Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/2V6B_jEuvGKDzzc3-DLSebNCT_Y.roa
File: 2V6B_jEuvGKDzzc3-DLSebNCT_Y.roa (raw, json)
Hash identifier: Of2N2gXJ7u5u/v58Q7BL3Dfz4WBsKVaC8FU8JV7RY/4=
Subject key identifier: D9:5E:81:FE:31:2E:BC:62:83:CF:37:37:F8:32:D2:79:B3:42:4F:F6
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 113A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2V6B_jEuvGKDzzc3-DLSebNCT_Y.roa
Signing time: Fri 05 Apr 2024 21:52:54 +0000
ROA not before: Fri 05 Apr 2024 21:52:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4410 (0x113a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 5 21:52:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D95E81FE312EBC6283CF3737F832D279B3424FF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:86:4a:55:ee:57:23:87:ac:3e:27:7d:51:b0:
51:f2:b3:30:52:0a:56:86:65:eb:32:d7:6e:7c:27:
58:a9:97:50:9b:a3:7b:a8:ef:4a:3b:6d:2d:57:b0:
b8:cc:96:fe:ba:a0:e0:83:cc:82:9d:5f:32:28:44:
b2:45:44:04:5e:14:ef:dd:14:99:3f:7d:d0:b8:09:
51:4a:7b:b4:33:5f:96:e3:e6:0b:4f:d3:33:65:db:
2d:10:05:ee:02:98:23:c3:87:4d:d6:0c:52:55:80:
bb:78:06:d4:5e:d8:d6:07:3c:24:c7:ff:dd:92:3a:
e5:af:f9:a3:1e:50:fb:4b:9b:7a:5a:e3:6e:b4:67:
bb:46:6a:69:9f:89:28:3d:9c:57:e0:0c:5f:37:05:
c7:94:a5:00:96:6e:91:88:3c:ff:5e:50:ad:1f:f0:
6a:2e:c1:61:6c:89:8f:f6:74:75:38:1f:26:7d:e3:
52:4c:27:4a:e9:cd:47:dd:22:9d:db:d2:1d:38:f3:
fc:33:02:93:56:7e:af:33:4c:82:9d:1b:5b:1f:5a:
e5:5b:c6:a5:61:c0:dc:ce:3a:0e:d1:68:a9:4c:14:
b2:93:49:1c:60:95:ac:87:8f:1e:89:cc:e5:f7:0f:
79:53:67:9b:dd:b6:ff:3a:74:81:2a:09:f3:75:5e:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5E:81:FE:31:2E:BC:62:83:CF:37:37:F8:32:D2:79:B3:42:4F:F6
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2V6B_jEuvGKDzzc3-DLSebNCT_Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:26:41:da:79:f9:a2:cf:ec:39:dc:5f:8a:d5:5d:88:36:71:
e6:a0:a3:3a:bf:89:b5:20:a6:0a:ef:e0:8a:2c:82:e9:aa:b3:
54:fc:3d:56:06:38:d6:91:00:39:a9:14:fa:d8:6a:93:72:62:
f2:cc:68:84:c3:fd:89:65:00:d7:4e:44:4b:2c:df:a9:e7:a0:
87:7d:92:ae:75:38:38:d5:c4:ff:76:9c:a9:5f:95:07:c0:47:
37:c7:2d:82:f0:95:c7:9b:5b:12:08:24:b1:c9:f5:2b:00:15:
d2:74:6c:5b:8d:61:24:d9:ef:9e:2b:d4:63:be:b9:62:ea:87:
35:3a:bc:48:75:aa:c6:7f:bb:24:16:f7:ef:32:dc:3b:13:8e:
60:65:71:9b:c6:68:1e:da:7f:d5:b8:b7:e3:49:12:89:4b:41:
f6:f6:58:41:0e:2a:8f:91:a3:89:3f:bc:3e:74:6a:37:d5:c8:
6b:07:f9:c3:51:5e:ae:8f:db:00:99:4c:d2:63:1f:5e:86:01:
c3:40:11:54:32:5c:90:70:c0:6b:8e:b6:35:bb:f1:75:20:f6:
52:be:7e:65:b8:c5:aa:d3:34:c5:ff:20:91:65:e2:d9:23:9d:
49:0b:b1:1d:8f:53:3b:8f:05:0d:a6:5f:8e:92:d4:d5:e9:e8:
c5:3c:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:42:13 2025 by rpki-client