Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/UByLOuRNMg8mcEmCruFJyjj4M5o.roa
File: UByLOuRNMg8mcEmCruFJyjj4M5o.roa (raw, json)
Hash identifier: 2M75Q9uXCF+cX/6Gpv0IB71nJNuxYoOtwrG4kQT4aBI=
Subject key identifier: 50:1C:8B:3A:E4:4D:32:0F:26:70:49:82:AE:E1:49:CA:38:F8:33:9A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 18C2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/UByLOuRNMg8mcEmCruFJyjj4M5o.roa
Signing time: Thu 25 Apr 2024 23:53:44 +0000
ROA not before: Thu 25 Apr 2024 23:53:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6338 (0x18c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 23:53:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=501C8B3AE44D320F26704982AEE149CA38F8339A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:bf:a3:fc:e1:56:39:1d:18:81:86:15:da:
33:9a:a2:68:0a:36:77:7e:eb:c1:26:fd:ef:7d:76:
ff:d2:0d:5b:5d:68:aa:9e:50:a9:85:d9:20:63:f1:
87:55:0f:dc:79:e6:d4:4c:e8:2a:1c:9e:32:3a:eb:
5d:58:50:71:c8:05:0f:ad:fd:02:b4:dc:ff:4c:df:
b8:92:68:5c:80:03:b0:ad:ca:04:10:ca:09:0d:6a:
96:f8:56:93:d4:07:3b:e5:81:18:80:b4:8b:c0:ea:
93:43:49:15:d8:b6:61:61:50:fc:5a:a9:a7:58:2e:
db:4a:e9:61:f8:cc:cd:3b:42:76:48:be:ad:b9:db:
ea:3f:0d:49:f0:ec:ea:34:d5:d1:b5:e8:a2:a0:a5:
eb:e6:a2:95:ac:de:e5:50:be:99:47:7b:a1:f3:25:
d5:3b:a5:9c:7e:b4:cc:b3:43:c9:e4:13:9f:af:b8:
d7:df:0f:3e:0d:cc:6b:63:cf:fb:1a:74:bb:a3:d1:
4c:6e:9c:ee:9e:f5:15:71:3f:41:73:32:6e:0f:2b:
3e:c7:84:e7:be:8a:11:0d:02:1a:ee:dd:27:e4:9f:
fc:bf:ef:c8:b3:3f:34:61:cc:77:e1:0e:df:bc:b4:
fd:00:08:5e:53:72:68:0a:1a:70:63:45:01:cf:a1:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1C:8B:3A:E4:4D:32:0F:26:70:49:82:AE:E1:49:CA:38:F8:33:9A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/UByLOuRNMg8mcEmCruFJyjj4M5o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:44:5a:50:af:2e:f8:bf:04:7a:90:cb:6c:4f:98:0f:c5:00:
cf:88:bb:f9:fb:ca:93:3b:7a:c2:d9:20:25:93:7d:b8:b3:90:
15:13:eb:07:7b:4c:69:94:a8:a3:be:ca:11:1b:33:1a:a6:22:
ae:d2:aa:dd:4c:82:26:bd:6e:1e:4d:78:92:31:ca:16:86:26:
58:91:7d:11:8b:40:98:c6:4a:fd:bb:59:99:31:a5:69:f0:9d:
d4:33:97:d9:1a:79:4a:2a:03:3d:60:a6:ec:62:26:e4:55:b7:
f3:af:a3:98:30:b2:62:53:04:2a:b1:fc:66:05:ca:8a:a0:75:
ec:78:00:fa:50:08:57:c3:0a:34:78:03:0d:92:38:49:06:00:
bf:a1:b0:23:36:8f:42:ea:da:e5:63:92:db:02:32:3c:0b:e7:
33:3b:a7:a9:49:53:d3:9c:65:d1:fb:eb:77:e5:5f:33:3a:76:
02:39:ad:40:4e:5e:33:51:ba:58:53:87:58:fe:8e:c8:fd:9b:
67:9f:c8:d7:c1:00:88:db:6b:a1:b2:11:72:9d:85:0e:5e:44:
4a:0e:9f:83:4d:6c:4b:97:56:f8:00:37:1a:f6:cf:d2:4c:95:
92:7a:69:c0:99:6a:c8:87:89:5c:46:5c:82:a2:bf:a4:2a:2f:
be:b4:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:13 2025 by rpki-client