Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/smx9M6ubEaE7hdW6M1LyCnm2tpE.roa
File: smx9M6ubEaE7hdW6M1LyCnm2tpE.roa (raw, json)
Hash identifier: oqoPF2/kxh78hv8NhdPuyaOrwqy/Wqz+kbIy4da6ObY=
Subject key identifier: B2:6C:7D:33:AB:9B:11:A1:3B:85:D5:BA:33:52:F2:0A:79:B6:B6:91
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F5E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/smx9M6ubEaE7hdW6M1LyCnm2tpE.roa
Signing time: Sun 31 Mar 2024 22:52:35 +0000
ROA not before: Sun 31 Mar 2024 22:52:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3934 (0xf5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 22:52:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B26C7D33AB9B11A13B85D5BA3352F20A79B6B691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:0b:b2:c9:f6:c9:e1:73:93:c4:6f:65:87:
b8:50:d4:61:3a:63:1d:f9:06:34:7f:b2:cf:a3:22:
d8:1e:a4:54:4e:ff:d3:2a:59:e6:89:5b:62:1d:11:
07:08:a7:ae:ba:d8:ac:cb:58:b1:59:49:cd:7b:6e:
f1:26:9e:34:5f:f9:22:fc:ce:a1:da:63:f1:d9:17:
c9:0f:7b:93:5e:48:7f:48:7e:5b:4d:51:b7:1f:75:
60:36:cc:90:17:7b:d0:41:d4:8e:e7:18:ef:03:91:
58:1d:62:ba:40:2e:dc:17:11:51:47:b3:7a:8f:a1:
e7:a1:e3:02:d5:4a:74:a1:b3:d7:d9:89:8a:ba:0d:
c9:9a:28:5a:d0:35:37:06:1e:5b:2b:7f:1b:e6:4f:
71:34:95:81:c9:7b:ed:7e:92:2f:9e:9f:8c:09:e3:
73:14:62:b9:16:88:f1:80:59:20:52:4f:f7:f1:f2:
89:ac:c9:03:5e:29:a7:16:46:56:a3:36:7d:25:30:
29:3e:30:4e:90:0e:24:50:b9:cd:ed:8b:6b:dc:11:
f3:84:ac:37:57:ac:3d:27:10:c4:61:9c:6f:7f:d9:
6b:87:a8:53:2d:1a:13:b7:e9:96:a8:b8:9d:48:0f:
e4:51:fe:f4:c0:a7:9c:cb:5e:f8:98:96:c9:61:ce:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6C:7D:33:AB:9B:11:A1:3B:85:D5:BA:33:52:F2:0A:79:B6:B6:91
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/smx9M6ubEaE7hdW6M1LyCnm2tpE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:7e:73:1a:66:c5:57:23:f2:ee:00:bb:f2:5d:29:c0:45:67:
75:cf:52:3d:84:a3:7a:f1:d6:50:9d:c8:87:9e:9a:08:ba:83:
4f:93:30:85:8a:ae:0e:c3:61:f6:f3:d3:6c:ec:87:e1:59:5b:
90:1f:b7:2b:b8:57:df:d6:f6:5e:bd:1a:95:25:35:ed:0b:10:
29:15:58:1f:5b:8b:16:0e:c8:00:4d:ba:70:0b:1b:e2:27:19:
dc:6d:d2:65:46:8c:df:86:c6:cc:75:76:87:ce:4a:bf:3f:1c:
b5:00:fb:04:2a:2e:0f:f5:d3:e2:c0:c4:f3:eb:94:87:96:db:
5a:b4:ed:95:17:c7:ee:59:07:c0:d0:11:98:33:73:25:d8:60:
9b:b6:c6:00:33:ca:b3:3c:fe:67:9d:7f:54:05:16:68:29:ca:
2d:41:ab:39:56:db:8e:9a:0c:d3:56:bd:52:92:f9:71:c2:71:
20:62:19:a7:6e:27:52:5e:73:df:bf:dc:ec:d1:f4:e6:da:ed:
4d:fd:11:8d:72:f0:65:14:2a:f1:89:34:24:da:38:b0:75:64:
f2:3f:77:d6:ae:f1:64:77:aa:7f:00:30:25:4c:cc:28:e7:7b:
f5:03:e0:4e:07:64:e8:31:c1:54:cc:8b:7c:fe:5e:b0:b4:db:
8d:b0:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:07 2025 by rpki-client