Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/1aJwenuwxXMb_aj_dtvDdPxBHNQ.roa
File: 1aJwenuwxXMb_aj_dtvDdPxBHNQ.roa (raw, json)
Hash identifier: 9U/ifrd3Lyn1MW2pHHu14MNytnEDsVh/aeU3WHNgVzU=
Subject key identifier: D5:A2:70:7A:7B:B0:C5:73:1B:FD:A8:FF:76:DB:C3:74:FC:41:1C:D4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 18EC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/1aJwenuwxXMb_aj_dtvDdPxBHNQ.roa
Signing time: Fri 26 Apr 2024 10:23:45 +0000
ROA not before: Fri 26 Apr 2024 10:23:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6380 (0x18ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 26 10:23:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D5A2707A7BB0C5731BFDA8FF76DBC374FC411CD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:27:5d:51:62:6f:49:e3:20:96:34:4b:1b:
42:31:a2:7c:db:c9:80:8e:d3:55:42:51:5f:f5:a4:
72:e2:79:d0:07:00:a1:0b:fb:62:c6:fc:d7:7d:70:
f7:4c:bd:1c:ea:15:53:18:45:0b:81:07:dd:fd:35:
81:5e:e0:09:45:18:aa:2e:9f:54:c4:9c:a1:1a:ac:
96:4a:50:e9:7b:f0:9c:08:d3:4f:9f:b4:32:0a:6c:
c5:d1:58:ab:9c:b1:e3:d2:df:86:3e:ad:3e:c6:91:
c7:83:fa:bb:8f:aa:03:d6:00:9e:6b:e1:2a:5b:50:
72:0b:88:65:ce:ad:10:0b:ad:85:79:06:fe:46:38:
c2:8f:de:01:0b:41:05:95:f9:15:4d:a3:62:2c:c0:
79:0d:20:df:d4:fc:cd:c8:7a:f5:5a:d1:90:24:0a:
93:f0:63:b1:80:0a:d9:af:96:93:50:b5:d5:66:6b:
7b:f5:61:0c:5a:8c:eb:7c:ab:ee:d8:0e:ac:65:48:
38:ae:97:13:0d:1a:b0:c2:08:52:54:3c:cc:60:bf:
89:11:34:7a:86:b3:98:2a:db:fc:df:e2:a3:85:1d:
96:0b:3c:61:d0:45:52:a6:0f:16:4a:d1:7d:70:bc:
97:70:be:1f:3f:94:89:c7:e1:4b:24:d3:b6:2f:32:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A2:70:7A:7B:B0:C5:73:1B:FD:A8:FF:76:DB:C3:74:FC:41:1C:D4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/1aJwenuwxXMb_aj_dtvDdPxBHNQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:df:09:12:c5:11:d2:67:42:e7:01:74:06:6e:2e:38:3d:7e:
a9:8b:94:00:2f:ee:65:f0:ed:de:ac:a2:10:68:37:35:b9:3e:
fe:4a:cb:d0:d5:6c:ad:c6:f9:80:c9:4f:6a:93:05:7c:ad:e0:
ab:e3:86:3c:7c:eb:3b:00:e6:1a:88:58:59:8a:b6:da:97:c2:
6e:d7:83:c4:a9:e9:f0:1a:cf:90:e1:23:f6:80:ac:55:69:c4:
8c:84:37:79:52:79:2d:7a:f3:e7:aa:0d:c6:cc:6e:4a:32:a7:
92:c0:e0:05:89:db:8d:2d:39:e8:35:f2:f3:30:67:c6:81:f9:
e1:e0:6a:42:a7:42:38:bf:eb:a8:9a:2a:2f:7e:94:90:18:61:
bd:40:34:8e:75:c6:08:4f:3c:0e:9a:6f:a7:68:be:e1:0d:35:
96:3e:bc:dc:94:34:94:5a:e0:dd:52:7a:33:70:ae:7d:ef:55:
8a:33:37:4a:a2:44:ea:68:83:c7:9c:33:ff:0d:8f:b2:46:4c:
9b:b7:18:22:d9:fe:34:07:4c:05:39:04:c7:02:3c:c7:d4:36:
69:a1:93:20:f8:b2:ca:8b:7b:20:8e:e8:15:96:15:55:41:5b:
9b:9b:df:7d:21:f0:b0:5d:90:0b:cb:6f:dd:0b:cf:d0:c9:92:
3f:cb:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:57:46 2025 by rpki-client