55:8b:
4c:b2:7d:53:c2:65:43:cb:0b:c2:2e:f3:e4:c3:0c:53:a9:f6:
b2:47:bb:f2:96:6f:f7:14:04:c9:fd:0c:4a:1f:fe:32:80:89:
f1:fe:69:d9:41:20:93:d6:a9:13:da:3a:eb:45:65:8c:4f:42:
12:5d:d9:9f:96:77:9b:90:fc:98:5d:0a:45:44:47:0a:35:7c:
8a:87:da:3c:f4:1f:bd:5f:33:5a:0f:4f:18:6b:c1:f4:6d:6d:
37:19:6a:cb:43:58:38:c4:f2:6d:44:c8:de:bd:6c:a1:33:be:
04:2c:c4:af:b1:f7:73:b1:5c:b0:87:0b:ae:14:3b:b3:8a:bf:
74:70:c3:8f:1a:d3:33:72:35:df:37:2c:0c:c6:74:f2:ec:d2:
83:a0:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:37 2025 by rpki-client