Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/m2wqodvvd6FWO4KF8vmfUbZPP1Y.roa
File: m2wqodvvd6FWO4KF8vmfUbZPP1Y.roa (raw, json)
Hash identifier: 79KXsKQNhmRbnm0bpHijGM7/El2ZEzTblSiMGMD7z3s=
Subject key identifier: 9B:6C:2A:A1:DB:EF:77:A1:56:3B:82:85:F2:F9:9F:51:B6:4F:3F:56
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B5C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/m2wqodvvd6FWO4KF8vmfUbZPP1Y.roa
Signing time: Thu 02 May 2024 22:24:19 +0000
ROA not before: Thu 02 May 2024 22:24:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7004 (0x1b5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 22:24:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9B6C2AA1DBEF77A1563B8285F2F99F51B64F3F56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:c8:ba:73:29:06:d0:db:dd:c3:0a:99:ee:
9f:d5:9d:ed:4b:58:c5:ee:75:92:18:95:b7:56:ae:
0a:36:33:bc:4c:e8:36:80:b0:21:14:15:10:cf:54:
34:0e:09:64:59:c3:da:4a:eb:f1:27:7f:a2:3a:4e:
21:82:c1:30:f5:11:6a:20:ff:e8:c7:47:d9:53:84:
cd:61:d8:fa:fa:d0:17:14:9b:e4:3a:37:db:ce:7a:
21:2f:c6:95:19:75:60:e0:51:a9:76:89:d8:06:4f:
75:b6:5d:c1:43:b0:9c:68:ed:1b:50:ff:39:55:b1:
3a:9f:f0:10:c4:38:85:ad:a0:e7:bf:c1:f9:0b:22:
d6:09:63:27:25:f1:b5:61:79:4f:93:3b:65:43:01:
8c:42:cb:7d:0a:b8:ac:11:19:ee:87:56:39:e2:de:
41:1f:82:a4:dc:cc:63:d7:3f:74:15:92:34:18:2c:
6e:25:40:b4:17:ca:cd:0b:68:09:8b:b2:aa:99:0c:
27:98:cc:96:51:55:50:40:06:5a:f9:11:49:92:e3:
77:b0:23:5c:3f:de:d1:3d:6a:22:c2:71:e3:7c:75:
53:29:aa:c9:e0:5a:98:06:af:31:c4:03:82:9e:5e:
de:b3:d3:e0:ff:f1:e7:39:cf:6b:0f:79:b1:38:ec:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6C:2A:A1:DB:EF:77:A1:56:3B:82:85:F2:F9:9F:51:B6:4F:3F:56
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/m2wqodvvd6FWO4KF8vmfUbZPP1Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:c7:b1:a4:7f:3e:af:05:6f:e0:ff:c9:9e:aa:c0:a3:42:90:
01:f1:2e:10:2b:ba:a2:66:dd:a1:b8:2e:4d:10:f6:be:e5:a4:
9a:d8:55:3f:12:40:55:e7:a4:53:52:43:a3:56:1f:80:b8:35:
81:b8:ab:2f:e4:d0:86:2c:a7:38:ab:2e:1b:db:9f:f5:02:7f:
c7:36:db:2c:48:f6:e4:4a:a0:3e:6f:f0:06:08:03:f6:c4:17:
b4:99:2f:1e:c3:4a:70:d7:0b:ca:42:cb:9c:91:9e:59:84:1a:
b8:32:98:e8:ce:59:3c:f8:46:61:fc:2f:60:a1:a7:d9:e7:f1:
91:05:b5:25:ad:93:a1:3f:20:7f:61:91:76:83:e7:80:1f:f5:
41:45:21:ff:99:fb:6a:30:3f:b0:9b:f4:f2:8b:3f:2e:0c:db:
29:ec:fd:d6:85:12:62:d2:43:f0:55:62:c0:e6:5d:3f:31:7f:
e1:33:8b:f5:5b:09:fb:d4:99:3e:00:40:09:42:bb:35:9a:43:
bb:6f:9b:1d:ae:ae:e1:5a:7a:af:23:83:dd:2f:2a:7e:a1:62:
38:1b:b7:7a:e3:f5:fb:81:3e:39:fe:13:7b:22:40:82:47:45:
db:9d:53:69:23:33:82:51:8f:35:3a:85:d8:f7:d4:95:ac:00:
9c:8b:2d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:19 2025 by rpki-client