Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/uewoLehQfGfYmwo3PNtTx25Zj6w.roa
File: uewoLehQfGfYmwo3PNtTx25Zj6w.roa (raw, json)
Hash identifier: 5+cn/6Ys1AD4PgPAmE1q3sXbdzydmUW1lF1BXgZZTno=
Subject key identifier: B9:EC:28:2D:E8:50:7C:67:D8:9B:0A:37:3C:DB:53:C7:6E:59:8F:AC
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D66
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uewoLehQfGfYmwo3PNtTx25Zj6w.roa
Signing time: Wed 08 May 2024 08:54:23 +0000
ROA not before: Wed 08 May 2024 08:54:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7526 (0x1d66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 8 08:54:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B9EC282DE8507C67D89B0A373CDB53C76E598FAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:2f:ae:5b:91:13:9b:71:11:ce:e3:95:3c:
01:9e:53:12:bf:6a:d4:86:55:87:44:28:cb:06:a2:
6a:ab:5c:16:dc:c6:cd:b4:e4:ba:2d:69:be:0f:8a:
6a:32:84:77:c7:5a:f6:a9:c9:cc:08:e8:56:d3:6e:
e8:9b:26:0f:17:96:63:46:a5:ee:90:fa:b9:20:0a:
79:f8:a9:72:01:90:d5:ed:ce:d7:5d:5c:a9:2b:88:
85:d3:d6:2e:05:25:be:85:8d:8b:6f:ba:08:b1:04:
ee:1f:d9:10:f4:82:fa:ae:73:bc:aa:ee:1f:4c:63:
a4:45:8d:70:0f:47:dc:66:a1:6c:7c:22:a3:bc:fe:
f3:9f:78:53:c4:6d:26:3e:c5:f0:1e:ec:9d:b7:02:
19:a0:90:dc:26:33:0a:61:cc:80:c6:7d:04:b8:aa:
33:2b:b5:f6:2f:ad:72:fd:bb:16:b7:ed:56:16:5b:
db:95:cc:de:a4:3a:a7:39:75:be:e8:1f:b5:e5:72:
e6:64:df:b3:ab:79:df:35:e0:5c:d5:66:84:c3:ca:
1c:af:e1:d9:b5:4b:d1:45:47:6b:ef:54:89:83:f1:
f7:3b:ef:51:e8:86:73:48:45:49:3c:99:ce:92:11:
20:94:99:4b:45:19:cf:69:51:cc:d6:d9:91:89:7b:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EC:28:2D:E8:50:7C:67:D8:9B:0A:37:3C:DB:53:C7:6E:59:8F:AC
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uewoLehQfGfYmwo3PNtTx25Zj6w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:4a:20:d7:df:6c:cf:2c:53:2b:68:e7:37:fc:76:02:fe:ee:
c5:ae:3d:b6:f4:01:38:67:23:4f:90:c4:3b:d1:1c:a5:3b:dc:
f6:35:51:bb:4e:62:8c:bb:86:d9:45:f2:83:37:e7:75:e7:cf:
3f:60:96:f1:46:61:1d:3a:ab:ae:52:3e:27:15:63:10:96:69:
07:bd:1c:53:65:dd:3d:bf:34:2e:e9:30:b2:ea:f8:7b:c4:6a:
f1:d5:09:c0:69:0d:3d:3a:cf:98:c6:82:af:15:cc:d5:d3:63:
5a:66:f2:c4:21:88:b9:7d:eb:30:07:8e:18:a9:8c:d8:66:05:
13:a4:f9:e8:65:b7:96:06:24:db:c9:ee:92:e6:db:70:6b:1a:
e5:4a:5e:81:9a:30:75:3d:70:de:9a:af:e6:fb:79:c7:12:e0:
c8:52:ac:fc:2f:2b:d3:36:52:c9:60:14:3b:76:54:41:4f:79:
72:93:7e:1a:4a:99:ad:cf:f6:e3:8c:14:6b:ce:e1:f3:22:b7:
20:4a:73:8d:48:64:d0:b5:c2:7b:52:0f:e5:ce:20:d9:06:6f:
12:b6:b3:57:dc:98:04:de:b5:f1:cd:a6:07:ec:bc:94:af:c7:
4f:c3:01:1a:9f:5d:aa:e6:34:6a:f7:8c:2e:dd:ec:11:5f:14:
e9:6f:44:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:50 2025 by rpki-client