Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/_bQa9nCkj3XVyGXf2a8tUbN1uZ4.roa
File: _bQa9nCkj3XVyGXf2a8tUbN1uZ4.roa (raw, json)
Hash identifier: HKaYFOybLiYeeGZd3pIiIw1Y3AgENJpr4SJPQz4drsg=
Subject key identifier: FD:B4:1A:F6:70:A4:8F:75:D5:C8:65:DF:D9:AF:2D:51:B3:75:B9:9E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16CA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_bQa9nCkj3XVyGXf2a8tUbN1uZ4.roa
Signing time: Sat 20 Apr 2024 17:53:39 +0000
ROA not before: Sat 20 Apr 2024 17:53:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5834 (0x16ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 17:53:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FDB41AF670A48F75D5C865DFD9AF2D51B375B99E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:06:3b:4f:4c:29:a0:4d:29:7a:b0:18:9b:f6:
75:eb:d6:78:ac:ce:93:a3:88:2f:a5:7b:a4:0c:f9:
b0:c9:a2:41:0c:2c:92:fd:bc:a0:89:d8:f2:6b:73:
61:e8:b9:a9:b4:35:34:50:fd:a1:86:e5:c8:a4:34:
94:33:8a:ec:66:37:22:12:af:a4:3a:aa:0e:55:64:
6c:ff:39:53:d9:55:49:88:c0:4f:17:96:3d:ea:07:
70:15:b4:ab:1a:63:73:af:1d:16:81:f7:b1:78:53:
40:24:b7:e8:aa:d2:fc:42:f7:c1:75:fa:49:a7:8e:
2e:e7:37:03:dc:bb:3a:05:b2:6d:60:6f:4e:0a:be:
51:02:15:ea:8e:86:e6:4d:ec:06:68:bb:23:1c:f7:
c6:3b:46:01:e2:2b:07:dd:4d:99:23:80:b2:62:81:
9d:a1:69:d1:b0:84:7a:51:e3:02:25:15:98:dc:40:
ea:39:75:fb:4e:69:32:95:76:44:22:b0:20:2e:7f:
b8:ed:c3:e1:51:73:08:41:7e:cc:5d:18:0d:fc:3f:
a4:39:2e:84:df:12:f4:fb:0c:54:ca:84:28:1b:80:
10:5b:09:1c:24:52:a9:12:92:c4:ff:ec:76:66:1d:
04:6d:0c:6b:35:67:eb:61:4e:f0:2a:39:34:c9:fe:
e3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B4:1A:F6:70:A4:8F:75:D5:C8:65:DF:D9:AF:2D:51:B3:75:B9:9E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_bQa9nCkj3XVyGXf2a8tUbN1uZ4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:31:65:37:cb:9a:75:88:23:bb:cd:4f:1c:43:21:cc:dc:38:
c7:8a:d8:83:9a:e4:ce:63:bf:27:5e:b6:9b:23:7f:4f:b6:cd:
1e:ca:bd:ce:a2:62:44:b5:82:5f:20:51:d4:37:6c:ce:31:6c:
0e:25:ca:73:f5:45:13:ee:96:73:77:c2:79:f6:d7:fe:0a:a5:
c2:17:68:74:d0:34:0c:ac:41:55:01:5c:1a:73:b2:f5:98:c0:
05:ee:ba:d8:2b:2c:df:64:ed:dc:b3:37:62:71:6c:f0:f5:dd:
99:fd:1a:59:4c:d7:b8:e6:8a:11:59:0f:16:20:52:48:17:a1:
7e:8e:03:7d:56:4f:4c:05:a9:df:ff:e4:2f:f3:44:97:75:14:
a4:11:55:6b:17:64:7b:6d:50:52:25:be:a2:05:ca:dd:69:30:
cd:e9:ca:16:49:fa:02:d3:4e:96:3e:b1:86:76:80:f0:cc:e3:
b0:7e:d1:e1:40:b8:cf:fd:f2:a8:8c:e3:bc:01:08:a9:c7:d9:
dd:e8:ac:fc:fa:43:29:46:77:f0:66:5f:0c:ce:fc:30:48:77:
3c:df:46:82:84:cc:ae:22:d7:21:c5:b4:13:b2:40:d4:2a:a5:
8d:a4:59:61:71:0d:b9:0a:1d:7c:4b:55:f3:75:3a:a7:60:6c:
cb:b2:39:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:44 2025 by rpki-client