Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/d5nlijqmvMkCKk_WIsXGkooncTQ.roa
File: d5nlijqmvMkCKk_WIsXGkooncTQ.roa (raw, json)
Hash identifier: uzCtFXhgMySMeH6TwRb4sSBUY9eFWFmXB3CRQ3w3KHM=
Subject key identifier: 77:99:E5:8A:3A:A6:BC:C9:02:2A:4F:D6:22:C5:C6:92:8A:27:71:34
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B2E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/d5nlijqmvMkCKk_WIsXGkooncTQ.roa
Signing time: Thu 02 May 2024 10:54:08 +0000
ROA not before: Thu 02 May 2024 10:54:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6958 (0x1b2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 10:54:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7799E58A3AA6BCC9022A4FD622C5C6928A277134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:29:9c:d2:95:f1:fd:b3:5b:d7:d2:1e:c0:
81:90:12:78:95:d9:84:2b:a2:40:7b:3f:66:cc:a0:
f4:f5:5d:1d:32:3a:e9:4f:cb:5b:e3:14:aa:bb:d0:
b6:db:b1:6b:b1:59:d9:f8:e3:90:c2:13:af:8a:79:
a6:83:f0:77:39:55:2d:4f:23:ba:e6:e4:28:f9:a4:
f3:d1:ec:13:e0:11:56:48:b6:11:dc:85:29:1a:1c:
e0:1e:35:7e:16:cb:7f:2a:4c:62:7b:07:b1:55:25:
5a:b6:ba:e1:52:56:19:e6:b7:a1:f7:9e:7c:ab:10:
43:04:2d:85:1d:95:9c:b2:4e:04:4d:db:89:0d:af:
a3:52:14:29:7e:82:f4:72:8d:75:0d:83:3e:ac:e4:
17:b9:12:cd:e2:2b:8b:c7:21:93:1c:9d:a0:13:a5:
71:2c:d6:65:bf:7b:2b:48:6b:4b:94:de:16:d7:af:
42:a2:16:8f:5a:b5:94:48:60:ae:f5:51:d6:88:c7:
bc:d2:fd:17:54:ea:56:73:63:44:3d:57:2c:b8:52:
78:87:e4:fb:20:a9:09:86:51:15:a6:62:21:5d:a0:
c2:5e:bf:be:4b:fb:8c:6f:84:8e:7e:ab:d0:a3:ba:
06:ea:ee:57:5e:de:0a:ad:1d:7e:c4:e3:9c:6b:5d:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:99:E5:8A:3A:A6:BC:C9:02:2A:4F:D6:22:C5:C6:92:8A:27:71:34
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/d5nlijqmvMkCKk_WIsXGkooncTQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:b0:de:28:bf:a3:b1:83:b2:86:96:5b:c1:b1:7f:21:ae:f3:
af:e3:09:81:be:a7:59:44:6b:7b:59:b3:fa:c9:02:ca:29:1c:
ee:e2:12:e3:93:17:6e:d4:55:35:6b:3a:76:5a:10:7d:8a:43:
4d:3f:c1:69:da:17:f8:5a:f5:d2:aa:2d:59:8d:f3:7d:f8:ec:
4a:17:cd:fc:4c:42:31:70:ec:1f:88:31:5e:0f:09:f7:a5:4e:
8b:3f:7a:b2:3b:f9:8c:88:e0:b9:f5:63:7c:1c:62:dd:5c:03:
06:db:2b:ad:54:f6:17:74:cd:83:5e:92:d3:c7:86:b4:f0:80:
5d:2a:79:10:dd:da:20:c1:5f:0f:25:99:54:e3:b7:46:65:6b:
5a:22:ab:95:df:ea:cd:da:91:60:2c:e1:2f:76:e6:a0:93:d1:
3a:ef:bc:02:68:12:2e:3a:f3:3b:2c:3f:47:eb:b4:3a:83:68:
08:96:b6:f5:94:68:5a:bf:ec:d8:0b:f8:6c:cb:4c:8f:d4:70:
c8:15:2c:30:97:e3:22:bd:e0:71:6b:8c:f0:2b:f5:f3:f7:b5:
5f:a9:b9:a7:2b:02:96:55:09:c2:70:25:07:f7:d1:20:02:21:
12:30:15:1c:fd:9b:36:b0:36:e9:eb:e3:2e:d3:52:7e:ac:61:
22:67:e6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:18 2025 by rpki-client