Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/fGQtFoARV0Ld8eUvJwxtlaB_jWc.roa
File: fGQtFoARV0Ld8eUvJwxtlaB_jWc.roa (raw, json)
Hash identifier: NZi49ELSTg2d7CSpftLwiGoba917jXIapg+v60dx5p4=
Subject key identifier: 7C:64:2D:16:80:11:57:42:DD:F1:E5:2F:27:0C:6D:95:A0:7F:8D:67
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1836
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/fGQtFoARV0Ld8eUvJwxtlaB_jWc.roa
Signing time: Wed 24 Apr 2024 12:53:39 +0000
ROA not before: Wed 24 Apr 2024 12:53:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6198 (0x1836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 24 12:53:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7C642D1680115742DDF1E52F270C6D95A07F8D67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:f2:20:50:2e:de:50:de:16:27:51:98:f5:
67:3e:e9:8a:e6:af:5b:ad:24:83:11:c7:3b:52:74:
a5:55:d0:90:f0:69:a5:ff:2a:39:99:da:fb:53:be:
8a:30:0c:79:5a:7d:91:d0:12:c4:23:d3:c7:ce:70:
08:66:fa:00:20:1d:d3:83:7a:f7:92:d5:30:82:5a:
10:fa:1c:27:f2:3c:9b:48:ee:84:d0:89:a3:10:97:
db:59:38:96:c7:00:07:96:93:c3:b3:02:3e:00:7a:
0e:37:46:4b:4e:72:c7:6c:bf:ed:a7:42:b7:0c:1a:
c8:27:8f:f2:2f:eb:31:7e:1a:1a:db:1b:af:c6:90:
88:f2:bf:84:7a:d3:da:3e:45:2b:6d:b8:c3:f4:79:
3f:01:84:c5:5e:ba:7c:ed:45:e9:65:7a:73:d2:43:
9f:67:c5:06:bb:d4:ca:48:be:43:31:86:07:7f:17:
32:81:75:ed:db:48:b7:0b:a8:8f:54:b4:d3:6e:f6:
c8:41:2f:75:ec:ba:2b:ac:f5:3e:a1:2b:1d:b0:22:
69:95:72:89:4d:bc:1f:70:eb:53:f1:08:69:73:26:
4f:e1:24:b7:c4:c8:00:1d:c9:7e:b3:87:42:ec:cb:
0b:e7:71:b5:be:09:3c:29:d8:12:32:30:c7:7c:8c:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:64:2D:16:80:11:57:42:DD:F1:E5:2F:27:0C:6D:95:A0:7F:8D:67
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/fGQtFoARV0Ld8eUvJwxtlaB_jWc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:99:05:36:19:77:28:bf:40:0c:b3:09:ae:2f:08:6b:22:31:
48:9f:09:ea:73:eb:18:d8:4b:36:92:3e:92:65:04:ad:8b:21:
8e:7d:f4:3f:23:b0:9d:ca:6b:bc:3c:2c:f0:f8:32:f0:a6:8f:
dc:0c:bd:92:66:6d:e5:1d:1e:7e:c1:96:34:59:d5:ec:b9:e0:
3b:e9:3d:be:56:99:d0:f5:91:d6:a9:b9:0c:86:9c:83:fb:6f:
00:c3:0f:b1:72:38:05:24:7a:cd:9d:6b:24:99:06:7b:3f:1f:
da:f5:c0:7e:33:05:ad:23:bd:8a:24:97:1f:07:26:e3:ab:20:
fa:bb:09:54:e3:36:a6:3d:66:9c:b5:07:8f:a9:17:7b:55:37:
2b:f4:5f:fb:73:d3:16:63:4a:14:6d:f1:f4:e8:31:b1:36:e8:
15:95:9c:b2:76:d5:3b:e1:d5:1c:79:be:2e:f6:52:fa:95:5b:
9a:e3:e3:1c:46:14:2f:1d:ac:53:2e:e4:45:4c:f6:72:fa:a5:
be:57:12:8f:bb:9d:3b:1d:10:80:2f:8e:20:93:f2:a6:c5:e6:
11:ff:60:5a:80:cb:21:62:22:24:5f:4f:f8:b9:2f:5a:f6:58:
2a:f8:0c:ae:56:bd:97:bb:69:78:9b:9e:8b:14:a2:bd:1e:6d:
1a:21:40:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:54:24 2025 by rpki-client