Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/X5Q5J6BnSqED3WQ5sHInrDMwgsI.roa
File: X5Q5J6BnSqED3WQ5sHInrDMwgsI.roa (raw, json)
Hash identifier: /6t003nJz5P71QN59fum+zDAbMP7505BtDR6BQRyA3g=
Subject key identifier: 5F:94:39:27:A0:67:4A:A1:03:DD:64:39:B0:72:27:AC:33:30:82:C2
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 161E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/X5Q5J6BnSqED3WQ5sHInrDMwgsI.roa
Signing time: Thu 18 Apr 2024 22:54:20 +0000
ROA not before: Thu 18 Apr 2024 22:54:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5662 (0x161e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 22:54:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5F943927A0674AA103DD6439B07227AC333082C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:be:3b:92:8c:9a:b7:2d:f1:db:50:24:f3:
8e:f2:be:e1:a6:e5:72:ec:e6:d9:6e:a3:9a:14:a9:
60:e6:c8:a9:28:08:ae:cd:2e:d1:a2:0c:99:3c:e5:
ab:ae:cc:53:fd:dd:c9:ef:fe:3d:ac:63:3f:e0:26:
f3:dc:e3:64:b8:ee:87:a7:94:5d:de:9b:d0:2b:47:
e6:86:de:a6:08:bb:48:0e:78:9b:cf:a6:33:f3:e8:
84:b2:2e:8b:9a:3b:9e:3a:4f:ac:b5:44:c4:d2:aa:
a5:17:51:34:ce:6b:81:a7:19:b8:76:72:61:9a:c4:
d9:fc:fd:8a:73:aa:c4:65:53:48:e6:10:9c:89:fc:
85:7d:21:c0:70:f6:77:98:4c:48:38:b2:71:08:52:
06:c8:25:8a:88:53:5d:44:cb:98:28:b1:8b:f2:4f:
05:23:32:36:ed:e1:0c:b3:cd:68:5b:67:ca:ae:43:
b7:d6:d4:20:2d:7e:8e:e9:6e:63:37:03:7e:a7:d0:
cc:d1:bc:c5:2c:bf:13:d1:b8:06:9d:b7:f0:27:96:
ca:f9:7e:b8:10:88:bc:41:87:6d:fa:78:f8:43:43:
60:b5:09:97:c5:5d:c7:ff:99:cb:38:de:a9:4e:9f:
c6:7f:9b:c2:aa:e9:6d:dd:18:34:ab:f9:93:88:b8:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:39:27:A0:67:4A:A1:03:DD:64:39:B0:72:27:AC:33:30:82:C2
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/X5Q5J6BnSqED3WQ5sHInrDMwgsI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:0d:ee:d1:e2:2f:ce:9b:5d:b1:03:51:09:c0:bc:a7:5c:cc:
86:2b:d7:9d:f6:31:59:44:3d:9e:ae:3c:5a:6b:ae:db:38:f3:
9a:48:93:4f:35:5a:ea:93:1d:92:6e:23:c3:57:b7:ee:38:92:
4a:ad:b5:55:83:40:ad:04:36:8a:d6:a5:18:0e:f3:20:33:13:
8d:af:52:19:c5:76:70:0b:95:91:c1:0b:17:b9:2b:ac:32:8a:
b0:82:6b:50:1a:b1:98:b9:6e:4a:8c:e1:5e:fb:46:64:6f:c1:
b0:d5:dc:10:9d:28:4b:29:6a:3a:f0:69:e4:ea:1a:02:14:e0:
c0:ff:7a:a0:8f:d7:09:61:e7:53:8b:8c:95:b6:2c:2b:16:8e:
42:f4:b1:aa:5e:6b:69:fa:4d:e6:68:ca:ae:88:cc:d3:e6:4e:
7c:50:62:f6:90:d5:23:5b:55:b2:11:e3:b1:6c:9d:c6:4f:df:
73:90:a8:84:15:06:14:30:9e:f4:13:bf:cf:1c:6a:cd:f5:56:
9e:97:77:5c:90:ad:bb:9d:d7:b3:2d:de:e8:c3:f0:2f:76:32:
90:19:6a:1c:53:84:cd:84:a4:b0:1f:e1:ba:01:3f:e0:5d:0f:
d2:e1:81:54:81:f6:03:9f:08:a7:e6:2a:12:52:e3:17:e1:bd:
b7:41:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:26 2025 by rpki-client