Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/79MhkglsfNbZuw2XGtYL7b2vFBQ.roa
File: 79MhkglsfNbZuw2XGtYL7b2vFBQ.roa (raw, json)
Hash identifier: Unm5D4MhBOKxXPB7bAnNommR5vVK9avedMn7gD/rlWg=
Subject key identifier: EF:D3:21:92:09:6C:7C:D6:D9:BB:0D:97:1A:D6:0B:ED:BD:AF:14:14
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CD0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/79MhkglsfNbZuw2XGtYL7b2vFBQ.roa
Signing time: Mon 06 May 2024 19:24:28 +0000
ROA not before: Mon 06 May 2024 19:24:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7376 (0x1cd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 19:24:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EFD32192096C7CD6D9BB0D971AD60BEDBDAF1414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3e:7d:5c:80:b6:41:78:a7:b2:7b:d6:c9:d5:
7c:6c:72:22:6e:ee:ff:2a:0d:8c:9a:26:42:d7:dd:
f2:93:b6:a2:aa:d5:a2:d6:8c:2d:68:91:28:ab:36:
94:2b:6c:77:41:76:65:6c:25:82:a3:30:4f:60:06:
76:f3:47:b8:96:32:0a:20:53:c4:f6:35:c9:f0:e0:
f0:29:f2:d2:7a:f7:ab:c4:d0:36:87:61:5c:03:b1:
ea:7c:4a:ce:92:fc:77:20:16:90:b8:f7:70:21:39:
a3:13:d5:5d:c3:2d:01:59:b5:9d:9b:0a:56:10:93:
31:46:9d:18:ef:a4:17:39:88:17:22:07:0d:cf:3a:
4d:f9:a0:b0:3c:58:40:be:5e:90:97:26:4d:06:03:
1a:7a:92:06:75:2e:ba:0f:cc:78:5d:76:73:1e:1e:
62:99:2a:54:3c:88:d6:75:4d:bb:22:00:f2:45:e9:
04:61:0a:61:a0:b7:cd:ed:de:23:12:69:98:c5:61:
e9:d1:54:96:c2:c3:41:4c:a1:14:34:8f:b1:d3:db:
4a:fd:7b:bb:27:87:c1:57:3b:87:25:b0:45:04:0d:
f7:06:93:36:76:83:bf:97:ea:68:e4:2f:43:ae:af:
3c:de:79:1f:1f:c5:41:49:e3:a0:97:5c:5a:1a:ba:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D3:21:92:09:6C:7C:D6:D9:BB:0D:97:1A:D6:0B:ED:BD:AF:14:14
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/79MhkglsfNbZuw2XGtYL7b2vFBQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:fb:56:80:07:40:80:40:2b:75:41:5b:cd:4f:85:ac:2d:14:
e4:9e:4c:f3:20:c9:81:d5:65:31:a7:18:54:07:a5:01:77:71:
48:33:76:d8:b3:6f:9a:8a:14:9e:e7:af:5a:9c:a0:26:29:e5:
19:3c:19:5c:0d:03:f9:19:6d:43:50:e3:de:30:9f:8f:5c:b0:
37:27:9b:3c:c7:c8:1b:1d:ff:92:d0:9a:35:1c:30:8c:c1:d2:
18:a7:28:06:ed:b4:0a:63:93:c8:ec:b9:e1:2f:c9:e0:0d:22:
85:42:8d:90:6c:48:a2:ff:df:31:4a:ba:8d:6f:97:88:73:c3:
39:ce:7e:b8:85:3e:04:bb:7a:90:a2:03:3a:c2:bb:74:94:cf:
1f:a4:ee:b4:58:12:cc:ce:de:2c:d3:66:76:14:9b:a4:e9:69:
8e:11:5b:33:51:b2:2c:67:9b:89:0d:9d:49:cc:d0:e0:cf:2e:
8a:c8:ca:7b:db:82:ba:20:f8:1f:52:ed:78:ca:cd:e3:9d:81:
4a:84:9b:95:af:0c:aa:44:fa:35:c5:1c:26:77:3c:8c:7d:69:
72:03:aa:e2:f1:ee:25:19:26:93:6c:6c:60:0a:ee:35:c4:85:
c4:cd:01:e4:4c:7f:a1:ec:e1:e6:41:10:dd:bc:34:26:e4:fe:
81:44:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:52:25 2025 by rpki-client