Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/jDV3_H5OwvPm73sVajGQFEBmJD8.roa
File: jDV3_H5OwvPm73sVajGQFEBmJD8.roa (raw, json)
Hash identifier: OxKTjr4KZIshux4thGxz4W+86nW603lXpS6h8qgEjHs=
Subject key identifier: 8C:35:77:FC:7E:4E:C2:F3:E6:EF:7B:15:6A:31:90:14:40:66:24:3F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 10FE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jDV3_H5OwvPm73sVajGQFEBmJD8.roa
Signing time: Fri 05 Apr 2024 06:52:54 +0000
ROA not before: Fri 05 Apr 2024 06:52:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4350 (0x10fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 5 06:52:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8C3577FC7E4EC2F3E6EF7B156A3190144066243F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9b:77:43:ed:66:a5:f4:b2:b4:01:92:87:b3:
19:f3:25:31:a3:4e:d0:69:82:d5:3b:eb:71:47:bd:
50:a4:0c:52:96:ab:6a:6a:7b:dd:b3:0c:48:5a:e8:
58:07:d9:f5:5c:e6:43:ac:d2:dd:c4:e5:4a:ab:2d:
2e:cd:45:16:ca:f7:b3:94:51:7a:8e:c5:8f:d7:04:
56:de:5e:0a:dd:b0:b1:06:4c:96:6b:76:98:0c:a7:
dd:61:7d:21:7c:ba:66:e1:81:bf:26:5c:27:c5:e5:
03:98:8a:5d:4e:8f:9d:5f:88:96:7e:c8:50:55:50:
24:55:b8:e3:c7:d7:c6:29:93:10:b3:39:91:fc:e1:
75:6a:ad:c9:58:55:b0:03:eb:28:90:4e:f1:4b:f0:
30:b6:d2:43:1e:0b:50:e0:af:54:0f:de:67:6b:dc:
37:4f:40:a9:d3:18:c6:77:24:57:52:59:9e:f3:e8:
99:d9:ea:60:43:30:6c:0f:2a:16:b6:c2:41:85:88:
da:39:51:7e:37:f6:cb:83:4a:54:28:ae:66:60:7e:
af:f9:f7:53:73:2c:d8:f0:83:b7:d6:eb:5b:83:c6:
90:11:73:c7:d5:9f:14:da:46:12:be:6e:cd:67:80:
61:10:80:56:de:5c:c7:20:91:8a:79:3f:29:b0:eb:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:35:77:FC:7E:4E:C2:F3:E6:EF:7B:15:6A:31:90:14:40:66:24:3F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jDV3_H5OwvPm73sVajGQFEBmJD8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:e8:00:cc:90:11:6b:4b:1e:02:87:a9:4c:a2:3e:26:15:ee:
4a:31:4c:02:46:dd:22:55:61:74:48:4f:be:1e:f0:e6:ff:d1:
9e:c4:8f:fe:2b:dc:c1:7c:3c:28:d7:bb:18:c3:3b:d7:6b:cb:
5c:24:5b:e0:50:49:10:de:da:11:18:17:e8:aa:de:45:a3:26:
cf:e7:57:a9:79:ff:03:f7:d3:9c:d0:b3:17:33:6b:29:d4:2c:
f6:49:1f:2c:2e:50:0d:49:0c:ce:eb:2a:3c:f5:a8:3f:96:bf:
02:1d:c5:29:95:84:68:43:4b:b4:d6:5d:d3:b4:b6:d4:32:c6:
b5:2e:4d:6d:ca:ee:67:17:2d:22:ab:14:77:22:d1:5b:67:54:
d6:55:b0:8c:95:2d:6a:cd:14:34:6d:1a:4d:8f:0a:ba:2e:ed:
ba:5a:bd:e7:60:fe:82:7d:be:0c:78:c8:24:db:09:a2:d4:9a:
8e:d6:ff:7c:a6:47:43:65:31:ab:21:d7:d4:5c:c4:78:e3:70:
60:42:f3:8b:f7:bf:76:67:12:28:cb:fd:f3:2b:ab:e6:38:4e:
48:77:dd:96:be:01:a9:d4:06:48:aa:2f:4e:cd:3b:1b:1e:19:
40:89:51:85:9b:bb:75:c5:87:d1:ad:8a:af:0e:07:48:c5:5c:
25:04:c5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:41 2025 by rpki-client