Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vJ0wDIwuiekPFUGwmlLstiepiCs.roa
File: vJ0wDIwuiekPFUGwmlLstiepiCs.roa (raw, json)
Hash identifier: CWCe50TFBdd96dHSfTYWDUnReYRcw8DGMNt+kpdAqus=
Subject key identifier: BC:9D:30:0C:8C:2E:89:E9:0F:15:41:B0:9A:52:EC:B6:27:A9:88:2B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B20
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vJ0wDIwuiekPFUGwmlLstiepiCs.roa
Signing time: Thu 02 May 2024 07:24:07 +0000
ROA not before: Thu 02 May 2024 07:24:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6944 (0x1b20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 07:24:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BC9D300C8C2E89E90F1541B09A52ECB627A9882B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:88:3a:05:e5:31:e8:fa:9e:5a:e6:c0:95:
37:6f:bb:cf:14:61:08:9b:ca:00:68:0b:0d:5d:25:
db:a0:d3:5e:02:95:c6:f5:26:0e:67:44:c5:aa:1f:
69:c3:59:18:c3:c8:0a:ef:83:97:83:95:b9:64:9f:
30:ff:fd:40:2b:61:d9:8d:fc:69:5a:36:49:21:a4:
83:a6:a8:9a:8f:c4:49:dd:a7:38:a7:84:c0:cc:b9:
e0:8b:22:3e:c5:29:31:83:d7:89:2e:6d:32:ee:dc:
e7:b9:3a:a0:78:ef:7d:8d:c4:fe:64:e8:a4:46:c6:
73:da:80:68:e6:2c:35:f8:e1:36:25:96:cc:f2:32:
92:90:c2:aa:85:42:01:18:27:4d:27:67:a9:12:87:
f4:14:7b:b9:f4:c6:68:0b:bd:35:25:96:85:99:d6:
64:11:9d:97:00:f4:1f:f5:cd:27:2b:e8:9f:11:df:
d1:92:b5:01:6b:71:4a:a5:98:cc:66:20:f9:f3:f9:
dd:5d:40:68:46:42:fe:df:de:d3:6d:c1:71:91:73:
1e:36:bc:e9:09:df:e3:81:7c:9c:ae:40:69:4f:15:
19:d6:71:49:a3:b9:e3:42:8b:82:81:72:1d:b4:80:
8f:1e:7b:1e:cc:7a:69:df:3a:98:b3:6b:9e:f3:0f:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9D:30:0C:8C:2E:89:E9:0F:15:41:B0:9A:52:EC:B6:27:A9:88:2B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vJ0wDIwuiekPFUGwmlLstiepiCs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c3:a3:65:eb:58:99:71:57:3e:43:80:12:c9:97:7e:70:d9:f1:
a2:00:77:f0:35:a1:51:a8:d0:a7:2f:2c:8d:da:c2:66:80:4c:
cb:6e:23:ad:74:97:68:4b:94:50:53:38:56:c8:29:c0:1f:dc:
5f:e0:69:22:f1:4a:91:ee:32:95:d6:87:7c:4d:82:3b:90:cb:
d8:fc:06:10:ba:21:9c:e0:9f:ea:e2:39:ee:5e:4c:02:bb:67:
22:e9:a1:ca:b7:b7:f8:50:b3:1d:34:eb:34:c6:7c:3d:ce:4f:
e0:b6:e1:ba:2d:b0:eb:86:48:d5:0e:71:c0:7d:a9:0e:3d:c5:
13:6a:f7:e6:25:8a:79:03:83:f4:5b:cb:ee:ff:4a:76:86:8e:
c7:5e:e3:40:1d:4c:f4:44:4e:d3:06:d8:12:bf:6a:d8:b8:db:
47:07:ee:89:ef:2b:a0:0b:cc:8d:91:98:a4:17:57:00:99:56:
7e:9b:30:ce:cf:16:af:13:1f:86:fc:55:2b:0b:14:cf:24:ce:
6b:a6:9b:8a:a3:0a:b7:10:92:33:f4:04:e1:a9:30:98:fa:e3:
09:45:14:d3:91:9e:ca:13:d1:40:34:03:78:98:f8:0f:1e:8e:
f2:ce:87:33:19:9f:1e:3a:7e:08:cb:3f:30:41:a3:c8:2a:cd:
7e:31:b1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:19:11 2025 by rpki-client