Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/jC2rYSvB1z_PxsmiBbVh2gNfFgI.roa
File: jC2rYSvB1z_PxsmiBbVh2gNfFgI.roa (raw, json)
Hash identifier: K0IcgRB2cJp8k7H032c398P3LKrPdVjCBrX+m8/BrSs=
Subject key identifier: 8C:2D:AB:61:2B:C1:D7:3F:CF:C6:C9:A2:05:B5:61:DA:03:5F:16:02
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1504
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jC2rYSvB1z_PxsmiBbVh2gNfFgI.roa
Signing time: Tue 16 Apr 2024 00:23:19 +0000
ROA not before: Tue 16 Apr 2024 00:23:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5380 (0x1504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 00:23:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8C2DAB612BC1D73FCFC6C9A205B561DA035F1602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:86:41:77:d7:34:2b:4e:d4:d2:cf:a6:3f:82:
ee:09:01:d3:39:dc:54:f4:ba:d1:dd:92:66:74:d2:
35:f3:30:b4:b9:03:d8:6c:e6:46:ad:72:a6:c4:f4:
c5:3d:73:6a:65:6f:17:e7:f0:c4:cd:51:f6:3e:f3:
7a:c9:1e:51:f4:eb:85:c5:47:8b:0a:ff:05:bf:ae:
17:fb:14:05:42:ef:9a:6c:06:54:99:8e:2b:41:e0:
13:7e:36:39:b0:87:d8:91:eb:cb:93:28:76:16:92:
b4:9f:94:08:f1:a3:8c:6a:e5:a7:4f:e8:d5:17:4c:
72:28:2c:dd:c8:75:88:4c:e6:14:b5:43:64:a9:1f:
a7:37:1d:f7:9b:9b:c6:8b:8f:b7:d1:3c:c9:bf:34:
b5:e5:06:59:d6:69:ae:8a:c3:f2:66:29:ee:e1:72:
4b:6b:a2:1f:9a:ad:6e:cc:f3:c2:79:38:59:47:c4:
ce:65:4d:23:75:27:a9:f6:bb:12:f3:47:75:fd:99:
14:de:ab:5e:47:0b:f4:85:33:5c:0f:df:eb:db:c0:
48:3d:95:06:4f:47:cd:2b:f1:51:8d:a7:75:78:9c:
ef:92:b7:1b:05:17:f1:22:83:3f:34:f1:73:9a:e9:
fa:b3:d5:a5:75:55:7f:8c:7a:4c:50:23:9b:74:c7:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2D:AB:61:2B:C1:D7:3F:CF:C6:C9:A2:05:B5:61:DA:03:5F:16:02
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jC2rYSvB1z_PxsmiBbVh2gNfFgI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cd:38:fd:ba:79:5e:b9:a5:37:59:9f:ff:1a:0e:4f:71:33:6e:
1d:e9:5f:31:46:80:c1:71:5a:b3:36:c3:6d:1a:52:18:5d:b8:
a7:54:23:0a:5c:36:5c:ca:c5:9b:6e:38:00:d6:db:17:4c:f2:
d0:ad:77:f9:b4:66:4b:8d:0b:a8:3b:99:2e:b4:16:c3:be:71:
94:e0:68:61:7d:6e:9b:65:8a:dc:42:e1:e9:10:02:be:64:2a:
14:29:c2:13:79:93:d7:7d:51:27:a6:48:a5:50:27:35:b6:8a:
22:2d:24:37:54:e4:b4:8e:a1:ae:a2:38:63:8e:a7:f8:c7:aa:
43:2d:e5:32:6b:c3:78:06:4b:15:c3:e8:5f:ec:92:28:30:ec:
c6:82:34:7c:5a:34:43:8c:12:31:46:9d:e8:73:ee:e0:f2:3d:
8a:fe:a0:bd:6f:4e:1b:29:d2:e5:cb:26:fb:04:71:cb:0d:6e:
0d:79:54:48:18:9b:8a:a4:5d:6a:ff:0a:2e:02:b9:30:48:64:
4c:46:c1:cb:f1:ab:85:9f:60:6e:02:71:9d:43:9d:8c:eb:af:
22:b6:2f:ac:c7:ac:1f:50:e2:8a:b8:59:16:d6:06:88:a2:1b:
0b:6b:47:b4:d5:b5:92:df:7c:bc:c6:74:da:62:95:0b:95:20:
62:64:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:01 2025 by rpki-client