Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Q5yXPoBhaZ5GjGEZYZW5pnaYJCo.roa
File: Q5yXPoBhaZ5GjGEZYZW5pnaYJCo.roa (raw, json)
Hash identifier: sCp6ms7Zbmse+ucwmZQ/y3G/1KD97DngIMpl2uKcV/I=
Subject key identifier: 43:9C:97:3E:80:61:69:9E:46:8C:61:19:61:95:B9:A6:76:98:24:2A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1034
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Q5yXPoBhaZ5GjGEZYZW5pnaYJCo.roa
Signing time: Wed 03 Apr 2024 04:22:40 +0000
ROA not before: Wed 03 Apr 2024 04:22:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4148 (0x1034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 04:22:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=439C973E8061699E468C61196195B9A67698242A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:2f:d0:b9:3f:1e:90:c5:96:d8:2f:6f:f5:
c2:ec:0d:0a:34:32:10:55:4c:6d:76:cc:65:70:d5:
50:57:ba:8d:0d:3f:b3:27:86:28:c2:03:81:8f:0c:
c0:eb:50:d8:04:5b:2d:cd:76:89:3e:fe:9a:af:a6:
5f:3c:45:bb:a5:dc:21:f2:df:5f:a5:11:d7:be:68:
db:46:08:ab:e0:aa:33:af:38:9b:c2:3f:b8:69:5b:
80:65:a5:5a:aa:c1:4c:e9:3a:48:10:9e:12:a2:12:
3d:01:a4:cd:73:8b:1a:c1:fb:33:0e:bd:6c:28:54:
5a:84:f3:04:31:d2:d7:89:2d:16:d8:4e:37:b3:48:
0f:ad:52:1f:d0:8c:ca:07:d6:bc:89:37:c3:df:41:
b6:1e:44:83:cd:6d:f3:19:65:6c:0d:ca:d8:12:11:
44:e3:d1:1f:1e:c0:89:c0:29:d4:7c:87:e2:8c:34:
19:fd:6e:29:8e:c6:a8:94:32:b2:7d:f5:d5:fb:ad:
40:92:ce:38:cb:20:8b:28:ac:ba:f1:7f:8e:98:14:
02:1f:10:48:a1:83:86:f7:9f:54:45:a7:b6:7c:14:
f4:33:65:96:bd:22:2a:df:e6:9d:33:72:d4:df:1b:
ef:5c:92:c5:dd:89:1e:46:92:be:6a:5c:f4:46:c7:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9C:97:3E:80:61:69:9E:46:8C:61:19:61:95:B9:A6:76:98:24:2A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Q5yXPoBhaZ5GjGEZYZW5pnaYJCo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:68:74:a0:ef:81:38:8e:82:60:2f:fc:63:e4:5e:9b:0d:cc:
0d:3e:f0:9c:be:2c:cd:e8:ab:82:06:15:ad:46:6a:be:b9:61:
88:c1:52:4e:1d:d4:16:1d:61:09:32:51:c9:3c:33:4e:dc:9d:
e0:88:35:c9:84:a2:00:3b:3e:c3:02:50:50:4f:71:02:e9:d3:
81:37:01:97:27:96:62:36:cf:a4:29:bd:c6:10:12:fe:19:23:
33:7b:f3:73:f8:fd:6d:04:79:d5:f2:74:e9:dc:a1:48:dd:70:
8a:c2:04:14:45:fd:69:d6:92:c9:bc:c0:7b:9d:c2:3e:8a:a5:
3f:4b:e9:a8:cd:4e:05:6a:3f:38:29:0a:e3:52:21:c6:3f:b6:
ee:a3:9a:82:ec:96:5e:f9:bb:3f:cc:86:04:91:1b:87:27:dd:
f0:76:30:42:cb:63:a1:dc:96:9f:e9:2b:de:f4:18:e7:1b:5f:
50:d1:f2:da:e3:a0:3c:68:b6:fa:27:df:3c:47:38:13:c1:b9:
33:55:71:f3:8c:27:0a:79:99:78:8e:cf:ca:f3:2e:eb:81:5d:
9c:86:0f:0e:cf:e7:cd:78:2f:8e:e3:a3:37:91:58:cc:1a:be:
93:fa:a8:b7:66:11:5b:27:00:cf:6b:47:49:ac:28:40:bd:62:
19:23:06:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:26 2025 by rpki-client