Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/1JKPssgfGoXv_rhh0c2Grli0lZU.roa
File: 1JKPssgfGoXv_rhh0c2Grli0lZU.roa (raw, json)
Hash identifier: ZTwNJ6EtVEoq7HUWIUc7khe8PemM0U7YtgQQ7THseFA=
Subject key identifier: D4:92:8F:B2:C8:1F:1A:85:EF:FE:B8:61:D1:CD:86:AE:58:B4:95:95
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 182C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/1JKPssgfGoXv_rhh0c2Grli0lZU.roa
Signing time: Wed 24 Apr 2024 10:23:39 +0000
ROA not before: Wed 24 Apr 2024 10:23:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6188 (0x182c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 24 10:23:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D4928FB2C81F1A85EFFEB861D1CD86AE58B49595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:d4:6d:a3:70:f2:7e:52:9a:b4:61:af:00:
d0:7b:c1:42:09:22:e1:d4:68:82:21:c7:12:fb:70:
a6:1c:c8:63:21:23:2e:76:cd:8e:7f:1f:43:80:34:
00:4c:23:45:75:94:9c:2b:8c:09:89:72:75:79:b9:
3d:5f:0a:9b:cf:83:06:63:88:07:86:c1:38:ca:36:
03:12:8c:0c:34:9c:bf:92:8a:db:3a:3a:01:b3:fc:
34:af:a1:02:b6:7d:62:d1:34:81:ff:94:41:31:1c:
86:cc:13:47:a5:27:28:3d:1e:3e:7c:00:f8:0b:57:
6b:76:14:ec:8f:17:51:d2:ff:73:73:ea:4a:62:b3:
80:29:2c:78:db:0a:03:0c:30:53:6f:f8:8e:df:c9:
03:cd:4f:67:85:ff:0c:1f:b5:26:eb:1b:cd:f1:7c:
ff:67:fb:a2:78:a9:8b:b4:0d:22:48:66:24:28:cf:
a2:df:4c:a1:53:6b:09:17:74:ef:16:ce:f7:6b:e2:
b9:11:17:53:0c:74:1c:74:2f:65:2b:bf:d6:17:10:
94:2c:db:8a:b7:fc:cd:27:10:93:fc:a1:62:9a:c8:
0a:56:d3:6a:65:49:f9:60:3d:49:83:8e:5a:39:e0:
87:4a:a3:3f:6b:dd:d1:5f:44:4b:c1:56:a4:85:73:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:92:8F:B2:C8:1F:1A:85:EF:FE:B8:61:D1:CD:86:AE:58:B4:95:95
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/1JKPssgfGoXv_rhh0c2Grli0lZU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:2c:6b:5d:41:f0:f2:16:bf:0d:55:e1:1e:3e:a3:8f:df:65:
c2:ec:dc:24:3c:2c:5f:e4:61:15:08:fe:70:08:72:bf:ae:67:
54:30:39:8c:2f:86:bb:5e:4d:b9:02:a1:de:f2:db:1e:ff:02:
1e:07:7d:e2:da:f2:92:97:83:e4:14:b1:28:1a:f3:47:84:47:
a8:59:a9:ec:66:ee:c3:e8:84:f4:da:86:79:fe:4e:4a:90:a3:
03:d9:d1:c9:11:bc:f3:58:4d:a8:ac:6a:91:0c:05:38:a4:33:
0f:3b:c0:05:ad:74:fb:9f:5b:1a:af:fb:60:49:62:eb:6e:ad:
cd:7f:f3:05:95:92:ce:3c:0c:93:47:db:32:b3:db:41:cb:1e:
23:28:20:ab:2f:93:5c:94:a7:21:c2:fc:2c:21:63:4f:89:2b:
58:58:78:5d:52:77:c4:c8:24:63:72:8c:c6:a8:4b:0f:93:aa:
15:d7:97:06:9a:58:77:74:fe:3f:d7:1e:8a:bd:1a:43:09:33:
07:bf:9f:b7:3e:64:27:5e:8d:cc:d5:c8:4c:64:b6:6c:c0:76:
8f:6b:23:30:ce:f7:52:ab:70:01:be:60:4e:7e:09:37:83:8f:
e0:80:69:27:0a:b8:93:a0:e4:4f:47:43:e3:e3:4f:9e:da:08:
bb:66:fb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:48:08 2025 by rpki-client