Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/MN8P_Dj8WXYUX8YYJvAqe7Bop_o.roa
File: MN8P_Dj8WXYUX8YYJvAqe7Bop_o.roa (raw, json)
Hash identifier: YLmDmX70AUnGzG2TOH4I/u2Cc17FJQtfRyO3K+Z+SsI=
Subject key identifier: 30:DF:0F:FC:38:FC:59:76:14:5F:C6:18:26:F0:2A:7B:B0:68:A7:FA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B16
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/MN8P_Dj8WXYUX8YYJvAqe7Bop_o.roa
Signing time: Thu 02 May 2024 04:54:49 +0000
ROA not before: Thu 02 May 2024 04:54:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6934 (0x1b16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 04:54:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=30DF0FFC38FC5976145FC61826F02A7BB068A7FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:26:95:d2:e2:04:b6:9d:71:dc:53:b3:c8:
fe:e7:0b:68:24:8c:83:b1:75:6b:81:b4:81:fa:30:
2d:b6:ec:54:e7:5d:fa:b9:28:4f:3b:df:47:6a:c4:
5f:31:75:e1:01:75:96:1c:1f:a3:4f:4d:d0:65:a5:
6b:cf:0d:97:4e:65:2c:41:17:33:0a:5a:79:d2:08:
e6:6f:38:8a:65:b1:77:22:82:7a:63:af:46:8f:ca:
58:31:a7:02:2e:4d:82:16:1d:91:b2:b0:49:cb:a7:
bf:68:60:3d:d9:c7:d4:eb:fc:cc:4f:d2:60:97:1a:
40:00:b1:ef:7e:65:d6:a7:44:e1:a0:36:34:6d:13:
84:21:87:16:6f:6e:a3:94:a7:f9:d4:42:7f:7e:70:
50:cd:24:50:83:ee:6f:55:d5:da:c9:01:65:a5:d2:
6c:7c:be:84:d4:ac:52:f8:07:16:24:7e:b2:64:1d:
9d:6c:25:01:30:81:f2:1a:36:19:13:01:7a:7d:90:
2d:73:e2:01:11:bc:04:29:be:d9:af:9b:fa:22:e7:
40:7c:cf:f1:4e:09:e1:34:8b:fd:76:d7:1a:df:ca:
c6:10:a5:7d:ec:ed:2b:10:4c:2a:55:f6:17:d3:ff:
28:81:b9:c5:8f:84:46:7e:e0:0c:53:76:36:a0:a9:
47:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DF:0F:FC:38:FC:59:76:14:5F:C6:18:26:F0:2A:7B:B0:68:A7:FA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/MN8P_Dj8WXYUX8YYJvAqe7Bop_o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:0d:f0:5f:0c:a3:02:c3:05:df:43:07:43:46:e8:29:83:82:
d0:ac:fa:8e:80:be:89:33:0b:0a:e9:b8:5e:bf:24:4a:88:d8:
ed:6f:95:05:bb:a9:45:c1:1c:69:0e:7c:e7:76:49:5f:70:fe:
d0:05:99:de:05:06:b3:b0:f3:fa:0a:70:5e:ca:5b:c0:fc:94:
e8:2e:ae:e3:09:8b:29:00:0a:9b:2a:7b:5d:40:4b:03:33:56:
65:e4:52:fd:df:4d:9f:f2:36:17:66:ca:57:c7:ca:01:c3:b1:
c3:f3:5f:f2:fb:6d:de:7e:13:34:cc:f4:a5:b2:d0:f5:3a:fa:
b0:e7:bf:a5:bd:8b:20:f3:7d:06:20:12:39:c2:89:0c:56:05:
d0:1e:00:f6:87:a4:14:0f:bb:85:d3:db:1d:6b:d1:fe:d9:01:
80:7c:28:84:43:7a:c0:9a:d3:1c:31:20:60:c0:88:79:42:1a:
0b:2f:8c:3d:e8:c9:22:01:65:4f:1d:b5:1e:cd:c0:6e:ce:bd:
15:5d:2e:98:c0:da:64:47:a7:0b:69:7f:88:f3:9e:8a:51:f9:
74:59:fe:1e:03:f5:49:76:d1:ef:c8:dc:72:17:db:fb:77:f9:
6a:61:31:39:24:3c:26:bc:a8:40:27:e6:91:5f:98:70:65:b6:
7c:7b:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:53 2025 by rpki-client