Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/7u9EWewquO3jVRWNnZmx19IVOLE.roa
File: 7u9EWewquO3jVRWNnZmx19IVOLE.roa (raw, json)
Hash identifier: 9q8Y4r7YbmBd/tONNoMkQnBG5mlMnXgudogGZOMYv2w=
Subject key identifier: EE:EF:44:59:EC:2A:B8:ED:E3:55:15:8D:9D:99:B1:D7:D2:15:38:B1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14BE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7u9EWewquO3jVRWNnZmx19IVOLE.roa
Signing time: Mon 15 Apr 2024 06:55:20 +0000
ROA not before: Mon 15 Apr 2024 06:55:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5310 (0x14be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 06:55:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EEEF4459EC2AB8EDE355158D9D99B1D7D21538B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:05:fa:23:97:eb:05:8b:ff:80:9e:69:87:
aa:58:c0:db:b8:80:44:d9:9e:86:f1:0a:ca:e2:63:
73:63:a2:c1:5d:a9:3b:91:64:ab:25:c3:c2:26:a4:
b0:3f:a1:12:2c:b4:78:34:43:be:96:c1:7d:5d:68:
2f:5a:4c:0d:e4:b7:b5:7c:04:2d:77:78:09:a0:9a:
b3:09:97:22:46:f0:bf:49:5d:7a:f0:db:a3:92:a0:
15:48:95:17:54:cd:82:e3:65:9c:84:d3:75:0c:af:
97:c6:69:7b:94:e4:57:5c:f6:ce:4c:f4:fa:00:19:
88:cf:8b:f7:9c:94:46:5a:5c:47:c8:35:41:7d:ba:
73:f1:62:94:ec:91:0b:48:f5:8d:68:34:7f:25:df:
eb:42:04:0b:f4:c2:95:d2:0f:e3:c2:ee:e6:3e:ef:
f5:55:29:ab:5f:b0:99:83:5d:21:98:24:94:f9:a0:
49:7f:96:f2:37:09:01:16:97:29:39:81:3e:9f:37:
3c:37:04:4f:e1:a2:0a:73:d1:58:71:cf:f3:98:23:
bb:f3:04:b5:92:24:97:b0:35:21:9e:0c:af:a6:f5:
9e:ef:d6:0a:5e:04:29:8d:57:30:3b:f7:68:cf:b8:
70:a7:4c:77:0f:5b:ae:ad:74:70:7c:a7:99:c3:ca:
eb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EF:44:59:EC:2A:B8:ED:E3:55:15:8D:9D:99:B1:D7:D2:15:38:B1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7u9EWewquO3jVRWNnZmx19IVOLE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:ce:67:1d:c0:16:57:cb:ed:f0:c2:a1:e9:7c:d1:c0:d3:22:
1a:2c:08:0b:2d:c6:90:5d:c6:27:a3:24:f3:aa:63:7f:24:f3:
28:f4:48:32:16:e6:99:3f:d4:9c:02:4c:1f:d9:e8:89:07:51:
42:1a:b0:8b:89:fc:cf:8d:d7:97:0a:0e:52:19:db:87:d0:23:
f4:29:c8:32:4c:1b:66:34:63:b5:b2:75:17:32:df:b9:e8:52:
4d:9d:a6:e6:bb:76:96:af:02:36:b6:eb:cd:46:1b:9a:e1:cf:
55:6c:e7:d5:7d:bf:0f:4c:39:25:31:30:a0:0e:12:6f:bb:bc:
86:58:d3:79:f9:06:78:45:1f:cf:24:10:b3:3f:fe:87:7d:5c:
2b:f4:f3:86:22:a7:42:f8:f8:1f:de:05:74:34:3d:4e:34:6b:
9d:35:ad:c6:02:4f:f9:a4:06:3e:3a:e7:96:74:29:60:ff:4e:
3e:ae:f6:ca:49:6f:2d:00:e3:f3:dc:01:4d:cf:7d:00:ec:7b:
a2:49:20:ae:f5:1f:98:57:f8:04:a3:ff:60:9d:af:3c:3b:85:
d9:44:7d:e6:4e:bc:8f:e3:ff:0c:ee:f7:62:79:92:38:ce:a9:
28:98:eb:a7:00:81:9f:da:8b:4c:25:ad:47:4c:be:60:f0:63:
1e:fc:b0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:49:25 2025 by rpki-client