Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/9KjiOWf2yOycRnsUYunXKus4T38.roa
File: 9KjiOWf2yOycRnsUYunXKus4T38.roa (raw, json)
Hash identifier: 7PBizi0h/X2uKc0OIcI6tGbM/QeYRekQTXmNLvGhFfE=
Subject key identifier: F4:A8:E2:39:67:F6:C8:EC:9C:46:7B:14:62:E9:D7:2A:EB:38:4F:7F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A98
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9KjiOWf2yOycRnsUYunXKus4T38.roa
Signing time: Tue 30 Apr 2024 21:24:15 +0000
ROA not before: Tue 30 Apr 2024 21:24:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6808 (0x1a98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 30 21:24:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F4A8E23967F6C8EC9C467B1462E9D72AEB384F7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:a2:d3:b7:f4:a7:f6:40:0b:3a:1c:b6:ca:
cd:35:39:07:c5:0d:e6:b0:b6:44:fe:3d:17:5c:77:
30:19:83:62:70:1d:f5:9c:62:cf:cb:a4:1d:6c:a7:
0a:48:72:21:e3:0e:94:fc:54:ea:cd:f4:aa:dd:60:
97:fc:fb:e8:41:95:d5:d9:9f:e7:82:9e:3a:23:fd:
9d:a9:83:5c:a0:c2:f7:8d:0f:cd:cf:9d:fe:c5:c6:
67:3c:72:63:30:c2:79:48:a7:b9:14:37:9c:2a:7d:
3d:c0:8c:4f:9f:87:23:e2:50:e4:90:42:5a:c5:35:
97:ee:4e:19:da:df:8c:35:dc:ba:54:25:88:89:ad:
3e:1e:f3:40:08:0f:18:c6:6c:5c:e8:2b:23:04:e7:
31:15:cb:96:85:37:11:45:7a:9e:0a:01:b0:f1:5a:
c7:38:31:2d:eb:2a:fd:35:0f:92:00:93:63:54:02:
4f:75:eb:ac:b9:3e:b9:68:07:c6:80:f2:b6:00:24:
9e:a4:02:cc:0a:e8:d5:22:f7:80:25:38:14:ff:47:
04:08:4c:67:56:26:32:51:78:9a:d7:70:14:68:af:
e8:52:5c:88:5b:3c:70:09:7d:6b:e1:e7:2b:8c:f9:
a0:78:d1:c0:e1:d2:74:8a:9b:86:3b:90:6c:8b:a9:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A8:E2:39:67:F6:C8:EC:9C:46:7B:14:62:E9:D7:2A:EB:38:4F:7F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9KjiOWf2yOycRnsUYunXKus4T38.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:d2:6c:1c:08:93:af:0d:48:1e:2d:25:24:8e:70:33:6b:a9:
63:54:17:3d:7b:83:1e:94:3d:be:b8:64:0d:6d:d9:f0:31:46:
e2:93:81:5d:e2:93:eb:cc:a2:00:f8:3d:28:f9:8b:31:14:cf:
94:24:c7:6a:af:74:0f:3c:5a:48:a9:d3:db:cb:17:97:60:3e:
9f:55:29:8d:46:f2:8a:bc:c4:f4:d1:8d:a0:54:27:24:57:39:
bd:52:b5:ac:23:47:9c:60:c7:bf:dd:4f:9f:14:07:74:dd:55:
84:02:48:b6:be:28:70:72:ce:54:fa:72:9e:22:20:e8:bf:53:
45:2b:98:58:d0:ca:e6:51:ee:df:68:61:c9:8c:45:6c:d9:4d:
6c:2a:26:9b:66:77:96:ac:45:cc:c7:98:a7:33:e9:bb:79:97:
bb:c4:93:e6:4d:70:83:d9:15:9d:be:bd:4a:1f:72:4c:22:1a:
a3:1a:2f:35:37:54:a1:16:fc:1a:e6:54:05:fb:e7:9d:c8:83:
95:e4:01:7f:5b:3f:f7:b6:d1:d4:32:25:40:85:12:97:87:dc:
55:d7:5e:2d:0b:c7:3c:17:08:4e:8a:8e:9d:51:60:36:78:25:
11:f9:99:db:70:e0:ed:f7:a7:6e:57:90:a1:42:78:9b:56:ca:
b1:f0:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:23:22 2025 by rpki-client