Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/243Hps_u3-jiv0VEn2cJDYb2voE.roa
File: 243Hps_u3-jiv0VEn2cJDYb2voE.roa (raw, json)
Hash identifier: 28ZBxomgwpA4rPLOcmtTnMDq2vtvgYXNIlXrH0M++dE=
Subject key identifier: DB:8D:C7:A6:CF:EE:DF:E8:E2:BF:45:44:9F:67:09:0D:86:F6:BE:81
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 199E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/243Hps_u3-jiv0VEn2cJDYb2voE.roa
Signing time: Sun 28 Apr 2024 06:53:52 +0000
ROA not before: Sun 28 Apr 2024 06:53:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6558 (0x199e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 06:53:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DB8DC7A6CFEEDFE8E2BF45449F67090D86F6BE81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:b8:8f:48:66:9a:76:4c:80:02:20:28:1e:
a0:e8:92:23:fe:1a:53:d5:80:b3:78:91:c5:10:28:
43:57:e6:87:22:4f:6e:aa:76:32:dd:33:7c:ce:2f:
2a:b1:95:b1:61:51:87:f1:49:c8:79:48:e0:ca:a1:
a2:46:c6:69:2b:57:fc:34:6f:31:a7:68:63:2f:15:
6f:b8:7f:65:a3:06:e9:13:d3:8d:4c:a4:1a:4a:31:
1f:c3:c2:30:d8:04:e0:9b:89:de:5f:82:29:21:26:
a6:f1:5b:d6:0a:3d:8e:ef:dc:61:97:ea:f0:91:32:
b2:50:98:b3:d9:37:aa:69:e2:0d:f7:91:1b:e7:d5:
9a:72:15:39:da:33:8f:ce:22:84:36:05:a4:be:26:
e2:61:f9:e0:d9:fa:e4:8f:b5:b9:04:6d:c2:9b:5e:
0b:4a:b4:bc:98:26:f9:10:44:d8:a4:5f:2f:05:74:
74:9f:71:73:54:6c:d0:59:d0:95:9c:2f:e1:94:b2:
1b:60:3c:01:2c:24:4d:98:16:fa:0c:78:38:f0:e2:
22:c4:37:89:19:74:68:4d:56:f9:7e:5d:79:eb:95:
40:43:9b:31:e2:91:b3:a7:6a:8d:1a:2f:51:1f:71:
66:aa:f8:86:19:1f:a5:2d:6c:a1:6c:3e:e3:54:d0:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8D:C7:A6:CF:EE:DF:E8:E2:BF:45:44:9F:67:09:0D:86:F6:BE:81
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/243Hps_u3-jiv0VEn2cJDYb2voE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:34:ae:f9:d7:65:89:5d:16:96:54:27:e0:b9:cb:52:4d:41:
8f:97:24:d7:a4:ff:92:3e:d1:df:e0:04:88:ed:d7:6a:c4:fa:
71:d3:de:0c:7d:c9:90:66:19:ef:df:99:36:11:c8:b5:5a:d0:
2a:2e:95:5c:df:5f:5a:a2:43:26:b7:2b:76:f0:3c:e5:bd:f8:
e6:e7:c2:8f:e4:aa:46:b3:65:c5:20:75:86:b4:d5:d8:a6:0d:
9f:bf:69:84:3f:f0:93:ff:ed:7d:49:f7:91:f2:ec:2e:36:91:
f8:f3:0a:bf:b8:03:61:5c:cd:7e:ef:5b:be:03:1a:53:66:f7:
5d:72:02:8a:8b:d2:a8:52:c2:5f:5e:f4:b7:48:71:38:15:23:
7f:67:ac:96:5f:f5:0c:ec:24:e5:0e:09:51:78:5c:a5:63:6e:
31:de:92:f3:8f:77:e7:0c:77:7c:02:86:b7:76:d6:3a:23:c3:
90:be:df:af:c7:89:17:2c:bb:39:4f:b2:c8:75:ff:e2:ba:26:
61:b5:0d:0a:36:24:32:cc:a3:56:2b:38:79:d5:c4:f7:48:b4:
5c:ec:98:83:4d:58:33:15:10:f9:38:31:5b:2c:fd:e4:10:3f:
f4:e9:77:b5:91:a1:1a:5d:fb:ea:d3:cc:aa:bb:d9:62:a4:6c:
30:cf:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:42:07 2025 by rpki-client