Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/7Qse--P8-Ux6oTQJZQsYVtGhpLQ.roa
File: 7Qse--P8-Ux6oTQJZQsYVtGhpLQ.roa (raw, json)
Hash identifier: bWoA27L8z0FBK9XASFOPQzDkKVteyZl4bqhBkcbtQ2U=
Subject key identifier: ED:0B:1E:FB:E3:FC:F9:4C:7A:A1:34:09:65:0B:18:56:D1:A1:A4:B4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EFC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7Qse--P8-Ux6oTQJZQsYVtGhpLQ.roa
Signing time: Sat 30 Mar 2024 22:22:35 +0000
ROA not before: Sat 30 Mar 2024 22:22:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3836 (0xefc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 22:22:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=ED0B1EFBE3FCF94C7AA13409650B1856D1A1A4B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:e2:97:be:b1:e5:e3:d3:62:11:a4:02:0f:
48:ea:9d:17:d5:80:d4:63:31:d3:51:71:0b:a2:34:
97:84:db:c1:a5:9c:93:6c:9a:95:e2:af:2b:5a:39:
da:53:55:4e:88:f5:2c:68:49:be:c2:2c:35:bc:27:
36:d5:3b:8f:a6:ee:84:30:d4:bb:d6:3f:2f:50:98:
5a:ea:df:61:16:45:46:e3:92:d4:67:1e:ff:43:10:
83:9d:de:ba:7c:77:a6:00:a0:dd:ce:da:15:46:2b:
81:79:4d:36:c5:03:a0:e2:1b:34:97:97:90:ec:01:
1b:d2:fd:7a:cd:39:25:b5:4f:0a:26:59:88:ac:b6:
9b:6c:ee:b2:b2:52:b8:0e:cd:a2:10:b0:7d:37:50:
68:28:42:07:d7:cc:2f:7e:ac:8b:86:9a:fa:f1:c0:
61:4b:32:ff:96:d7:36:12:0f:cd:39:c1:51:b0:9a:
fa:14:25:63:a0:ab:ef:08:91:2e:9a:93:47:4e:14:
92:5b:02:57:7d:b0:91:cd:b2:b8:2e:c4:f1:74:e5:
08:f3:d9:0d:2e:d2:54:b5:77:8f:83:71:08:95:30:
14:c0:37:97:99:ed:a7:8c:06:8b:c9:22:9e:eb:0e:
ad:4d:e3:e8:83:88:73:82:fc:b4:7c:8b:07:4a:2a:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0B:1E:FB:E3:FC:F9:4C:7A:A1:34:09:65:0B:18:56:D1:A1:A4:B4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7Qse--P8-Ux6oTQJZQsYVtGhpLQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:ac:90:a1:dc:a8:79:6d:cf:80:85:26:3d:44:41:f9:f5:e4:
76:42:ac:a8:98:d1:bb:9b:7f:dd:56:75:33:ed:7f:f3:74:16:
03:96:fc:87:1a:e1:8a:34:4c:03:6b:7f:11:22:70:b9:66:22:
b2:38:1c:e7:ab:20:b0:f0:b0:a0:72:d9:77:da:60:be:48:2a:
b5:05:9c:96:a7:4e:b1:29:a7:ea:57:21:ce:95:0a:1c:04:61:
c7:88:19:e8:62:6e:34:08:8c:f2:62:fa:95:da:a3:80:4e:d1:
7c:ae:ae:87:ab:59:d8:73:a1:41:97:8b:32:a0:6d:a6:66:a9:
14:a0:13:ea:38:10:83:32:ac:ee:77:5d:22:42:44:f5:c1:71:
b1:b1:11:2d:56:52:b8:ff:a6:0a:fd:07:c1:3b:72:f1:3a:96:
90:53:be:9c:78:ad:29:1c:fd:78:a3:ee:1e:06:22:24:47:74:
8a:ba:2d:57:ef:e5:a1:4f:ac:23:83:dc:b7:a1:fe:ef:e3:a1:
0d:87:86:b8:8f:e9:19:01:da:c7:53:ae:98:23:b3:12:df:65:
f2:39:06:ec:fa:d4:74:79:13:dc:c9:1c:bd:07:29:4f:de:06:
49:f1:53:3f:92:57:33:98:66:d1:98:93:90:b4:83:9b:ca:b2:
1b:0b:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 15:30:17 2025 by rpki-client