Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/UfnA0PAWSiYz6m5L9X4fNuG2aRQ.roa
File: UfnA0PAWSiYz6m5L9X4fNuG2aRQ.roa (raw, json)
Hash identifier: U3yq7apvmFyr1iA4pVdgF+8UxOFWFTsxVLIH9cXeQQw=
Subject key identifier: 51:F9:C0:D0:F0:16:4A:26:33:EA:6E:4B:F5:7E:1F:36:E1:B6:69:14
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1622
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/UfnA0PAWSiYz6m5L9X4fNuG2aRQ.roa
Signing time: Thu 18 Apr 2024 23:53:27 +0000
ROA not before: Thu 18 Apr 2024 23:53:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5666 (0x1622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 23:53:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=51F9C0D0F0164A2633EA6E4BF57E1F36E1B66914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:88:e8:4d:af:d9:60:bc:49:54:59:76:3c:
da:e5:5c:34:a8:ba:27:3a:f2:7e:60:7c:7f:ca:bb:
42:14:f2:cb:5f:56:d6:51:b5:b2:e5:80:59:e8:1b:
91:a3:ae:60:4d:9f:3f:c0:bd:62:c9:f4:90:07:13:
79:f0:e4:d9:32:06:54:75:27:46:39:aa:11:a1:92:
1a:eb:77:f0:9e:d9:0f:40:33:94:d1:d7:bf:04:23:
88:8e:44:39:ce:f8:c9:88:ff:21:62:b8:b4:78:5c:
e3:ba:40:6d:ff:db:4a:28:9a:a4:46:ff:ed:f7:92:
df:9b:2f:56:30:25:0c:9e:d0:cc:d6:d0:2d:fe:a3:
fc:2f:84:71:f6:49:21:12:ed:61:f4:19:b5:81:97:
6e:9a:7a:a5:2c:84:43:57:a4:76:eb:56:99:90:fe:
a0:41:81:11:fa:1c:d4:aa:8b:c8:09:6d:38:ce:2f:
99:6f:22:9f:2a:70:f8:e0:36:87:cb:f0:3a:2e:cc:
08:9b:cb:c7:39:00:a2:2e:3f:d2:36:0a:76:24:8b:
1b:cb:bf:3a:e1:aa:c8:aa:95:20:45:6f:28:43:85:
28:c3:41:b3:a9:d7:54:5f:63:3f:c6:15:e6:eb:8f:
be:11:39:28:80:54:f6:4e:05:77:01:a2:04:63:c7:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F9:C0:D0:F0:16:4A:26:33:EA:6E:4B:F5:7E:1F:36:E1:B6:69:14
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/UfnA0PAWSiYz6m5L9X4fNuG2aRQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:c0:6f:cb:5a:10:d7:04:ec:c0:f9:05:32:4d:d3:23:f8:c7:
1f:b9:51:4a:97:7c:33:9e:b5:1c:b0:72:3b:1d:34:22:5c:0b:
73:5b:43:67:ac:2d:89:c6:97:6f:8a:9c:b1:a6:36:83:a5:18:
de:bb:5e:4f:26:25:84:a4:ef:50:13:c6:db:60:d0:55:04:2a:
aa:ff:83:d5:b8:bc:34:85:34:fa:c4:56:e5:2a:58:0a:5b:a4:
b2:07:db:3a:ab:6e:e7:8c:6d:11:69:6a:c2:f2:76:73:ea:76:
1e:1f:1c:14:d4:df:27:da:54:6a:77:63:79:f6:43:aa:4e:07:
19:4e:b9:ec:ac:39:ad:1c:4f:e0:80:e7:90:c3:9a:5c:76:61:
33:d6:07:7f:be:b9:6b:04:84:3c:49:fb:48:ce:97:4c:13:c3:
69:84:e6:32:ea:6e:50:ec:0e:9a:24:ab:67:2c:80:74:78:9d:
7d:db:a9:6d:6f:19:36:c7:6e:af:f3:29:5a:52:3e:e0:dd:37:
53:2f:be:79:7f:68:a2:b0:fa:92:40:f9:b0:8a:c9:29:04:cf:
4d:ee:a9:31:9a:f8:eb:b7:46:e8:e1:e8:da:86:3c:23:d1:2f:
98:b4:4d:ad:b9:b3:43:a9:29:c2:20:08:10:57:9a:f9:95:50:
5a:6c:3a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:56 2025 by rpki-client