Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/VInGEaUIjcHmEQlQSwQuWuKli0g.roa
File: VInGEaUIjcHmEQlQSwQuWuKli0g.roa (raw, json)
Hash identifier: o5sAvyBxsZ+oGtUKZaE786EXDESvTX5TUQUUSvOXjKc=
Subject key identifier: 54:89:C6:11:A5:08:8D:C1:E6:11:09:50:4B:04:2E:5A:E2:A5:8B:48
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D58
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/VInGEaUIjcHmEQlQSwQuWuKli0g.roa
Signing time: Wed 08 May 2024 05:24:21 +0000
ROA not before: Wed 08 May 2024 05:24:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7512 (0x1d58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 8 05:24:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5489C611A5088DC1E61109504B042E5AE2A58B48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:07:cb:f0:20:ba:90:a6:f9:78:1a:3a:f9:59:
38:d5:9d:ec:ae:ec:0a:db:1c:b2:e7:4a:32:01:de:
71:cd:cf:6e:94:38:fc:83:ae:6d:96:e2:c9:d7:fd:
f5:39:fc:b2:37:32:5c:0f:ee:ec:80:27:41:e4:33:
0a:c8:5d:f6:90:fd:fe:cc:28:d0:f2:68:8d:84:ae:
43:b4:c1:9b:1d:57:ed:38:03:c5:90:7d:d9:32:c4:
c4:15:bb:16:52:20:56:f8:2c:a7:d7:b9:b1:13:a0:
de:fb:a9:17:44:b9:02:7f:a2:11:a4:0f:76:10:07:
01:05:d7:74:4f:62:31:62:49:54:0a:d5:6a:2e:5b:
b8:ae:da:01:12:02:5c:36:f2:76:2e:05:25:72:a1:
bb:aa:00:a2:ad:5d:91:b7:75:2f:f7:dc:01:0a:fc:
61:c5:c9:30:b9:9b:9d:10:7d:cf:78:4f:be:8b:a3:
0e:f0:df:be:27:d2:64:98:30:43:1d:a5:6d:98:5e:
7d:5d:a1:f7:f5:fc:2f:16:46:b6:92:b7:24:8e:3a:
da:dc:23:81:df:18:49:7e:4f:fc:fe:79:e5:1d:94:
d1:12:60:a3:cb:84:ea:86:4d:42:a4:ae:c2:7b:cb:
a9:63:55:70:31:f0:00:fa:04:cc:68:67:ad:e4:7e:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:89:C6:11:A5:08:8D:C1:E6:11:09:50:4B:04:2E:5A:E2:A5:8B:48
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/VInGEaUIjcHmEQlQSwQuWuKli0g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:bb:71:c5:f2:f7:d9:5a:3b:97:00:3b:70:41:6c:97:0e:8c:
c7:ee:01:c3:8a:31:bb:c5:f1:56:2c:3e:9e:eb:78:6a:6d:d6:
44:b5:1d:c5:e3:8f:4e:ce:22:d5:47:d5:06:1d:90:cd:2e:ca:
77:b2:fd:6d:a4:5f:25:4a:58:50:40:6d:58:33:b1:d8:5b:89:
f7:db:cc:15:3d:47:54:3a:49:53:1b:53:a5:9e:0a:f3:f6:c7:
d9:58:a1:ab:d9:f7:2f:24:4f:28:29:a1:11:95:c0:75:76:fe:
60:96:71:b5:d1:35:5a:28:d7:7a:37:a8:e3:dd:a7:bc:3a:9e:
56:f4:df:c8:98:b6:a6:77:78:93:4a:2d:f3:6a:e9:8b:b5:ad:
4a:49:5a:7a:2c:0e:33:05:40:26:2f:bc:ef:36:58:5f:a7:56:
82:ed:18:ce:92:65:1e:98:cc:cc:ef:5c:4f:f7:31:08:ce:24:
95:9f:8d:21:ad:54:4f:e1:e9:bd:85:38:f6:0b:9a:4d:78:4f:
bf:71:eb:b7:ed:03:99:ab:d9:59:77:1d:9a:19:04:1e:e5:cc:
ae:af:ce:c3:9e:ac:d2:d0:46:0e:79:a2:94:b4:27:1e:03:bf:
1c:65:a9:bd:98:c1:e9:41:bb:f1:66:98:61:ad:1a:8f:f2:11:
9b:78:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:53 2025 by rpki-client