Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/69s8btIakmkUcT1YketBaQQUpIs.roa
File: 69s8btIakmkUcT1YketBaQQUpIs.roa (raw, json)
Hash identifier: nU1Rsz921uOEVFeLZZgL31EXU0l+3OudsMKwkhj5LCw=
Subject key identifier: EB:DB:3C:6E:D2:1A:92:69:14:71:3D:58:91:EB:41:69:04:14:A4:8B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 11B8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/69s8btIakmkUcT1YketBaQQUpIs.roa
Signing time: Sun 07 Apr 2024 05:22:53 +0000
ROA not before: Sun 07 Apr 2024 05:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4536 (0x11b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 7 05:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EBDB3C6ED21A926914713D5891EB41690414A48B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:9e:32:52:0b:7e:bb:b7:56:7d:86:65:46:
b2:8d:e8:8f:f5:af:2a:b1:d2:4c:3e:5e:2c:4f:df:
bf:45:dd:8a:d9:81:d6:fe:c9:12:73:4c:38:82:b5:
56:d6:7e:5c:ce:50:43:e1:bf:97:22:99:83:24:e6:
9e:dd:ff:ae:5b:8c:06:7a:1f:71:b0:92:71:61:95:
65:c9:a6:d9:3d:0a:d9:51:7b:7e:f1:37:f7:09:a1:
23:73:ab:9e:61:91:c1:e9:bb:7d:13:ac:0e:cb:ec:
3b:da:9a:7b:a3:7d:ec:71:73:ef:02:66:c2:51:10:
3f:ee:89:a1:10:b9:a8:56:86:fa:89:2b:e9:39:43:
14:af:6d:b3:c2:d2:bd:38:47:ee:1c:0e:2c:15:fe:
6c:4c:ee:29:0e:3a:2d:fd:52:d9:95:d2:dd:2d:89:
36:61:f8:06:c9:8d:6c:76:f5:02:d0:8f:fa:d6:c4:
4b:e2:be:eb:6b:3f:10:44:3b:14:96:7a:13:3c:1c:
37:5e:53:f4:24:5f:82:b6:9a:31:0f:ca:c1:b0:2e:
0f:03:f1:60:09:0e:e7:a8:26:84:5b:6b:3e:27:b7:
22:db:1d:cf:fb:4b:73:05:3a:09:97:fc:b2:e3:08:
a3:2b:d2:2b:24:98:af:ea:60:85:81:a1:8e:f0:6b:
19:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DB:3C:6E:D2:1A:92:69:14:71:3D:58:91:EB:41:69:04:14:A4:8B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/69s8btIakmkUcT1YketBaQQUpIs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:58:9e:6d:a3:e6:d7:bb:15:29:9e:db:13:c0:da:be:80:83:
50:aa:0d:5c:09:6d:c6:f8:8c:c3:c5:f4:34:5d:41:b6:0f:02:
f4:a7:1b:fd:0e:d3:ba:f1:c0:81:a8:a4:0b:9d:31:ee:09:c9:
ff:5f:a4:31:33:d8:50:11:c7:24:f8:a5:fe:5e:f2:9e:51:87:
60:f1:9d:d9:6a:f9:f0:4b:35:52:b1:6b:6f:e1:c7:4c:ea:bb:
3d:1c:ce:fa:9f:f8:27:03:c7:52:bc:3d:53:fe:35:37:48:33:
f3:1e:d8:28:72:49:8a:ff:05:f7:6a:58:1a:16:e1:06:f2:a2:
70:fa:33:0c:9c:31:4f:84:b6:ac:ef:3e:79:a5:56:1a:e1:90:
f0:eb:c4:aa:4d:68:66:04:15:8b:46:c6:54:39:88:f1:2a:45:
3e:55:a4:aa:95:c8:53:ac:cd:04:4b:a3:55:6f:f0:06:d4:be:
10:cc:47:31:3d:44:d4:d0:0a:d5:a8:4d:3f:22:d8:06:ad:ad:
c7:5c:c6:6f:f6:b8:b4:fd:10:74:a2:a6:96:0b:5d:4f:16:40:
63:73:d7:3b:19:c2:17:c5:b6:4f:be:e4:cf:39:6a:92:45:1f:
d8:37:68:17:59:22:1c:f9:3e:c2:33:e1:94:f1:fd:21:99:b0:
6b:00:4c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:48:51 2025 by rpki-client