Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/0vXfsaVG3fDlGX-SV3SZfM_4-38.roa
File: 0vXfsaVG3fDlGX-SV3SZfM_4-38.roa (raw, json)
Hash identifier: dNmsGGOerKFNNJmP1yxKR7jBDO14c1Y/fEkMFyndMkE=
Subject key identifier: D2:F5:DF:B1:A5:46:DD:F0:E5:19:7F:92:57:74:99:7C:CF:F8:FB:7F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B80
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/0vXfsaVG3fDlGX-SV3SZfM_4-38.roa
Signing time: Fri 03 May 2024 07:24:10 +0000
ROA not before: Fri 03 May 2024 07:24:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7040 (0x1b80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 07:24:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D2F5DFB1A546DDF0E5197F925774997CCFF8FB7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:43:d8:82:b3:0f:5d:46:3d:d3:bb:6b:b4:
84:5e:ef:13:cf:8e:e3:99:49:df:68:56:26:97:bd:
af:f3:80:63:2d:91:c2:cb:91:36:d0:e0:f5:ad:a0:
ce:78:5f:c5:7b:2f:e2:ed:9f:73:af:fc:a7:bd:38:
7a:da:00:b6:ad:59:e1:57:36:81:b9:83:63:8c:3c:
e7:39:27:e9:aa:99:9e:0a:89:e0:f7:3c:53:58:b9:
2f:3d:34:5b:4b:f2:32:e2:bd:b7:4a:e0:38:13:a4:
cc:3c:a7:8f:75:8c:41:82:a6:e0:be:ac:b3:00:74:
84:cb:c8:6d:19:e0:e1:5c:09:14:4a:fa:97:67:59:
73:10:bc:19:02:e2:32:8a:f5:d6:47:ef:8a:dd:bb:
4f:d8:21:e3:c0:8e:18:d6:af:53:27:18:67:02:e4:
c6:41:c0:22:2e:57:66:02:c5:d9:37:ad:d2:fc:62:
80:c3:79:04:0f:6d:07:df:c5:ce:6d:e9:46:3f:42:
7a:76:b5:4e:c7:fd:3c:26:cb:f1:27:06:14:b1:6b:
4d:e3:98:5c:10:a1:b6:a4:f0:bb:41:8e:7d:4f:8d:
b1:e5:ad:18:2c:89:90:3e:4f:52:61:fb:5c:09:d9:
78:30:81:5f:67:6c:c5:c3:76:84:c0:f1:65:ef:8e:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F5:DF:B1:A5:46:DD:F0:E5:19:7F:92:57:74:99:7C:CF:F8:FB:7F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/0vXfsaVG3fDlGX-SV3SZfM_4-38.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:52:e2:05:81:c6:2b:e3:39:78:fc:b8:3c:87:83:ea:2e:45:
83:85:33:8d:b8:f8:a2:0e:02:e3:75:ae:15:a4:65:b1:5d:39:
0d:f9:5f:8d:cf:21:26:6b:04:a0:f9:b2:d5:9f:77:bd:2d:ee:
8a:26:02:78:ac:52:f6:2d:02:bb:69:4c:2b:c4:84:3a:20:2c:
8d:98:1b:d7:2f:3e:a4:ab:19:08:b6:80:25:cb:99:1d:18:eb:
3b:42:96:1f:b9:5e:0c:8c:34:e9:09:cc:97:6d:58:80:37:3c:
cf:d6:0d:86:36:d8:d6:8a:83:ce:64:92:b7:53:3c:69:07:55:
1f:00:0b:d3:f3:ff:72:29:d1:3d:6d:12:93:f5:b4:82:f1:d8:
e3:cf:d5:54:29:3f:be:98:02:1a:e3:ce:34:f5:46:af:e6:b5:
ea:3f:16:84:47:6f:8d:a7:99:56:d7:00:cb:40:0a:13:f8:d5:
06:a1:3a:bf:f9:01:93:3a:1e:99:a2:ed:4a:62:ef:e0:b2:f8:
21:0c:da:25:b1:30:4c:a9:21:ea:8c:b9:b2:b2:a8:c1:6a:8f:
36:5b:3a:71:d4:41:73:01:3b:a1:85:01:aa:89:34:60:d3:59:
6e:5d:8b:ed:c1:b4:49:d5:63:4f:f4:5c:11:1b:99:3b:10:b3:
a6:a4:c5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:57:48 2025 by rpki-client