Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/tDmlTOfZexpHtVCSszrj6HJ1rb4.roa
File: tDmlTOfZexpHtVCSszrj6HJ1rb4.roa (raw, json)
Hash identifier: 8tRmVh1ZVuRIOMAlLp8dn7ToMdCComNihgpAJrmCXkU=
Subject key identifier: B4:39:A5:4C:E7:D9:7B:1A:47:B5:50:92:B3:3A:E3:E8:72:75:AD:BE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C88
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/tDmlTOfZexpHtVCSszrj6HJ1rb4.roa
Signing time: Mon 06 May 2024 01:24:17 +0000
ROA not before: Mon 06 May 2024 01:24:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7304 (0x1c88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 01:24:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B439A54CE7D97B1A47B55092B33AE3E87275ADBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:ba:2c:fe:1c:ab:8d:33:6f:7c:8d:b8:8c:
bd:68:3e:97:24:a5:75:70:6f:3d:73:79:af:a8:b0:
60:78:94:8b:74:fb:c7:d3:f5:74:c4:62:07:9c:13:
63:e8:74:51:f1:b1:5c:d5:a5:cb:a7:b2:00:94:e9:
3f:86:d4:d2:89:2e:76:6b:9a:19:64:86:14:a8:a2:
3b:5c:c4:9b:97:6d:cb:db:95:ac:3d:d0:e6:af:09:
5b:d8:26:50:38:70:4d:63:f5:6c:b3:52:5d:b6:61:
69:91:00:84:17:42:3d:a8:b3:9e:4c:19:c0:4a:4a:
06:9a:f6:a9:66:cb:e9:d8:0f:dc:eb:00:79:b5:8c:
6a:85:76:1a:75:9a:bf:de:2a:54:57:ce:f0:cd:8a:
15:46:bd:a0:0d:35:90:71:6f:1e:da:17:61:29:a6:
16:d7:46:41:2f:89:7d:e1:a9:16:a3:82:c2:49:4d:
e9:7a:c9:e2:55:f6:ae:7a:8e:6f:57:96:c0:8e:de:
c5:8e:39:f3:59:d2:36:ce:54:de:fe:a6:d2:8a:c2:
13:3e:a0:c8:49:2f:9c:a1:d8:60:0a:71:c9:2f:75:
36:34:eb:c6:19:ff:e8:98:b3:a0:a2:33:05:06:f1:
42:8a:21:08:6f:c8:af:9e:f1:c9:7a:92:8b:61:e3:
0b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:39:A5:4C:E7:D9:7B:1A:47:B5:50:92:B3:3A:E3:E8:72:75:AD:BE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/tDmlTOfZexpHtVCSszrj6HJ1rb4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:ad:8a:d5:69:51:c6:81:2a:4c:fd:ce:39:3b:ba:b0:de:36:
a5:af:5c:03:98:ed:a8:4d:57:a9:8f:ee:3a:30:0b:31:61:ee:
cf:d3:60:82:c1:d5:1b:e3:f0:d6:39:71:7d:ad:ad:4d:a0:1a:
cd:75:a9:ea:81:9b:8a:d2:c7:dd:aa:fa:86:f8:c0:1f:78:79:
27:05:d9:38:71:d5:40:75:2a:8f:a6:c9:89:a8:90:ee:ec:da:
f7:9f:60:81:fb:a9:dd:72:1e:a3:06:51:b3:1a:4a:83:81:47:
fd:0f:18:a4:70:5c:24:c6:4b:40:e5:8a:cc:a7:a6:a3:02:2d:
a8:c6:ff:b0:59:3a:20:20:54:ff:fb:09:25:7e:4c:c1:24:b5:
78:68:f5:b7:6f:9c:d0:f9:1b:8a:97:b1:a7:bd:7e:ef:2c:8f:
69:c1:cd:8f:e2:7d:9b:01:5b:db:cb:ee:fe:7d:2e:5b:01:7f:
ae:2c:9a:b0:df:94:6b:9a:e2:cc:5b:57:46:be:0d:8c:d0:da:
79:fc:75:a7:c4:58:0f:40:6d:b4:62:3a:fa:f8:bb:bd:11:9f:
a5:01:f8:a8:bd:86:34:0a:57:1b:e7:c1:ea:f4:32:b2:97:39:
c7:f4:42:20:bb:51:10:50:9b:6f:35:a7:d2:77:83:56:87:83:
01:b8:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:47 2025 by rpki-client