Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/cq314dQXQRA_NFvLeyHQOkcsQmc.roa
File: cq314dQXQRA_NFvLeyHQOkcsQmc.roa (raw, json)
Hash identifier: l8sh2/tS7nBVVsmGmRRzys9GCQZ9owtWgNlPBQUDyq4=
Subject key identifier: 72:AD:F5:E1:D4:17:41:10:3F:34:5B:CB:7B:21:D0:3A:47:2C:42:67
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1346
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cq314dQXQRA_NFvLeyHQOkcsQmc.roa
Signing time: Thu 11 Apr 2024 08:53:10 +0000
ROA not before: Thu 11 Apr 2024 08:53:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4934 (0x1346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 11 08:53:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=72ADF5E1D41741103F345BCB7B21D03A472C4267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:05:c3:94:75:90:72:02:e5:d2:16:fd:f9:
48:43:94:df:44:c9:5c:46:71:6b:b6:e9:11:3d:6e:
c9:57:a7:09:71:99:f6:da:03:50:3d:4d:26:83:d0:
62:81:0e:e5:a9:ab:ee:a3:a8:4b:f4:5e:12:f5:1e:
2c:2d:e1:79:85:05:2f:4b:74:3d:24:89:9c:0f:e0:
1f:f0:6d:12:20:c0:77:0e:cd:5b:db:ab:9c:79:ec:
ae:bd:58:82:63:b9:53:33:32:ef:37:a1:51:84:fd:
3a:6c:66:a7:7a:84:dc:75:09:21:d9:62:29:92:8c:
95:e9:cb:7f:58:48:e3:51:3a:32:ec:b4:be:a3:22:
ba:15:87:60:2c:42:31:0e:5b:cc:b3:5e:e9:c9:54:
c6:4f:1e:a0:9a:8a:42:75:4b:5d:2d:da:89:6b:b9:
93:c2:f3:9c:8f:97:0d:3b:08:fb:e7:da:6f:82:d3:
80:55:35:7c:84:c0:4d:cc:dd:6b:f0:fb:22:03:0a:
5a:a8:69:6f:b0:d0:fe:55:df:a7:2f:96:a2:ea:1a:
b2:cc:eb:ea:bd:ad:a2:8d:52:4b:ee:f5:38:10:cd:
fa:1d:15:46:a9:e6:18:22:55:ce:9b:e9:d4:4b:02:
c5:04:d9:f9:3a:3e:5b:8d:16:69:72:62:9b:14:32:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AD:F5:E1:D4:17:41:10:3F:34:5B:CB:7B:21:D0:3A:47:2C:42:67
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cq314dQXQRA_NFvLeyHQOkcsQmc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:ab:63:0e:13:17:82:0c:83:cc:e2:b5:3c:1f:5b:0d:f0:0f:
3e:9b:61:bc:eb:36:60:5c:c1:de:87:f5:91:7b:7a:ed:05:b9:
fc:cf:6f:5b:8f:39:8b:05:4e:db:e9:76:da:85:b6:1b:37:bc:
b9:1a:cc:92:d2:69:36:b5:e4:dd:28:6f:02:d8:fa:91:35:25:
a4:c2:75:a9:99:af:85:ce:2b:e0:8d:2a:cc:c8:69:f5:f6:aa:
bd:46:0b:16:a8:fa:e5:d3:f2:51:22:66:d8:57:a9:7f:1e:06:
dd:1c:f6:c6:0a:94:54:6d:d6:bd:68:7f:dc:02:a6:d7:bb:ec:
e8:62:a5:50:ca:28:f4:01:94:b2:e1:fd:a3:15:8e:ea:9a:31:
42:9b:cf:a7:9b:9f:c6:44:59:65:c7:88:ce:0b:c5:f4:c4:22:
9c:2c:1d:47:ac:9c:89:05:92:27:2d:16:6e:0c:32:d5:8a:b0:
54:fb:98:2a:a3:d3:db:41:06:ee:99:ab:6c:28:a9:16:12:0b:
ce:2d:bd:14:7d:24:de:be:df:c6:8f:6f:ac:c6:94:44:5e:6b:
14:56:95:51:0f:a7:2e:02:71:2b:d0:28:b6:b3:75:cc:38:38:
d7:08:0d:07:54:4b:dd:41:b6:30:bf:eb:10:86:b5:71:bc:b4:
d5:55:94:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:56 2025 by rpki-client