Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/cJamMtyBJKS9nUAc9YKKpTF5yCs.roa
File: cJamMtyBJKS9nUAc9YKKpTF5yCs.roa (raw, json)
Hash identifier: RZZ+0SxjNyZmqa/DK4v7tEe0jatiMt2jfgIUp89tlMc=
Subject key identifier: 70:96:A6:32:DC:81:24:A4:BD:9D:40:1C:F5:82:8A:A5:31:79:C8:2B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 164E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cJamMtyBJKS9nUAc9YKKpTF5yCs.roa
Signing time: Fri 19 Apr 2024 10:53:31 +0000
ROA not before: Fri 19 Apr 2024 10:53:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5710 (0x164e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 10:53:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7096A632DC8124A4BD9D401CF5828AA53179C82B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:1c:ff:bd:c3:2e:e9:d0:e4:dd:6c:5d:65:
7a:47:11:52:e4:da:f3:f3:f2:ef:65:a9:ee:79:27:
5f:69:ab:09:8b:dd:22:d2:39:c6:50:27:c1:2d:4c:
fa:5f:a8:5a:27:82:db:6a:09:67:2a:e1:b7:19:d0:
86:9f:fd:70:df:af:dd:95:cc:62:3a:6e:f5:3b:d9:
9f:f5:1a:68:21:3e:71:67:bc:e6:e7:ff:75:ce:c3:
fd:be:69:30:a1:75:76:c9:65:12:7a:3b:45:b7:db:
ac:03:e0:10:40:69:b6:11:51:30:69:f2:34:8f:3a:
34:b8:4f:79:f7:83:f4:05:58:de:5b:d8:39:f5:85:
b1:35:c2:fa:b4:32:e3:78:4c:5e:8f:ad:ca:ef:f4:
bd:0f:f6:43:aa:77:c9:59:4d:b3:d2:58:24:cb:1f:
93:ed:6a:32:4f:5f:6b:f3:a2:7b:1b:5c:4b:f9:a7:
a8:ab:7a:91:32:cd:18:97:89:fd:f3:81:cc:62:7a:
e3:7b:87:a3:50:b2:b3:09:ff:40:ad:e1:a8:2b:17:
ba:be:83:3f:c2:35:08:46:55:47:6f:24:2d:89:57:
7d:a3:03:b3:bf:79:70:66:65:e7:89:7f:00:2f:ad:
89:09:f7:c0:7c:9d:f8:cf:2f:09:4a:85:06:52:f1:
e2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:96:A6:32:DC:81:24:A4:BD:9D:40:1C:F5:82:8A:A5:31:79:C8:2B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cJamMtyBJKS9nUAc9YKKpTF5yCs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:db:07:a8:df:0b:80:16:9e:e7:9c:8c:5b:4f:35:1e:f6:b1:
54:18:1c:6c:3c:52:f2:d2:2f:6c:0d:10:be:8e:7b:8a:21:7c:
7d:30:c4:b6:f1:69:a6:bb:ba:c1:c3:b8:07:9e:98:d3:4a:3c:
4f:f7:a7:81:13:64:64:d7:f8:de:98:cd:15:d6:87:b2:be:4d:
9b:61:4b:92:c5:f2:44:d4:49:5e:dc:fd:fd:d4:51:d5:ea:d3:
b9:b7:15:b5:d0:c1:ca:7e:29:49:cc:09:a4:21:e2:66:9e:8b:
fb:6d:f9:a4:0d:54:78:72:71:8e:22:c0:dd:4c:cb:35:b2:96:
9f:3c:0f:be:1d:f3:de:9b:05:2e:cb:ba:c9:f1:f7:52:96:29:
b4:2b:7a:ad:2b:c7:f7:2e:1c:fd:bf:c2:a7:08:66:7b:f6:db:
4c:b6:29:37:ac:6b:75:41:f3:b8:01:43:be:bc:0d:1d:74:10:
93:b7:98:9b:67:83:12:de:8d:28:28:62:84:78:9c:ba:53:8f:
06:eb:08:1c:b5:88:aa:10:47:90:79:4a:e4:d6:1c:7b:15:ab:
5d:7b:c2:71:47:f0:db:a7:30:a5:90:0e:92:89:26:54:48:8c:
dc:30:8f:10:c5:35:f0:87:e6:46:18:81:7a:68:62:04:21:da:
42:99:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:30 2025 by rpki-client