Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/6QVGeV1QsD2y1KQpLbhIuwkJmeI.roa
File: 6QVGeV1QsD2y1KQpLbhIuwkJmeI.roa (raw, json)
Hash identifier: 1RGfsk6pASLVhnH/E+/QHYDl32sB4anOPQBu/CpucAU=
Subject key identifier: E9:05:46:79:5D:50:B0:3D:B2:D4:A4:29:2D:B8:48:BB:09:09:99:E2
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 12CE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6QVGeV1QsD2y1KQpLbhIuwkJmeI.roa
Signing time: Wed 10 Apr 2024 02:53:10 +0000
ROA not before: Wed 10 Apr 2024 02:53:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4814 (0x12ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 02:53:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E90546795D50B03DB2D4A4292DB848BB090999E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:ec:83:20:7e:a5:bb:f8:54:87:41:1c:7d:
84:0c:4d:0b:6d:b6:cd:01:9f:89:b8:e7:f4:4e:d7:
30:ea:4c:69:1d:02:54:2e:ab:32:a7:d3:7a:1c:c0:
39:6c:a3:ac:95:de:78:8e:88:ff:f9:24:90:87:96:
20:43:41:fb:53:ec:99:15:1f:66:6f:cc:cd:5d:b6:
38:13:54:ea:b3:1f:92:2a:a2:85:69:8e:d1:2f:34:
23:1b:bc:85:2b:87:0c:b4:fa:f6:36:7c:32:7d:f6:
1e:14:41:2c:67:ed:37:c6:17:3c:66:a0:21:54:a2:
01:5f:e5:c6:4e:62:b3:e8:15:cd:7c:05:e4:97:fb:
8a:67:a4:a9:35:13:99:0e:5a:24:80:0c:65:95:38:
b0:3d:81:45:52:5d:d4:c2:29:25:13:0f:a5:6d:cf:
ae:19:93:61:ef:30:6a:8e:f4:93:20:04:23:a7:2b:
fd:3b:13:b8:de:8d:6c:8a:67:42:0b:c8:e0:55:d5:
45:5d:f5:b5:26:9d:0d:e2:99:31:ff:74:86:d2:fb:
e1:ae:98:8a:4b:1e:72:ee:72:fa:fe:a5:0f:3a:78:
32:5c:ed:1c:7e:62:9c:5e:af:e3:0f:51:25:2e:84:
b8:e4:d2:18:d2:32:3c:0b:f7:b8:52:78:a3:a6:01:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:05:46:79:5D:50:B0:3D:B2:D4:A4:29:2D:B8:48:BB:09:09:99:E2
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6QVGeV1QsD2y1KQpLbhIuwkJmeI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:ec:8a:3f:3c:3f:c4:13:55:21:75:cb:40:f5:05:0d:a6:46:
6a:72:6c:9b:e7:21:e8:73:78:60:cd:61:34:98:3e:f5:fb:35:
96:2e:0f:a6:5e:5f:c3:53:e0:2e:7c:ca:dd:40:65:b9:9a:99:
4e:6f:26:16:38:10:47:f5:c5:bd:0f:e5:bf:46:9e:34:fb:d1:
94:9b:5a:8b:c3:cb:0b:20:66:af:16:f9:5f:f6:7b:ef:b5:46:
0a:18:b2:72:43:5d:87:98:72:57:e5:8f:bb:11:9a:5c:48:99:
a3:6c:c1:ea:c7:19:33:72:1f:4e:92:4a:e2:a0:39:6c:e2:63:
18:27:9e:88:11:a3:c4:a3:ff:4b:17:76:93:a4:b9:6e:88:94:
a6:9a:3f:d8:c3:55:36:e7:d1:2a:82:0e:e9:83:dd:b1:f9:62:
80:77:39:87:8d:f1:d3:e8:d8:d6:d7:d0:6c:08:90:61:26:2f:
ba:97:7c:cc:2f:c1:00:ba:55:e8:7e:a9:04:86:17:89:09:cf:
45:18:b5:87:4f:75:50:bb:11:e6:2c:40:7a:45:5d:33:80:b8:
d0:7d:f6:d7:58:31:5b:54:68:cc:f8:58:97:26:6a:96:aa:46:
96:e6:d8:70:25:8b:0d:61:fe:67:ec:11:74:49:51:2e:1b:4a:
34:2b:be:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:53:09 2025 by rpki-client