Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Za03Oamt91CCZzdzRMrOjC_5J44.roa
File: Za03Oamt91CCZzdzRMrOjC_5J44.roa (raw, json)
Hash identifier: n8IqEt4tVdIdoYsTfA3TF08S/K6bbx7Loi9L4EpG6eM=
Subject key identifier: 65:AD:37:39:A9:AD:F7:50:82:67:37:73:44:CA:CE:8C:2F:F9:27:8E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1522
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Za03Oamt91CCZzdzRMrOjC_5J44.roa
Signing time: Tue 16 Apr 2024 07:53:52 +0000
ROA not before: Tue 16 Apr 2024 07:53:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5410 (0x1522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 07:53:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=65AD3739A9ADF7508267377344CACE8C2FF9278E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:1f:0f:de:d1:54:b3:07:55:c8:2d:23:8a:
f6:99:08:6c:b6:41:7e:49:9c:b9:61:3c:0c:71:67:
15:ab:24:13:40:7d:b2:90:7e:22:d0:00:ad:16:59:
92:07:2a:fc:02:d5:2d:a4:70:4d:00:59:84:8b:b2:
ff:63:88:5e:2a:07:f0:10:16:f6:93:be:b0:1b:7e:
5a:a1:57:11:3b:65:27:0d:df:a6:5d:c1:c1:5a:48:
ad:a9:9f:64:9e:de:14:8c:cc:06:9a:d6:50:48:c7:
ce:37:91:21:b9:79:b4:25:f1:41:43:36:97:51:fb:
d9:80:e7:04:38:6e:03:31:e1:ce:dc:3f:93:8b:ec:
63:19:ac:72:1b:5c:25:2b:6b:1b:40:a6:fa:a2:1c:
81:86:7d:f7:9c:56:98:cf:20:1e:70:1f:55:69:a6:
86:6f:2b:07:ae:22:b0:ff:02:2f:9a:77:ae:85:a6:
76:96:c7:f3:d7:f3:90:60:7d:65:ac:52:d7:5a:ba:
0b:59:71:49:66:1d:35:a5:8a:17:24:1c:19:7c:4c:
fa:36:25:98:f9:12:60:20:fb:46:dd:41:3c:b7:54:
cb:9c:37:14:69:62:fa:ed:69:43:ce:1a:aa:c4:15:
e1:01:99:65:30:c0:6b:39:23:5b:0b:e4:e2:8a:f3:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AD:37:39:A9:AD:F7:50:82:67:37:73:44:CA:CE:8C:2F:F9:27:8E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Za03Oamt91CCZzdzRMrOjC_5J44.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d2:58:ff:ad:a9:20:0c:b7:f1:9f:b5:86:8e:93:dc:32:75:5b:
1e:db:55:ab:43:db:e0:d9:3f:95:b3:4b:83:4a:24:f1:2d:6d:
d2:9a:3d:75:15:61:3e:2e:86:e0:0c:a9:c5:84:50:8a:d8:c4:
4b:fb:a9:8b:4d:38:ae:25:a6:20:de:6a:26:b0:37:67:b2:d0:
2c:a8:fd:e1:8e:8e:4f:f1:60:b0:c2:a7:2c:2b:02:78:6c:8b:
9a:95:25:44:11:df:28:7f:54:d8:30:86:02:a7:6b:13:8f:ed:
d2:4f:c2:1f:d5:40:30:b1:71:e6:20:c3:7b:31:6c:4e:29:fe:
cb:b9:42:37:87:86:ad:4a:03:7d:73:35:a5:f6:93:84:24:af:
97:07:8c:5a:b7:3b:f4:da:44:be:2b:e4:01:14:f7:06:27:7d:
5b:cb:70:eb:9b:5e:83:ee:8f:b0:91:83:87:4d:e8:8d:51:70:
75:65:21:ec:a0:54:f7:ae:8d:12:f6:64:29:1c:de:14:11:c7:
f6:40:53:4f:2c:04:07:c3:ea:61:40:48:cb:81:3b:aa:65:13:
b6:fe:4f:54:98:c6:ce:ed:13:12:dc:bf:9c:73:f9:8e:bf:90:
82:46:bf:54:8b:59:94:e0:1e:c1:5e:7d:5b:09:e2:33:19:0d:
96:29:a0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:55 2025 by rpki-client