Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/WPQznnKQfhrE3mg0glJES7NVYeM.roa
File: WPQznnKQfhrE3mg0glJES7NVYeM.roa (raw, json)
Hash identifier: JpBZ24UdirZoPQGcgaYNisanrQtgFSfvEBQZAWpCplQ=
Subject key identifier: 58:F4:33:9E:72:90:7E:1A:C4:DE:68:34:82:52:44:4B:B3:55:61:E3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A48
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WPQznnKQfhrE3mg0glJES7NVYeM.roa
Signing time: Tue 30 Apr 2024 01:23:56 +0000
ROA not before: Tue 30 Apr 2024 01:23:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6728 (0x1a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 30 01:23:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=58F4339E72907E1AC4DE68348252444BB35561E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:04:25:84:31:7b:27:9e:90:77:5a:2b:8f:
77:e2:80:85:7a:30:94:99:95:15:a0:60:6c:65:8c:
69:3b:57:13:7e:26:f8:83:88:65:24:3d:be:c1:c5:
4d:c6:fe:4c:f4:08:34:ef:58:e2:61:31:ca:f6:14:
30:fe:a6:ad:66:eb:d4:04:bf:89:c3:ca:8c:44:40:
cb:ca:18:b8:a4:41:2d:04:bf:c7:37:a5:e2:eb:a5:
07:e0:f7:a4:f3:d4:09:ee:21:a4:5c:b8:0d:b2:63:
d7:43:e0:40:49:b2:9e:ea:4b:95:5f:f6:07:b9:9b:
fe:97:13:b4:d0:c8:b7:b4:0e:a2:d3:2d:ff:c5:ce:
2a:e2:de:54:55:74:a9:72:e8:1a:69:f1:a6:9a:ae:
7a:b9:88:05:82:64:09:6c:7c:f8:60:47:3b:9b:d3:
9b:0b:89:0d:a1:4c:eb:b3:73:82:1f:8f:c7:db:ba:
df:ad:1f:2a:f4:22:a4:56:8f:81:8a:67:04:37:17:
ac:1f:d4:8e:47:77:55:87:cd:ea:f8:c4:f0:40:b4:
8c:0c:ed:f5:55:29:16:26:7b:6d:d8:17:85:59:e0:
73:58:89:a4:c9:42:3d:76:60:b4:fe:38:a6:8d:d8:
1a:70:58:9a:01:e8:6d:c2:e8:6c:c6:20:9d:b8:db:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F4:33:9E:72:90:7E:1A:C4:DE:68:34:82:52:44:4B:B3:55:61:E3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WPQznnKQfhrE3mg0glJES7NVYeM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:07:5b:50:84:4a:44:63:09:a9:2a:6a:7c:c5:f4:3f:66:b3:
ab:8d:cb:44:d1:2d:33:ae:15:cc:79:d0:5a:7c:5c:e3:4d:cc:
1b:03:25:5e:ba:17:7a:d9:c0:46:e2:4e:52:5d:26:02:b2:8a:
8d:cd:cf:0d:5f:b5:2e:4b:4a:8c:e3:7d:f0:45:f7:ad:57:b4:
50:02:e9:6e:9c:72:af:b5:ec:fb:04:d4:bf:b4:f9:df:fe:f6:
b5:5c:bf:3d:78:3a:87:7d:85:67:0c:e7:cb:ce:43:e5:f1:62:
60:26:2f:2d:d0:f9:78:f4:ae:2b:45:99:67:e2:c7:02:d1:42:
75:87:d2:2a:25:93:2a:0e:47:b4:53:8e:6a:13:f2:91:52:3f:
99:43:f7:6b:b1:b2:49:0c:80:23:5b:dd:22:3d:c7:0a:28:51:
a6:3b:b3:96:bc:ba:be:82:9e:5a:13:3a:8e:48:f9:4d:d3:e8:
7b:e5:42:21:59:3c:11:6f:1f:39:25:85:e0:56:0c:54:9e:80:
cd:f1:9e:44:12:bd:39:eb:b1:7a:87:b0:e5:7f:1e:2e:80:83:
bc:94:86:00:42:7f:5d:b1:65:24:f5:ce:7d:b6:35:c8:8f:46:
2a:84:46:3a:a1:88:85:69:b4:99:6e:f7:7a:dc:a6:0b:1a:38:
a6:52:11:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:58 2025 by rpki-client