Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/RgTs9OFgtgc7yEjGY9lMtPIjOzU.roa
File: RgTs9OFgtgc7yEjGY9lMtPIjOzU.roa (raw, json)
Hash identifier: 6IXvOMDDQkaWZfBcmrD/ax9Yvv9JLB97OA1UxXihv54=
Subject key identifier: 46:04:EC:F4:E1:60:B6:07:3B:C8:48:C6:63:D9:4C:B4:F2:23:3B:35
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B54
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RgTs9OFgtgc7yEjGY9lMtPIjOzU.roa
Signing time: Thu 02 May 2024 20:24:06 +0000
ROA not before: Thu 02 May 2024 20:24:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6996 (0x1b54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 20:24:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4604ECF4E160B6073BC848C663D94CB4F2233B35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:4f:75:46:6e:ce:93:f9:27:74:72:c9:c9:
85:c1:11:19:c6:8d:64:cf:2c:73:53:e4:03:b5:ab:
a4:9e:62:a7:f0:7c:d5:d5:27:79:f3:54:96:44:a8:
b5:f9:9c:b8:13:20:41:70:20:7e:2c:c1:3a:6c:fb:
50:ee:1b:47:9e:25:30:7c:3d:cf:0a:96:57:a5:02:
be:36:8f:1b:e1:70:14:e9:0a:b4:d2:b0:80:05:65:
c3:32:83:5a:65:e7:b8:39:70:42:45:15:ac:37:1f:
ba:e7:7d:a3:b3:b1:c4:39:d8:69:cc:4b:04:a1:11:
5c:3e:53:e2:ac:18:db:c7:64:4d:15:1a:10:e0:a4:
0e:86:0c:26:32:23:e7:0e:cb:58:20:f4:00:06:36:
4a:66:d6:7a:78:8c:39:7c:33:6e:a4:64:cd:56:6c:
4c:17:fb:98:5d:44:01:66:0a:c7:32:27:80:2c:d3:
d0:39:70:eb:b6:d1:0e:61:2b:40:d9:6d:c4:9f:a6:
d1:2c:60:6e:98:2d:f2:a5:ee:fc:2e:8b:c5:e5:50:
11:82:d2:89:cc:64:76:6d:95:26:aa:e5:f8:77:73:
fa:be:25:4f:ae:31:74:f4:c8:a7:55:48:5e:05:fa:
87:f4:93:f7:3b:4a:6c:3e:18:3b:49:7f:d9:7b:3e:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:04:EC:F4:E1:60:B6:07:3B:C8:48:C6:63:D9:4C:B4:F2:23:3B:35
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RgTs9OFgtgc7yEjGY9lMtPIjOzU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:5e:e6:4f:4e:20:42:c9:64:ea:10:41:c1:58:48:d8:0f:48:
62:3e:c0:2f:ec:f4:71:ec:51:a8:43:a5:45:bc:32:35:9a:c0:
2f:87:8c:61:31:6a:15:8e:d8:91:dc:58:9a:70:75:ad:74:28:
11:83:05:a8:2b:9b:a7:8e:4f:62:86:1a:3e:50:d9:7c:8a:7b:
56:a2:76:7e:69:09:85:ca:b1:b6:7b:c6:f6:2a:e7:fa:73:66:
78:01:23:83:7f:10:30:ec:e4:7b:3c:70:7f:87:43:a0:a6:2b:
4e:2d:e0:55:e4:eb:ea:af:f6:cd:6e:97:ad:8f:8b:0b:24:d4:
32:97:cb:46:3b:47:6a:40:df:8c:7d:8b:8e:c3:9e:a6:08:ca:
c9:88:d2:2c:91:20:f0:b9:2d:2f:29:c3:1f:15:f5:4d:65:01:
ae:0f:80:d5:55:8c:66:9f:97:ad:69:b2:f6:2e:c9:e1:ec:fb:
40:7e:13:b0:55:ae:47:e3:cb:32:e7:98:23:68:d2:09:6f:da:
c2:ab:df:57:89:a9:6d:dc:21:a5:51:03:f9:7c:a6:45:f7:5a:
2e:8b:86:09:1b:54:b6:7d:51:30:7d:9a:c0:32:40:cc:2b:8d:
70:fc:fe:f5:c0:e9:cc:80:b1:bd:62:3d:05:e9:58:89:d0:07:
66:84:9a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:45 2025 by rpki-client