Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/_u0KQiu64dCDSnixRch0Nhtnuzg.roa
File: _u0KQiu64dCDSnixRch0Nhtnuzg.roa (raw, json)
Hash identifier: jujM2alAtaJS2Ic9X8k4PYUXQ9wAv5/5uWxceYH1R10=
Subject key identifier: FE:ED:0A:42:2B:BA:E1:D0:83:4A:78:B1:45:C8:74:36:1B:67:BB:38
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0ECE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_u0KQiu64dCDSnixRch0Nhtnuzg.roa
Signing time: Sat 30 Mar 2024 10:52:31 +0000
ROA not before: Sat 30 Mar 2024 10:52:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3790 (0xece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 10:52:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FEED0A422BBAE1D0834A78B145C874361B67BB38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:5e:0e:64:2c:a7:95:e0:09:ca:f0:52:af:
a2:06:d0:e5:80:ea:bb:44:15:c7:fb:4b:03:01:e9:
12:32:e9:bb:70:a5:c4:e5:15:c7:93:87:28:f1:9f:
33:83:88:3f:6b:3f:ff:10:cb:7b:30:a3:db:76:4a:
25:a9:38:86:0d:fc:e9:c2:6e:c0:3b:35:0f:b2:43:
fb:72:ed:02:e3:e5:fd:0b:82:cb:42:ce:49:ca:56:
61:46:59:e0:da:64:82:8a:5d:4b:bb:d8:22:54:04:
66:0f:61:28:2d:9e:48:5f:5e:99:cc:c7:f3:c2:a8:
58:a6:5c:04:af:e3:d4:bc:3d:87:33:5d:6c:b9:e6:
14:cb:5c:7e:ca:7d:ad:1a:fa:5e:ec:fb:33:3d:4f:
60:79:a8:be:66:33:27:83:72:e3:2f:0c:93:49:9d:
3f:31:40:b6:9e:d8:3e:5b:0f:28:3a:c4:8d:eb:53:
d5:f6:42:40:b2:42:ca:d8:2b:07:31:bc:35:ac:8c:
cd:c0:1c:84:df:70:53:36:1d:31:24:77:9e:cc:8f:
e4:2c:df:4f:4e:4c:bc:b3:13:57:21:a8:71:fe:cc:
f9:35:fb:aa:dc:2e:88:47:4e:7d:0c:da:a8:00:0d:
21:68:7c:1a:92:6c:2b:9d:5f:7e:15:f8:37:e8:f8:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:ED:0A:42:2B:BA:E1:D0:83:4A:78:B1:45:C8:74:36:1B:67:BB:38
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_u0KQiu64dCDSnixRch0Nhtnuzg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:b2:c7:71:96:62:c1:17:52:25:41:0e:f5:28:e1:24:de:11:
12:14:2a:6a:a0:ca:32:68:c8:0b:66:e2:2b:d1:f7:2e:d2:4c:
66:1a:65:70:a2:f5:90:51:35:70:aa:a5:fe:66:ed:c3:3e:c9:
c8:0b:39:1c:b5:0a:57:5c:13:b0:6e:01:44:dc:db:3a:82:86:
e5:31:08:e3:3c:e7:86:dc:a9:11:d7:b6:15:7d:3f:e8:81:e0:
57:f8:c3:b8:74:31:ad:6c:71:94:92:81:fc:51:70:10:19:b3:
1e:8d:be:ad:e5:70:9d:ac:13:e1:98:31:d3:27:3d:66:7a:ac:
84:6f:87:ab:1d:89:fe:c6:9d:44:fa:32:7f:fa:07:f9:3a:25:
13:82:b8:3f:ac:f5:7b:05:6c:b0:20:fc:06:12:02:e7:c4:b5:
a6:68:97:b6:60:f1:53:77:83:02:e1:32:6b:3f:65:bc:f3:a8:
55:b5:50:5a:4b:f1:7e:5d:aa:5d:38:a2:57:23:56:5c:f2:38:
61:cf:e9:a8:c9:b6:eb:b3:a1:ad:a9:3f:92:18:b9:87:0d:0d:
39:11:b1:10:44:1d:b4:2f:05:e4:48:71:e3:7d:60:91:0b:af:
33:15:1e:54:2f:1e:28:74:7f:52:7a:28:2f:e9:b1:fb:74:f7:
d9:80:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:54 2025 by rpki-client