Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/kOaq1UnCQxqqw3dEgP3dXEVvL3w.roa
File: kOaq1UnCQxqqw3dEgP3dXEVvL3w.roa (raw, json)
Hash identifier: 0DyN2MbE4jSmTvH1Pt9sxb/6MieWRG4FBjEQkyXKigM=
Subject key identifier: 90:E6:AA:D5:49:C2:43:1A:AA:C3:77:44:80:FD:DD:5C:45:6F:2F:7C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B10
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kOaq1UnCQxqqw3dEgP3dXEVvL3w.roa
Signing time: Thu 02 May 2024 03:24:05 +0000
ROA not before: Thu 02 May 2024 03:24:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6928 (0x1b10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 03:24:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=90E6AAD549C2431AAAC3774480FDDD5C456F2F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e5:f7:1e:a3:5c:57:64:71:6d:e7:5c:12:f8:
56:68:5d:f3:d5:7f:83:63:34:29:4a:04:ee:84:f1:
54:64:fa:8e:1c:6c:5f:d0:85:76:08:f7:e5:2e:6c:
b0:f6:53:b2:1d:38:26:ad:27:01:42:40:a0:c6:a9:
06:d1:e3:f2:94:57:32:72:12:8d:1d:99:7e:fa:6f:
50:31:8e:ac:5c:bd:59:d6:2d:1a:63:76:fc:43:ad:
50:b3:78:e0:1d:ad:01:7d:07:15:d3:25:68:20:7b:
1e:21:f9:3c:e1:95:b8:79:29:b1:0c:06:5a:9d:fe:
30:10:96:04:c3:35:80:8c:a5:bf:9c:02:eb:c4:3b:
f3:ea:cc:29:3a:9d:3c:4e:bf:8d:12:21:28:94:f2:
b8:1e:f4:e9:87:78:1b:45:dc:86:fb:2a:73:3b:8d:
e9:76:fd:9f:9f:63:41:57:e2:d4:bb:6b:8f:a9:b8:
db:1a:3b:1a:90:70:e5:b1:81:49:e8:de:2b:85:d4:
37:06:39:56:fa:16:03:a3:03:6e:40:86:f5:b8:23:
90:2f:4e:a1:57:f6:ba:89:10:21:0c:db:01:21:f3:
98:3f:e6:97:1e:5b:cb:f8:70:51:4d:7b:4f:fd:c1:
96:8f:c1:c0:da:e7:60:b4:bc:25:08:cc:5e:19:c5:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E6:AA:D5:49:C2:43:1A:AA:C3:77:44:80:FD:DD:5C:45:6F:2F:7C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kOaq1UnCQxqqw3dEgP3dXEVvL3w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:b6:db:2e:30:32:45:76:9f:6a:b7:4d:0b:db:73:28:c3:c3:
48:a8:8b:1c:14:31:04:dd:fe:da:47:c6:f3:20:8f:1d:6b:e4:
ec:8a:2f:2c:1d:fe:f4:6a:c9:90:f3:1e:01:04:eb:7f:97:0b:
d1:7d:5c:d7:55:ed:a3:8a:04:92:e8:84:fb:a0:fc:05:79:ec:
eb:be:e0:fd:0d:92:3f:24:f8:cc:29:7c:47:0a:86:01:77:bd:
8a:04:97:42:d2:46:01:d7:62:4e:a3:f2:7d:17:b7:7f:d2:bf:
91:79:27:71:81:cb:72:c9:32:64:4c:c0:83:aa:45:67:e7:61:
1d:18:27:db:8b:1d:f2:e8:26:d1:ff:48:6e:16:54:4e:35:6d:
00:2f:23:8f:68:80:60:0e:c6:2e:cf:c0:18:b5:22:b0:4f:4c:
ba:d4:a8:48:73:55:f2:f8:fa:a7:b6:0b:56:22:e7:9d:44:53:
b3:77:01:4d:d8:db:3a:12:eb:79:d3:66:0a:af:09:b2:64:82:
73:f4:b5:c0:6a:85:0f:ab:27:72:ea:0c:ca:93:2b:cc:fd:a7:
a8:ce:46:c7:f6:ab:18:00:a0:0a:3f:5c:08:c0:c5:1e:4c:46:
17:08:47:1e:17:fd:07:8f:c5:41:5c:2f:c5:11:ce:a2:e1:f2:
8d:ed:ba:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:07 2025 by rpki-client