Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/XxoDWRz2f32xkGmFVpKktR2oM18.roa
File: XxoDWRz2f32xkGmFVpKktR2oM18.roa (raw, json)
Hash identifier: TNbqdFGmZwF+pdDQvMYI1En97Bpql7P1jxReGEDbog4=
Subject key identifier: 5F:1A:03:59:1C:F6:7F:7D:B1:90:69:85:56:92:A4:B5:1D:A8:33:5F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19EE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/XxoDWRz2f32xkGmFVpKktR2oM18.roa
Signing time: Mon 29 Apr 2024 02:54:04 +0000
ROA not before: Mon 29 Apr 2024 02:54:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6638 (0x19ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 29 02:54:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5F1A03591CF67F7DB19069855692A4B51DA8335F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:f3:b5:41:10:9e:1d:fe:81:53:05:ea:2e:
e8:b0:76:a7:91:fc:62:5a:7a:2f:0b:e1:a3:62:98:
4c:03:f4:e8:e2:3f:f9:b8:e2:55:8d:3c:2f:b1:48:
c3:52:ef:c3:f4:72:1a:b3:49:9e:4c:c2:70:4f:be:
aa:65:67:f2:88:51:4e:3a:ee:99:12:12:25:ca:ad:
67:83:cd:fb:ac:7e:15:5b:74:59:47:0c:46:72:48:
1a:b8:73:70:ae:f6:bd:19:88:ad:ac:45:a1:69:ac:
2a:1c:aa:2b:9a:a4:25:e4:07:90:c2:f1:cf:d8:5a:
1d:36:24:64:14:55:b9:ed:f7:e5:f4:76:cb:fd:bc:
34:96:2e:e6:9a:be:ab:40:6f:1c:41:6b:1b:b8:01:
a2:96:b0:5e:b6:d8:74:37:f7:05:c3:e1:3e:b3:a8:
9a:fa:5b:1f:6a:63:53:64:97:46:b7:db:25:ec:75:
ff:15:37:81:a4:68:17:27:f3:cc:da:0d:96:33:a6:
6b:52:30:2b:b3:2d:ec:7f:07:57:25:db:1e:9c:63:
55:65:dc:16:1c:02:67:73:2f:42:6e:28:7a:2b:80:
c5:6b:d6:25:d1:55:ff:de:88:b2:18:aa:7f:89:86:
70:3f:d1:59:20:c7:2d:42:7b:b7:e6:74:3d:bd:bd:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1A:03:59:1C:F6:7F:7D:B1:90:69:85:56:92:A4:B5:1D:A8:33:5F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/XxoDWRz2f32xkGmFVpKktR2oM18.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ce:ab:28:46:21:c2:30:dc:9d:e7:01:31:01:b5:a7:d6:c6:b1:
aa:a5:88:b5:26:d6:3b:01:ea:53:79:55:a7:91:6c:d9:65:eb:
6e:47:8b:8a:67:c7:04:26:b5:30:f6:f6:c2:81:06:a0:d4:92:
10:35:ab:da:14:53:cf:77:c8:39:9a:e5:33:47:bc:08:82:36:
f1:57:97:ef:ad:8f:bb:3e:d3:0b:7d:4d:3f:23:2b:0c:0e:68:
de:67:ca:6f:a8:9b:15:00:a1:ff:84:e5:10:4f:3c:b0:a0:72:
f7:0d:7e:57:b0:b8:f0:4b:73:a8:6f:01:cd:63:7e:9c:46:85:
ba:d6:da:39:1e:8c:64:31:c2:64:f9:56:28:dd:6d:57:d1:45:
30:57:53:ad:f2:17:68:cd:0c:c7:1d:3d:4d:0e:47:14:bc:6b:
b7:7a:90:db:82:39:ba:0c:4a:ac:94:d8:ac:8d:4a:b8:cc:1f:
c9:44:78:0e:3b:ce:63:56:8e:40:54:7d:66:37:ae:1b:db:4a:
81:c1:9f:22:50:df:e1:6a:ce:e4:da:77:cd:71:1c:3b:1f:23:
07:38:49:34:94:ab:b9:ac:4d:c3:8f:64:04:16:cf:0d:4c:c5:
a2:b0:a3:81:51:e8:8f:65:d6:7c:6b:63:1c:b2:0c:ec:eb:1e:
cb:3c:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:25 2025 by rpki-client