Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/uzT_GcdDv5BKFkdFn1VAUi2FFIo.roa
File: uzT_GcdDv5BKFkdFn1VAUi2FFIo.roa (raw, json)
Hash identifier: Y4FaRHziR2TWsKmn5we2LRdWk48iB1U8p1iikPCFgeY=
Subject key identifier: BB:34:FF:19:C7:43:BF:90:4A:16:47:45:9F:55:40:52:2D:85:14:8A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BCA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uzT_GcdDv5BKFkdFn1VAUi2FFIo.roa
Signing time: Sat 04 May 2024 01:54:10 +0000
ROA not before: Sat 04 May 2024 01:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7114 (0x1bca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 4 01:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BB34FF19C743BF904A1647459F5540522D85148A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:33:bb:f4:0e:c4:92:38:90:e9:3c:da:42:
3d:5b:d5:af:3e:5b:11:16:52:7d:9c:9d:cd:69:25:
0c:1e:cc:f5:2c:ab:d9:e6:26:1a:f7:4c:48:99:79:
dc:10:9a:0d:be:49:67:45:71:a3:2b:e1:ea:35:ee:
38:85:7b:15:9b:5b:40:1b:4c:86:3c:65:ea:37:ef:
54:8a:5b:8f:23:e9:37:93:b6:f0:03:6b:75:4d:a9:
be:43:15:cc:43:ed:52:d1:e5:aa:b2:96:13:f3:a7:
e0:d3:80:08:d2:e6:56:fa:79:23:1b:d6:af:ac:22:
b7:ca:3f:fb:dc:aa:ac:ed:6f:41:1e:17:40:1b:a8:
ef:43:a4:2b:9d:37:6e:5c:43:31:78:54:62:27:85:
3b:f3:06:c9:f7:06:eb:91:13:00:9f:7a:93:bc:00:
38:4e:95:b8:a1:33:b4:a9:40:d7:7b:6c:63:c7:4b:
af:dc:d1:fe:9c:92:22:0e:95:5e:21:6f:59:e4:c9:
0e:9a:c3:63:7b:38:cc:71:f2:66:18:2e:9c:0d:70:
b0:89:02:06:99:4a:af:93:af:6c:c7:be:d3:c6:f6:
8f:c7:21:c6:1a:1e:0e:5e:76:5b:e5:93:23:4d:d9:
94:b3:5c:0a:77:d9:ae:54:86:4c:5d:c1:5b:d8:24:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:34:FF:19:C7:43:BF:90:4A:16:47:45:9F:55:40:52:2D:85:14:8A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uzT_GcdDv5BKFkdFn1VAUi2FFIo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:2d:ab:72:de:a9:b3:95:9e:5d:ac:29:31:93:b0:41:d6:d2:
d4:91:7f:75:ac:29:d5:a4:1c:58:75:6f:9d:ca:78:0d:82:4d:
bf:30:eb:77:b3:b7:34:2a:25:70:4b:a2:87:fc:97:fb:b9:5f:
be:48:4e:a5:c8:cc:dd:eb:b0:0e:2b:6d:7e:aa:fd:f7:31:64:
90:26:f7:4d:96:37:2d:3d:cf:6e:70:18:32:89:0e:e0:eb:4b:
80:17:fa:de:f7:ae:8e:a2:b0:46:b8:a2:cb:f4:bc:3a:d4:75:
a9:74:cb:eb:d9:ef:aa:32:0c:8a:5f:ff:35:1b:54:23:5d:99:
dd:bd:58:3f:0a:bb:df:e6:8b:c6:a9:d3:87:b9:79:57:f5:e2:
39:15:f7:fa:29:e1:e3:69:19:72:12:3e:52:25:77:cc:7c:85:
cd:68:10:40:6d:22:13:01:ed:df:1c:b9:b9:67:29:be:b4:bf:
c5:11:8f:8a:f3:3a:7e:b6:6d:48:1f:e0:53:69:de:b6:23:0f:
d6:b3:aa:16:65:5a:19:17:ec:02:3a:ef:56:83:af:4d:92:5c:
5d:2a:80:81:f8:42:31:dc:a6:bd:0a:03:73:de:3c:43:7b:05:
02:53:3e:db:3e:b0:cd:af:45:94:78:d7:db:de:dd:2b:ec:ba:
c7:31:d9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:02:17 2025 by rpki-client