Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/IqHFCsJw5Dtx9nAGNCV-7f8Adrw.roa
File: IqHFCsJw5Dtx9nAGNCV-7f8Adrw.roa (raw, json)
Hash identifier: ZwutBgw68xE9rQ2wdxlWo8Es3LCNLyH1yHobfOeG764=
Subject key identifier: 22:A1:C5:0A:C2:70:E4:3B:71:F6:70:06:34:25:7E:ED:FF:00:76:BC
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1068
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IqHFCsJw5Dtx9nAGNCV-7f8Adrw.roa
Signing time: Wed 03 Apr 2024 17:22:42 +0000
ROA not before: Wed 03 Apr 2024 17:22:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4200 (0x1068)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 17:22:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=22A1C50AC270E43B71F6700634257EEDFF0076BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:6c:8c:4d:f3:1c:4f:9e:18:14:3a:6b:9c:
03:94:c4:7f:c9:70:9b:0b:37:66:6c:54:e8:8c:53:
e4:9d:eb:78:3e:5c:16:1b:94:40:32:92:4a:da:d9:
37:03:5a:b6:f9:18:1b:da:19:41:ed:58:59:5e:40:
12:76:e7:c9:b5:4a:b0:11:a3:99:7f:df:ab:1e:a8:
d2:7d:1d:42:5b:6a:b5:11:57:ec:51:c3:70:cb:39:
db:a6:ab:51:d6:32:2e:2c:11:8a:fe:70:ba:43:73:
71:7a:e2:bd:a9:79:68:3b:2f:4d:1f:6f:93:33:e7:
81:77:83:4e:05:e3:ba:24:dc:08:6a:57:6a:fa:c6:
50:98:4e:9e:6d:e5:13:4b:6f:95:bb:ae:d7:fc:55:
14:f8:c3:e9:62:80:c7:b2:79:49:a2:78:0b:4f:0a:
68:02:03:9a:4b:1c:c8:cc:12:dd:20:9c:d6:9e:5a:
65:6b:96:08:60:65:23:33:d6:ba:b8:1c:26:c0:d9:
16:2b:ea:29:9c:26:8f:63:00:35:84:a2:0c:1e:40:
c4:1c:bb:01:36:41:b4:23:dc:36:37:c7:76:69:12:
56:32:92:ad:57:35:1d:48:0d:c6:47:48:f6:91:8c:
79:34:4d:a5:e3:5f:36:9d:f0:23:da:86:2e:73:75:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A1:C5:0A:C2:70:E4:3B:71:F6:70:06:34:25:7E:ED:FF:00:76:BC
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IqHFCsJw5Dtx9nAGNCV-7f8Adrw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:43:dd:c2:a4:a2:6e:2b:c1:d3:3a:e7:db:7e:3d:b1:2e:af:
08:09:5d:da:db:8b:40:0c:b9:02:02:a8:73:f1:75:ed:dd:3f:
4a:d8:20:e8:51:17:8d:9d:52:9c:7a:63:62:32:50:9a:7d:ac:
aa:ad:cd:8c:c4:83:96:71:ef:53:23:5d:76:8e:9c:b3:6d:ba:
68:2c:5d:2c:15:e0:e3:f4:73:34:39:0a:5e:16:7b:9b:73:a2:
c3:88:49:21:dc:9e:87:08:e0:98:54:3e:0f:8e:4c:53:5d:26:
66:41:3a:80:02:eb:27:4d:ef:23:16:5a:41:84:e7:49:fd:ee:
4c:6a:2d:02:e6:ed:ee:16:dc:ac:31:d3:e4:d0:41:3c:be:c6:
08:4c:55:cf:d1:f4:bc:99:6a:60:0a:99:b5:e5:4d:78:e0:96:
cb:28:a8:7f:9b:c1:81:23:24:28:df:5a:43:81:fc:de:97:ed:
dc:2a:f6:ee:9f:74:6a:55:c9:59:0d:d5:9a:d9:ad:e0:f5:1f:
75:c1:c5:88:04:17:f2:cf:1e:af:8e:49:81:c8:f6:63:99:96:
43:4d:b2:97:2b:dc:27:f8:26:97:ee:99:39:38:e7:de:e7:5b:
01:82:83:6a:7b:d7:23:1f:c5:4f:70:eb:37:d5:dc:c3:24:ca:
57:7f:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:59 2025 by rpki-client