Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/iKkgxfyTXHZVPvjr7-jlRglgWvk.roa
File: iKkgxfyTXHZVPvjr7-jlRglgWvk.roa (raw, json)
Hash identifier: Csq3DOYlnu0iWrb8XFAtzas6wCVAMxM/TE1nn5rfDm4=
Subject key identifier: 88:A9:20:C5:FC:93:5C:76:55:3E:F8:EB:EF:E8:E5:46:09:60:5A:F9
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 11A0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/iKkgxfyTXHZVPvjr7-jlRglgWvk.roa
Signing time: Sat 06 Apr 2024 23:22:56 +0000
ROA not before: Sat 06 Apr 2024 23:22:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4512 (0x11a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 6 23:22:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=88A920C5FC935C76553EF8EBEFE8E54609605AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:dd:29:e3:9e:0a:1e:a1:0c:72:89:f6:12:
b0:78:37:99:87:ff:96:d8:1d:b8:39:d4:7c:4d:d9:
9f:23:0d:f4:6b:e4:45:ba:6f:93:f8:b9:3e:1c:a1:
5a:34:c3:f1:02:87:b4:0e:e2:e0:97:d5:ca:8d:8e:
8b:3c:05:e5:e3:36:7c:e5:9a:d7:f3:e3:d3:7a:ba:
51:91:fc:4c:0d:a2:41:6b:c2:45:0e:a0:8c:a7:d5:
73:22:e3:85:02:36:e2:cd:55:7f:10:73:80:f5:cf:
d6:7b:4a:93:04:16:32:f3:15:fd:b4:6b:f1:37:0a:
7c:87:a9:0a:80:3a:91:33:34:96:92:2f:36:e4:c9:
ca:5e:1e:4a:14:82:2c:c2:c1:5b:76:32:71:9d:0d:
0e:e3:a6:e3:66:e9:3c:19:29:58:c7:c3:11:62:5b:
e3:de:4f:85:85:5f:9c:89:fe:83:dc:a8:14:d5:2c:
d1:7c:b3:b2:1f:04:4b:ba:27:d8:51:6a:35:48:28:
94:cf:a4:48:10:8b:a7:d7:c6:4f:4f:8b:64:4e:78:
8c:fd:d4:c7:1a:e2:5f:eb:8e:09:07:75:d6:71:e9:
71:4d:82:0d:de:7a:2d:63:56:22:9c:9e:f4:50:84:
6a:e6:e9:bf:ea:8f:85:84:41:a0:f0:60:9a:96:07:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A9:20:C5:FC:93:5C:76:55:3E:F8:EB:EF:E8:E5:46:09:60:5A:F9
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/iKkgxfyTXHZVPvjr7-jlRglgWvk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:49:ff:0a:81:b1:42:a9:fc:e9:c3:41:e4:03:09:37:28:05:
14:df:58:0b:1d:8a:eb:9e:3f:5f:a6:9e:7e:ec:ab:d0:cb:81:
a4:a9:ed:3c:5e:f5:a5:cb:18:ce:cf:d7:42:5e:f8:8b:10:3f:
66:f4:93:13:4c:5c:ff:45:89:77:7e:25:0a:1f:4b:ec:2f:7a:
e3:35:17:c1:15:2f:ff:11:a2:d0:67:00:46:7d:c7:08:51:a1:
90:ed:f7:42:36:b9:af:c7:15:f4:51:20:1e:61:36:01:d3:53:
71:27:66:d6:d9:6a:e6:0a:4e:93:1b:eb:4c:46:3d:86:e4:cc:
54:4e:66:e5:86:23:a6:c8:e9:99:6a:1a:e1:7f:9d:66:b2:1f:
ff:1a:1f:90:c1:a4:82:4f:51:d5:39:4f:51:fd:70:7f:a1:f1:
b5:85:03:5d:9d:45:cd:68:e4:f1:3f:a1:93:8e:ca:1d:d5:88:
f1:55:a8:64:13:f2:42:0b:9c:36:c7:fe:5e:5b:01:e0:c9:bc:
81:8d:80:cc:61:93:6d:e0:df:7d:f4:07:d2:3a:4a:00:64:5d:
10:bf:53:b7:94:e7:1e:13:5c:4e:6f:b1:a2:fc:85:b8:94:22:
dd:27:b8:13:9b:0b:23:50:ba:f6:f1:0d:64:f7:4c:a9:9f:d3:
8b:50:fc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:59 2025 by rpki-client