Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/VtQjP_QuTgLc5qLdm_Tm_XHcB5Y.roa
File: VtQjP_QuTgLc5qLdm_Tm_XHcB5Y.roa (raw, json)
Hash identifier: aFZvAYdG5Yu9y2QSCN6y+Me6ZSoFKzV7YYa+o9RZ69I=
Subject key identifier: 56:D4:23:3F:F4:2E:4E:02:DC:E6:A2:DD:9B:F4:E6:FD:71:DC:07:96
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F16
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/VtQjP_QuTgLc5qLdm_Tm_XHcB5Y.roa
Signing time: Sun 31 Mar 2024 04:52:33 +0000
ROA not before: Sun 31 Mar 2024 04:52:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3862 (0xf16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 04:52:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=56D4233FF42E4E02DCE6A2DD9BF4E6FD71DC0796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e1:81:c8:85:5b:12:60:50:f0:16:5b:e9:43:
f4:31:2a:41:10:05:86:8c:17:e5:c2:18:de:10:c3:
98:a4:b1:9d:4b:a6:a9:f0:ee:4d:5d:49:2a:c2:f7:
7f:34:38:88:14:da:65:18:31:33:3d:40:3a:de:6b:
df:dc:9b:af:df:ae:4c:ee:57:b6:a0:f0:45:9f:dd:
a5:4a:be:6b:6c:52:ce:5e:7e:bf:66:2f:79:fe:0e:
0c:01:3d:bf:12:3f:8e:c9:ce:ad:28:d7:74:7e:0d:
fa:99:e6:f9:88:e5:a8:f1:c8:0a:d7:51:20:6f:34:
81:a6:08:31:b7:9f:85:4e:b2:44:aa:4c:21:e6:c3:
a3:66:6b:89:78:8b:11:9b:13:aa:26:49:1e:21:7e:
10:8b:2f:df:c6:43:fc:83:26:04:71:19:c6:c5:78:
ce:97:5b:8c:22:a7:2d:ba:f0:4b:fa:2d:ef:96:1c:
03:7f:8e:bd:66:67:78:ff:e8:04:3a:5b:cb:f7:56:
b0:9c:b3:aa:64:44:38:dc:69:75:9b:53:58:62:9a:
5b:81:a7:ae:30:ee:8c:a0:de:8c:25:83:96:95:39:
13:3b:c1:32:55:f5:32:74:d0:2a:30:2d:20:10:8e:
e7:0b:16:f8:17:05:7f:bb:60:ed:dc:f4:ad:66:76:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D4:23:3F:F4:2E:4E:02:DC:E6:A2:DD:9B:F4:E6:FD:71:DC:07:96
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/VtQjP_QuTgLc5qLdm_Tm_XHcB5Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:f5:9c:87:da:cc:cd:7a:5a:f6:b7:33:92:ed:3f:69:39:85:
fe:0d:0a:a4:25:94:b3:2f:6a:ef:55:be:18:15:f8:88:8d:2d:
92:21:6c:4c:b7:00:9e:c2:bb:23:65:2e:a7:5d:7d:17:c7:8e:
15:8b:0c:ce:06:4d:8f:95:73:ad:52:35:12:2b:1e:0b:93:28:
f1:69:c7:d2:ce:ec:82:f6:ec:30:cb:0c:51:3d:41:f3:28:37:
e0:f6:5d:ce:c5:58:b5:18:d6:3f:60:1a:e6:62:ce:e7:18:e9:
b9:06:ab:7c:97:ca:b5:49:40:a6:ad:ae:3e:1d:32:6c:64:1d:
99:3f:f6:52:29:1f:a6:9e:9d:dd:44:bd:99:30:35:16:0c:32:
1d:41:7b:46:e9:64:9f:6b:0d:71:37:60:78:5e:0c:3e:69:c0:
06:df:45:a0:b1:e6:96:6e:8e:b8:df:b1:8e:bb:52:ad:7e:f4:
85:4b:c5:5d:c7:c3:43:89:94:9a:8c:9b:75:51:2b:7f:ef:36:
5d:87:33:20:25:54:79:c0:42:82:b2:9a:6b:2d:ac:03:ea:11:
d6:e8:0e:ce:a7:71:9b:f0:84:8f:62:0c:48:bc:c4:d6:6a:31:
33:87:77:ee:4c:33:b8:34:16:22:96:ed:fd:9b:a8:96:c2:c4:
cb:23:be:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:47 2025 by rpki-client