Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/xRLetCQE-q2jvuAZB-Yb5Y27R_o.roa
File: xRLetCQE-q2jvuAZB-Yb5Y27R_o.roa (raw, json)
Hash identifier: 6GbQmP7RStltQDRr+dmNOh0a++vifwx8A27/aEPOUug=
Subject key identifier: C5:12:DE:B4:24:04:FA:AD:A3:BE:E0:19:07:E6:1B:E5:8D:BB:47:FA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1600
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xRLetCQE-q2jvuAZB-Yb5Y27R_o.roa
Signing time: Thu 18 Apr 2024 15:23:27 +0000
ROA not before: Thu 18 Apr 2024 15:23:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5632 (0x1600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 15:23:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C512DEB42404FAADA3BEE01907E61BE58DBB47FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:4c:cd:65:1f:c4:66:0d:26:05:64:f8:8a:
67:d2:1d:7a:c7:f8:5b:b5:85:e2:79:33:df:77:43:
de:ff:b8:8e:9c:a0:bb:6e:00:9d:76:02:52:e1:f7:
92:27:b0:e7:31:66:1e:71:db:3c:bc:2e:cd:77:f8:
b4:1c:f5:a0:8e:7f:8f:fa:97:49:18:5c:98:9d:8a:
eb:24:3d:ac:13:34:8e:4b:29:39:24:c2:8d:b5:c6:
8f:1b:d3:26:03:23:c4:88:c4:f9:f1:19:5e:ea:80:
0f:6f:78:23:7b:43:11:8f:40:f4:d9:35:51:bf:91:
b4:84:2b:03:31:a0:7e:67:a5:63:5e:21:23:f5:47:
ef:f7:a2:99:ea:e9:6b:7b:5e:6a:7f:20:f6:fc:87:
7f:74:7a:aa:a6:3a:25:7c:59:d1:71:7b:52:ed:53:
6b:40:aa:10:9e:fb:02:5f:48:d0:dd:a4:31:0f:47:
79:e1:4c:a5:f3:1e:c7:52:0c:51:d9:07:bf:6b:cd:
38:42:6b:7b:d6:27:74:e4:f1:80:cd:f8:e0:e9:d0:
47:e8:1e:98:63:3f:42:ff:a5:b7:8d:ee:d3:6e:c1:
f2:5b:49:e6:e0:e0:0d:e8:9c:71:25:1d:8c:4f:c6:
01:c1:13:2f:78:50:69:50:9f:5d:94:bd:1d:93:73:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:12:DE:B4:24:04:FA:AD:A3:BE:E0:19:07:E6:1B:E5:8D:BB:47:FA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xRLetCQE-q2jvuAZB-Yb5Y27R_o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ab:50:69:9f:e1:00:1b:ef:1d:13:45:4a:1b:f2:b4:42:ef:29:
cc:fd:e1:6f:80:fd:f1:e5:c3:ca:3d:d4:31:6e:7f:90:48:be:
bd:6a:c7:40:ff:cd:01:1d:32:d7:e9:9a:fe:7a:65:ef:1a:ee:
a0:59:d8:03:f2:3e:da:a9:07:46:4c:b6:96:2a:ba:c0:c1:8d:
d1:e7:78:03:53:48:b3:39:e5:e3:e9:f8:c8:d5:0b:71:ce:ac:
4a:11:6c:6c:73:be:9e:d2:d2:f9:e6:de:c3:ba:2e:7c:d4:e2:
7c:8b:8e:b0:0d:91:ed:88:2b:28:18:df:98:df:41:7d:e5:d9:
0a:94:52:ec:e4:36:39:c1:05:8b:03:f1:2f:e5:d4:e4:2b:63:
f8:7d:b2:bc:e8:47:e1:17:bd:d3:12:b3:2e:37:d1:c4:33:9e:
48:fb:e2:b7:d3:5e:bb:12:6d:7b:9c:10:31:4c:54:89:5d:64:
b9:b6:5a:99:c8:76:94:35:fe:52:d8:c3:dd:ca:5d:a5:87:62:
41:5b:b4:4a:31:b8:89:af:62:e2:6b:06:a5:89:43:22:c2:72:
f4:5d:4a:1f:bd:3d:ba:6e:56:a0:fc:2c:72:3b:2a:6c:d8:aa:
5a:f5:e2:70:14:dd:26:a2:cc:e2:39:65:21:36:bd:0a:6f:75:
c1:e9:8d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:56 2025 by rpki-client