Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ga2ZchuRh--5rDz6Woa5coEPfwE.roa
File: ga2ZchuRh--5rDz6Woa5coEPfwE.roa (raw, json)
Hash identifier: oyJ4i4b7lsMtduWhjjZgdJIoLeM23tqKR+JG4nh4ut8=
Subject key identifier: 81:AD:99:72:1B:91:87:EF:B9:AC:3C:FA:5A:86:B9:72:81:0F:7F:01
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1656
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ga2ZchuRh--5rDz6Woa5coEPfwE.roa
Signing time: Fri 19 Apr 2024 12:53:29 +0000
ROA not before: Fri 19 Apr 2024 12:53:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5718 (0x1656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 12:53:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=81AD99721B9187EFB9AC3CFA5A86B972810F7F01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:b4:58:e6:5f:50:bf:13:3e:31:19:f4:08:
58:85:06:d6:ef:70:57:89:32:eb:9b:43:00:e9:93:
78:96:d4:02:89:8c:cd:36:49:6b:db:4c:6c:ce:59:
15:32:fa:6e:ee:85:6a:a2:a1:74:e6:15:53:64:2c:
79:4d:8e:83:ee:db:69:7c:66:bd:4c:c9:fb:bb:89:
4c:75:27:f4:f2:3b:4d:1d:39:21:e9:62:0c:a1:47:
4f:5c:25:1d:6c:00:bd:1e:1b:b2:28:f6:87:be:5d:
7f:f6:45:29:a1:89:e9:7e:d7:cf:78:c3:79:7d:fc:
61:5a:75:91:bc:5a:58:b1:ac:06:b2:a0:73:84:cb:
52:8e:14:d5:1e:95:93:ce:b3:2c:89:bc:8f:d5:4a:
26:35:89:bc:80:52:2d:2d:42:dc:44:a6:25:2e:da:
56:f5:f3:51:3b:5b:92:5c:ec:bf:c6:72:9c:11:b0:
7f:14:75:62:04:50:8e:cb:20:fe:7d:2b:dd:03:88:
9b:d8:c6:75:fa:01:95:83:a5:68:2e:31:01:3f:11:
58:ce:ec:55:27:55:57:d1:a9:d0:19:ee:24:7e:04:
72:ed:fd:7b:f8:09:58:ae:27:6a:d3:d3:5a:b8:8f:
4f:d9:ea:c3:45:0e:10:e1:ae:74:ec:f1:9e:c6:73:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AD:99:72:1B:91:87:EF:B9:AC:3C:FA:5A:86:B9:72:81:0F:7F:01
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ga2ZchuRh--5rDz6Woa5coEPfwE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:b2:dd:b8:bc:bc:dd:4b:77:26:d9:1a:a5:a3:ca:9e:5d:dc:
a7:a8:20:52:c2:ca:78:b0:e9:73:87:49:39:82:1f:7d:b6:dc:
dd:82:0e:62:b8:dc:21:dd:20:99:e2:00:bc:ef:45:5b:fd:ca:
cf:40:44:56:90:a7:ff:19:f3:c1:dd:f7:d4:aa:05:4f:ce:9c:
de:e7:46:11:b8:c7:91:a6:9d:0f:bc:15:99:3a:32:b2:50:0e:
db:e3:2d:f7:57:05:cc:d8:1b:62:d3:da:99:52:0a:51:f0:cc:
2c:70:1c:e5:da:d8:85:96:64:fe:21:7f:81:62:2b:64:33:ea:
2d:c3:98:e1:3d:1d:05:fa:08:af:50:f0:ca:63:e9:db:44:d9:
1b:f7:b3:f0:be:19:24:10:54:f9:b3:06:f5:b4:bd:c1:ac:71:
26:cd:70:80:f8:61:79:46:73:b3:50:9a:36:e2:ca:df:29:56:
ce:87:4d:a4:fa:0f:9a:f3:9c:99:69:a0:0e:8a:a1:9c:3a:fe:
5b:d7:6b:d4:44:72:db:fb:62:b7:10:87:38:3f:1b:e0:a3:38:
41:8f:5b:67:1f:d2:0a:53:f8:78:03:f1:5e:ab:33:86:71:3a:
9c:21:7a:6b:66:d6:a1:5e:2c:d5:71:7f:7b:ef:e4:d1:b8:9e:
27:a3:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:36 2025 by rpki-client