Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/6UuhMJQGD6c3v_YzzX756SvZTHY.roa
File: 6UuhMJQGD6c3v_YzzX756SvZTHY.roa (raw, json)
Hash identifier: B4C1xRrkHmKEJNK4wl7+iJxwe5aTUl0stUIR4u1STeE=
Subject key identifier: E9:4B:A1:30:94:06:0F:A7:37:BF:F6:33:CD:7E:F9:E9:2B:D9:4C:76
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 198C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6UuhMJQGD6c3v_YzzX756SvZTHY.roa
Signing time: Sun 28 Apr 2024 02:23:51 +0000
ROA not before: Sun 28 Apr 2024 02:23:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6540 (0x198c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 02:23:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E94BA13094060FA737BFF633CD7EF9E92BD94C76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:fc:20:f0:c9:e3:1e:f6:62:cd:5a:0e:c5:
c7:71:b7:26:9e:0e:ab:f8:c9:bc:3c:6f:31:81:55:
28:ff:3e:ae:b6:45:4b:6b:28:bf:46:83:30:72:3a:
a9:13:c3:6c:d8:78:77:98:dd:f5:bf:6c:55:56:cf:
b4:2a:f8:f7:bb:0b:a2:0c:eb:d1:15:4b:82:90:49:
57:df:5c:6c:ee:10:c2:d2:f6:a3:49:0e:2d:2b:40:
85:2c:fd:1c:7d:3e:96:09:55:5d:d3:27:03:8b:a1:
a0:c6:df:c8:bc:b7:ed:2f:ae:39:c9:65:f1:08:28:
fd:6a:1a:02:34:49:6a:d6:a7:f8:e8:40:73:ac:7c:
6d:92:78:c2:b5:e6:8a:60:11:03:6f:0e:b5:d1:1f:
93:b2:f7:45:29:63:d5:8e:c1:d2:f8:05:bb:98:58:
60:cd:83:0f:95:af:df:dd:89:ca:c3:e9:d8:5b:4b:
10:34:27:b4:b4:05:7a:4c:d8:85:e2:dc:8f:0a:8e:
33:ee:07:c6:46:ef:35:ba:1f:e9:40:34:e9:19:c9:
b1:94:3f:3c:26:0c:ba:d9:38:24:59:f8:3f:8b:e2:
04:32:79:c0:b3:f2:c2:41:f2:ea:08:fa:bd:8a:f6:
a8:36:53:99:28:06:b9:a3:91:14:5d:fc:0a:8f:25:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4B:A1:30:94:06:0F:A7:37:BF:F6:33:CD:7E:F9:E9:2B:D9:4C:76
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6UuhMJQGD6c3v_YzzX756SvZTHY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:cf:00:44:4e:73:67:2f:b1:bb:f3:93:5c:85:55:20:32:ff:
8f:f9:53:fc:a6:6b:05:ae:0f:3c:24:2a:02:7e:a6:e0:2b:2d:
a4:0b:04:03:0c:83:b4:bc:53:22:c6:cb:cd:87:d6:32:19:69:
3b:28:b5:2d:f5:ba:d0:90:44:5d:1a:ec:27:08:97:30:34:1a:
1c:2e:52:b5:06:16:e1:5c:3d:2b:69:a0:86:e6:bb:fe:b2:5b:
ef:bf:1a:46:f7:23:b7:cd:ad:1f:cf:a2:4b:1b:dc:0a:a1:67:
72:7a:3f:01:4a:f6:a4:0e:a3:6a:d0:72:64:e2:99:e3:04:22:
48:52:fd:51:12:30:5c:19:ea:7a:99:79:01:9c:ce:e5:4d:88:
bf:b3:de:e8:49:4a:aa:e3:dc:71:30:06:73:25:f6:97:64:09:
bf:f8:f1:d6:09:26:07:33:e1:0e:42:a1:96:ca:2b:04:e4:73:
9f:af:ee:3f:a5:b1:3d:3c:97:89:59:03:6c:1f:4f:bc:4b:09:
7e:70:d5:33:2a:80:d8:81:f5:9c:5a:14:36:29:05:52:85:86:
83:af:67:11:a1:67:84:82:ab:7a:f1:97:fe:fc:e6:a6:63:1b:
df:84:ed:ea:0c:fe:43:00:f7:ec:3d:68:9e:90:03:3f:f8:ad:
ff:76:a9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:54:13 2025 by rpki-client