Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/8tsJ7RWiQ3Mu98Al4iQEMjnnZxk.roa
File: 8tsJ7RWiQ3Mu98Al4iQEMjnnZxk.roa (raw, json)
Hash identifier: KNYQwkk7DoQ0vJCPkgVM9QW1yBqnQ/lwhr4CGO2qM3o=
Subject key identifier: F2:DB:09:ED:15:A2:43:73:2E:F7:C0:25:E2:24:04:32:39:E7:67:19
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19DE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/8tsJ7RWiQ3Mu98Al4iQEMjnnZxk.roa
Signing time: Sun 28 Apr 2024 22:53:56 +0000
ROA not before: Sun 28 Apr 2024 22:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6622 (0x19de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 22:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F2DB09ED15A243732EF7C025E224043239E76719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:3b:c5:84:f4:17:e6:b2:fa:f5:aa:76:58:
2a:6e:9b:14:0e:f1:fe:46:dd:87:37:17:f9:86:fd:
d8:0d:f8:89:50:c5:34:b9:d2:10:ba:07:37:c9:fa:
88:39:82:31:08:36:c3:e9:78:ca:07:ff:d7:f3:67:
ab:a2:00:3a:64:2c:28:74:e2:2f:1b:4c:f5:f7:0d:
3a:65:9f:6b:6a:b8:61:b3:12:b7:a1:41:da:ba:32:
72:bb:9c:3a:90:7f:ac:b3:53:c4:86:e6:d5:47:15:
cc:5e:d4:94:91:f5:91:ec:11:3c:f3:43:1b:d9:d7:
33:fd:c6:e7:8f:e9:8c:9a:f4:23:a2:83:6f:1f:66:
2b:0d:d3:a8:cb:4c:ca:5e:72:32:54:eb:00:25:1d:
f8:ff:e2:c6:25:ed:d1:01:47:d0:1e:cb:17:f2:d9:
3b:7e:38:78:ba:3d:57:31:c4:e9:5f:d4:c0:b0:4e:
41:d5:7a:82:b7:81:83:d9:47:de:33:4a:f0:c0:83:
08:29:b8:bb:45:f1:ae:22:be:f4:5b:53:97:9c:55:
2c:ff:6b:27:ec:d9:c4:0e:91:64:ca:43:fb:4f:ba:
3f:d3:41:0b:0b:9b:42:d3:8c:0d:0c:03:0b:30:1f:
06:17:f4:66:95:01:66:9b:3b:91:f4:b9:67:91:15:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DB:09:ED:15:A2:43:73:2E:F7:C0:25:E2:24:04:32:39:E7:67:19
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/8tsJ7RWiQ3Mu98Al4iQEMjnnZxk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:9c:1c:96:92:8b:a5:5f:b3:de:bc:4e:e4:90:96:3d:c9:27:
86:1b:be:fd:7f:dd:44:03:59:8d:5a:2d:d9:d1:f2:31:f6:8e:
9e:bb:f6:d4:c7:40:99:50:12:fb:55:23:1a:3d:23:c3:fd:59:
98:e2:95:69:e4:7e:1e:65:81:ff:96:7e:3c:f1:1e:87:eb:22:
58:13:f3:3f:b4:0b:bf:f4:38:3f:73:27:8c:be:54:f0:57:81:
70:b4:ca:d5:8c:5d:32:7e:17:16:f8:71:b4:6d:77:2d:e2:5f:
34:1a:ba:d2:8b:a3:bc:22:7a:41:52:f9:08:ad:72:a3:7f:4a:
0b:df:73:1a:ee:45:41:f7:e7:1f:fd:07:06:dd:ea:0e:6a:57:
1a:18:8f:c7:1c:5d:32:24:0b:d8:e4:c1:2d:e8:5e:66:58:92:
d9:21:40:aa:d8:11:65:83:1e:a6:ee:56:4f:7d:8d:62:24:72:
84:92:5d:af:28:d7:cb:47:e8:68:41:76:63:7d:20:52:c9:f2:
bd:cc:a3:2e:73:31:64:c1:89:f9:f2:19:65:83:73:aa:f3:d3:
58:74:2c:a3:a6:2f:86:22:53:3d:e9:bf:f0:45:e3:01:e1:9a:
11:d2:4a:07:99:bc:05:ed:34:da:37:f1:3c:29:57:ef:3b:ae:
92:dd:a3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:48:24 2025 by rpki-client