Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/75BKnWAErTD2pumTRLtMs5m0pbI.roa
File: 75BKnWAErTD2pumTRLtMs5m0pbI.roa (raw, json)
Hash identifier: KHfHsbX94qKY5FV55wJ7Iau24qq+zRoVUoLukzqzC44=
Subject key identifier: EF:90:4A:9D:60:04:AD:30:F6:A6:E9:93:44:BB:4C:B3:99:B4:A5:B2
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1506
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/75BKnWAErTD2pumTRLtMs5m0pbI.roa
Signing time: Tue 16 Apr 2024 00:53:29 +0000
ROA not before: Tue 16 Apr 2024 00:53:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5382 (0x1506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 00:53:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EF904A9D6004AD30F6A6E99344BB4CB399B4A5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:1b:b7:45:70:1c:7b:42:0a:7d:9c:83:76:
8a:2d:36:81:87:b4:ee:76:21:a4:57:b5:96:a6:92:
4d:16:bd:b5:fd:50:e7:fb:f1:ac:be:5f:93:39:c8:
4d:d1:35:a7:2f:e0:8e:d3:38:4f:09:7d:19:3f:f3:
c4:18:c2:a5:d6:c5:5c:a8:6b:e2:9a:4c:84:6f:86:
d3:29:ca:ee:e5:30:f7:cf:3d:a0:e6:f2:ce:a7:12:
60:ca:8a:ac:57:a7:38:a4:24:cb:1c:8b:d9:bb:93:
55:5f:f9:03:53:e6:d9:b6:22:9c:8a:01:0d:7d:5d:
9c:7a:e1:63:b8:28:cd:3a:f1:d6:a1:d2:ac:cb:83:
1a:65:75:3b:fb:5a:2c:6b:5a:3f:53:ed:6b:7b:f3:
a4:66:3e:f7:2a:5d:a9:d2:18:1e:58:9a:64:4c:d3:
96:dd:13:2e:bd:a5:aa:80:9e:64:04:7b:b3:a0:b0:
4a:f7:f1:26:cc:46:95:c0:67:9d:c5:68:b5:f6:09:
37:b1:db:54:bb:31:31:bd:63:bf:16:26:f4:31:c7:
db:30:24:61:71:39:e3:57:b2:de:e9:8b:3c:f7:68:
6e:5d:3c:a4:70:2f:5d:9c:d6:f3:6f:fe:ac:a1:35:
33:41:8a:51:68:89:5a:ee:36:ae:3b:d2:70:5b:f8:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:90:4A:9D:60:04:AD:30:F6:A6:E9:93:44:BB:4C:B3:99:B4:A5:B2
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/75BKnWAErTD2pumTRLtMs5m0pbI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ab:8e:8d:7e:a8:e8:9a:60:b0:b8:09:74:16:1d:59:4b:b9:93:
cc:4e:fd:04:6e:a6:ab:5c:c1:14:43:39:dc:b7:47:8c:29:4a:
39:ff:c4:a9:a8:bd:73:e7:cc:66:0e:a4:db:fa:18:b3:c6:14:
89:13:46:93:a3:ab:b9:07:fe:6d:c9:e8:d0:49:de:cc:37:5e:
b8:9d:df:b6:57:f4:38:7a:42:bc:8d:2f:d3:17:79:d0:07:42:
6e:28:36:7e:15:74:b3:3c:d9:1b:7b:cf:c3:f6:8d:ab:81:49:
58:74:de:5c:a6:a3:1b:a1:7f:0a:e4:f8:c3:f1:00:f2:85:ca:
1c:f7:d3:db:49:93:04:50:80:2f:71:35:d5:d4:41:ce:ad:d9:
fb:10:9f:cf:80:e5:67:24:24:c5:3a:9e:ff:63:ba:26:28:96:
24:2d:b3:25:e8:88:22:41:1d:73:21:bd:81:7c:12:f7:90:64:
e8:64:9e:0c:95:c9:44:5e:e3:46:98:e2:ca:bd:2d:e0:d5:4f:
92:22:08:33:46:ca:08:61:c4:b9:b0:c6:39:7e:b0:c4:c5:c0:
04:f2:b1:89:4f:95:70:1e:5a:e6:28:62:c6:59:f6:c9:4b:88:
dd:ad:e1:d6:b2:d9:72:b7:29:95:8d:29:91:c4:b7:a7:a4:df:
8b:60:ff:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:54:05 2025 by rpki-client