Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/2TethQqsnvcQWCvNmpRkb9m2YYo.roa
File: 2TethQqsnvcQWCvNmpRkb9m2YYo.roa (raw, json)
Hash identifier: wiAO9q35K3dgbOK/bbnkWuYGZIzOZrQ2u+WbCDkqt+Q=
Subject key identifier: D9:37:AD:85:0A:AC:9E:F7:10:58:2B:CD:9A:94:64:6F:D9:B6:61:8A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1966
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2TethQqsnvcQWCvNmpRkb9m2YYo.roa
Signing time: Sat 27 Apr 2024 16:53:48 +0000
ROA not before: Sat 27 Apr 2024 16:53:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6502 (0x1966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 27 16:53:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D937AD850AAC9EF710582BCD9A94646FD9B6618A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:67:8f:d7:3a:b3:3a:20:78:22:5d:95:16:
fb:f1:2f:d9:53:49:04:d4:57:f8:56:bf:46:fc:9a:
4c:a9:cb:52:2a:5f:9c:97:7e:90:12:ca:3b:40:e2:
6f:88:92:2b:82:22:73:27:80:96:16:6b:cd:0f:e4:
c7:c4:ad:2e:fe:2b:d3:a4:79:e7:0a:ea:77:36:28:
49:78:7f:f5:22:ff:d1:3a:57:59:5e:0e:af:90:62:
da:85:c4:de:f3:35:54:e0:ce:ca:3e:10:38:f1:b5:
1c:fc:9c:5a:8b:79:5e:a1:7d:73:cc:2d:f2:9e:09:
36:a0:9a:f2:a3:6f:a1:f5:29:c6:20:a2:36:cd:95:
99:ba:42:7c:a8:50:7b:15:e6:b7:5a:2c:77:d8:c0:
10:5f:b0:5a:31:cb:81:6d:20:c4:84:86:e2:bc:cc:
c5:ce:24:85:b2:6b:ff:a7:c1:6b:a8:c8:42:aa:01:
7e:9f:4e:2e:a5:a0:f3:7a:e8:20:d8:c3:90:02:30:
79:7f:09:22:5f:84:56:46:70:7d:bb:24:dc:7e:f9:
c8:19:6d:7e:d7:75:b0:0f:c4:06:b8:d1:ab:de:d0:
0f:22:d3:ff:a6:af:5b:88:00:ea:d3:da:9a:c4:ed:
60:37:ea:d5:10:87:96:c6:ce:35:6d:85:1c:0b:96:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:37:AD:85:0A:AC:9E:F7:10:58:2B:CD:9A:94:64:6F:D9:B6:61:8A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2TethQqsnvcQWCvNmpRkb9m2YYo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:e4:5d:bd:d8:11:8a:4d:e8:6a:21:0f:b5:dc:70:13:d9:d8:
12:44:ba:8e:07:d0:9c:84:66:ee:46:4f:fe:9e:28:83:8b:5b:
f8:e2:1f:d5:11:5a:93:59:7c:25:71:22:ca:f5:7f:d6:99:48:
23:e0:2a:e6:b5:d5:99:b2:7c:0a:83:9a:92:a8:bb:c4:c2:43:
cf:fe:2d:43:4b:0f:a8:28:06:47:6c:ba:35:52:fb:5b:2e:eb:
fd:cd:0d:36:33:1b:02:bb:e0:d6:54:f4:c4:ea:fc:db:8d:27:
41:30:13:73:17:37:b0:b6:c3:7c:39:37:bf:52:3d:73:f1:51:
9b:43:ba:ee:20:e3:50:73:b6:71:21:ef:9b:d1:8c:d6:a6:1c:
57:3c:f3:55:9a:1d:ed:fc:f2:b2:6c:df:af:9d:fe:94:1a:0d:
fc:44:2d:48:80:a3:04:9b:94:45:60:2e:ed:f8:a9:81:a4:31:
d5:24:bc:2c:b5:c2:ce:50:45:27:43:9a:c0:d3:4a:68:0d:5e:
77:1c:89:bc:93:81:21:97:74:32:73:7b:56:1a:44:56:17:f4:
ee:a6:e2:c4:e2:7d:02:66:54:31:97:09:4e:75:d2:9c:38:e3:
2a:cd:95:8c:c0:c1:6f:09:e3:a3:f5:ec:8a:05:b6:9b:ee:7f:
42:f5:0b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:57:19 2025 by rpki-client