Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/V-k_d5CAjwbyRZnh1HinUIdexak.roa
File: V-k_d5CAjwbyRZnh1HinUIdexak.roa (raw, json)
Hash identifier: XRDhL4tLJHthSmMpvk80rvYuKLEGvP/NH+UcaU4Ip7A=
Subject key identifier: 57:E9:3F:77:90:80:8F:06:F2:45:99:E1:D4:78:A7:50:87:5E:C5:A9
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15AE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/V-k_d5CAjwbyRZnh1HinUIdexak.roa
Signing time: Wed 17 Apr 2024 18:53:24 +0000
ROA not before: Wed 17 Apr 2024 18:53:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5550 (0x15ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 18:53:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=57E93F7790808F06F24599E1D478A750875EC5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:35:23:89:30:03:51:9c:ee:d5:5a:df:88:
08:14:d6:5d:9c:9b:62:5f:49:17:28:a0:e4:ce:79:
54:8a:d2:29:23:20:14:21:c5:b2:f4:82:f4:8d:d7:
06:90:46:f6:72:e1:32:e7:a5:81:92:51:0f:8a:a2:
07:c6:3f:4b:dd:96:29:9b:d5:cb:b9:a3:a6:54:94:
8a:cb:fb:75:cf:4f:a8:a1:0f:1b:6e:a0:db:1c:e7:
c4:fa:ea:a7:08:2e:5e:d0:1f:e7:f9:91:a1:87:5c:
a8:a0:6e:45:63:09:33:1c:d3:6c:de:e0:78:a9:a4:
9c:ba:5d:9a:e1:b1:f0:f2:20:ff:5b:4d:39:3a:ed:
42:a1:51:44:bb:a6:7d:03:86:cc:58:69:12:20:8f:
96:87:89:89:f2:00:56:5c:92:f8:7d:47:55:6d:ab:
ac:0b:68:e9:f7:37:eb:3f:47:f7:d3:bc:89:1d:8c:
22:4a:1e:5e:6f:bc:3f:a1:24:5f:b4:d6:2f:e4:1f:
1a:e6:bf:90:b8:81:31:0c:6f:27:cb:64:3e:65:6a:
5c:72:1c:82:2b:28:f8:58:1a:d0:64:f7:f0:81:55:
c6:4f:87:17:06:94:41:2a:50:83:d7:57:9f:f8:05:
ae:14:8e:67:2a:62:c0:fe:d4:10:49:33:06:e0:7b:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E9:3F:77:90:80:8F:06:F2:45:99:E1:D4:78:A7:50:87:5E:C5:A9
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/V-k_d5CAjwbyRZnh1HinUIdexak.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:c7:ef:99:a5:d7:83:5b:00:6d:45:de:93:2c:9d:31:59:7d:
c3:33:55:cd:a1:5c:4c:8c:73:19:49:a8:76:b2:a1:00:d5:01:
4d:41:39:7d:fd:f6:37:08:eb:31:72:7f:64:c3:c8:bd:40:ac:
3d:5c:e0:88:05:04:12:54:0d:d7:e8:eb:81:5c:be:46:a5:84:
ba:dd:e4:cd:1f:5f:5a:bf:47:6f:87:fe:9b:f4:84:85:ae:7b:
f1:3e:14:b7:b2:5a:5f:dd:42:1e:42:4d:8b:35:28:47:ae:df:
b5:3d:a7:0d:80:b7:df:4c:c8:37:e8:73:96:d8:52:c2:af:a2:
ce:82:54:c4:f6:7e:77:37:37:93:4d:92:2c:c6:87:51:c6:04:
a0:95:6c:0f:07:88:94:2c:30:a0:da:e3:67:87:fe:cf:fc:39:
78:85:fa:74:67:ea:b9:86:d5:cb:b6:a4:bd:08:e2:3c:36:60:
86:1b:ba:8a:06:75:0f:83:c6:f8:4b:5f:40:65:21:aa:0f:5e:
b5:10:a0:26:46:50:a2:89:9e:b9:c8:df:23:07:14:64:da:8e:
70:0d:40:c9:54:b7:94:c2:f0:34:db:a9:06:e1:54:dc:7a:3b:
e9:ae:94:a2:08:20:4d:ea:7a:58:ac:95:af:29:f7:4c:80:df:
2d:52:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:54 2025 by rpki-client