Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/-4jBfoqPPPBXcYJyVAZVrjxMQoE.roa
File: -4jBfoqPPPBXcYJyVAZVrjxMQoE.roa (raw, json)
Hash identifier: 5Ujun/L7ekfutfQL/QOiCYTqyVtvaO6P8yGKf54xnm4=
Subject key identifier: FB:88:C1:7E:8A:8F:3C:F0:57:71:82:72:54:06:55:AE:3C:4C:42:81
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1566
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-4jBfoqPPPBXcYJyVAZVrjxMQoE.roa
Signing time: Wed 17 Apr 2024 00:53:32 +0000
ROA not before: Wed 17 Apr 2024 00:53:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5478 (0x1566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 00:53:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FB88C17E8A8F3CF057718272540655AE3C4C4281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:c8:25:29:82:ab:38:57:f1:76:57:db:0f:
6e:b9:62:c0:a4:63:df:54:d8:8f:5d:6a:bf:d6:ed:
48:13:fe:15:3f:c5:70:bb:8c:ff:4e:e3:22:5e:51:
42:7d:20:a7:06:ad:15:5c:6f:06:62:1b:3f:82:07:
30:ed:c2:77:38:9f:e5:00:59:88:84:b1:25:bd:cb:
97:01:9f:fb:27:28:9e:0b:f5:ce:7c:08:4c:5d:73:
c6:18:86:de:37:e8:d2:3c:d0:f2:5f:fb:e2:6f:e1:
0f:97:cb:23:b9:f5:b4:01:4d:0c:ae:f3:49:93:db:
94:ae:a4:b1:8a:9f:9b:1b:9c:47:74:de:82:31:a7:
a5:b9:b2:39:89:1a:e0:b5:37:f4:c5:ec:fe:ae:c3:
c5:14:b9:91:59:4f:c4:0d:69:0e:f8:1b:b4:44:47:
a6:fe:58:ad:47:d0:7e:d2:f0:2e:63:70:3a:88:1b:
86:b5:6b:0a:5c:a7:0f:3a:19:e5:fd:35:a2:39:cc:
95:16:31:0a:4f:de:ee:91:30:43:16:a0:81:fc:e3:
34:2b:db:b3:38:f2:16:19:12:8a:ec:d6:df:6e:e3:
7e:02:11:8f:3d:92:a5:86:75:23:4d:7f:45:a5:7c:
4d:c4:2f:c1:5d:55:bc:fa:69:0c:e6:fb:52:99:23:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:C1:7E:8A:8F:3C:F0:57:71:82:72:54:06:55:AE:3C:4C:42:81
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-4jBfoqPPPBXcYJyVAZVrjxMQoE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:f1:8d:8d:4f:b3:a1:b5:8a:36:b3:67:84:20:80:fb:d8:12:
6b:f3:0d:e8:b5:7b:6f:3e:30:e7:ea:eb:4f:71:63:07:6a:1c:
f7:96:25:be:70:fb:b2:7c:07:e8:b7:b5:e0:f6:b6:c3:fe:e0:
fc:0b:20:bc:37:b8:25:b7:47:f6:8c:11:e4:83:10:d5:9c:9b:
21:1f:a0:4d:5f:04:46:f3:3a:25:4f:e3:98:15:a7:5f:cd:d9:
fb:7d:8f:fc:56:e9:7c:5f:f9:71:a0:df:27:09:49:2d:04:3d:
40:cd:56:ea:4d:e5:30:66:0e:85:b6:cb:1d:93:e9:53:e8:d8:
2d:54:a7:dd:79:f5:04:b5:ba:b1:3d:ac:ed:a7:65:d8:c2:0a:
28:04:3c:b2:05:ec:b2:b2:06:40:45:f3:81:9e:6b:12:f3:9b:
28:79:ce:ca:ce:18:43:03:99:ba:19:73:18:39:aa:9a:60:86:
a7:a1:cb:7a:85:6a:82:fa:a1:ce:00:f3:10:1f:a2:a7:c1:3c:
3f:6f:62:7b:2c:d3:b4:6c:f6:23:be:99:77:d8:ae:bc:4b:1d:
ac:3b:15:da:5f:6e:b8:25:1e:f0:74:90:1e:83:82:03:8f:01:
6a:15:84:c4:7c:1d:a6:8e:16:9c:68:14:0d:18:50:b4:e9:0d:
69:ab:06:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:29:40 2025 by rpki-client