Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/A7HuXET3qk4S0NpTL2EejoO81OA.roa
File: A7HuXET3qk4S0NpTL2EejoO81OA.roa (raw, json)
Hash identifier: RXmMUqmQb0jO/SufPFKlrkrs+uqrICROKc4Vt44wYD8=
Subject key identifier: 03:B1:EE:5C:44:F7:AA:4E:12:D0:DA:53:2F:61:1E:8E:83:BC:D4:E0
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1430
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/A7HuXET3qk4S0NpTL2EejoO81OA.roa
Signing time: Sat 13 Apr 2024 19:23:20 +0000
ROA not before: Sat 13 Apr 2024 19:23:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5168 (0x1430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 19:23:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=03B1EE5C44F7AA4E12D0DA532F611E8E83BCD4E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:2d:e4:4b:b3:76:0c:7a:d0:e8:dc:bb:c3:
5e:4c:7d:83:5c:c6:11:d5:0c:9a:67:01:30:8c:20:
5f:34:b3:3e:34:bc:ee:53:2e:4a:90:cd:94:98:b0:
b4:50:25:46:21:b8:30:4b:9f:9d:d5:85:5f:b9:a4:
dc:fc:2c:8e:4b:73:1a:35:0a:7e:4e:14:d5:3b:0d:
26:e1:42:58:12:bc:fd:e5:b3:57:85:4e:09:9c:ac:
c1:54:50:43:da:1f:14:c4:b7:d6:36:45:b9:6c:66:
c5:8b:b6:87:33:30:4f:57:c7:2d:ca:b8:3f:fe:92:
fb:e2:bc:d3:65:2b:95:b8:d7:e8:bd:a9:71:1b:74:
b5:4b:5f:2e:c7:94:89:c3:88:fa:04:71:4f:c0:a7:
a8:a6:5a:6d:ec:26:50:ec:4b:3c:87:44:45:a6:39:
87:1b:51:eb:8e:d8:f9:11:e0:95:85:42:41:69:22:
24:b9:b2:d8:ab:bf:2b:c4:a1:80:04:03:4e:dd:64:
57:14:c8:60:87:c0:1e:33:d1:6a:f7:a3:1e:03:5c:
f7:c3:cc:f5:99:3f:fe:88:fa:26:89:40:82:fe:17:
53:27:40:7c:14:f9:1c:2e:dd:2a:d3:d2:60:4d:fc:
4d:33:0b:c8:b8:d8:7b:22:f5:93:9b:7d:2c:7c:bd:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B1:EE:5C:44:F7:AA:4E:12:D0:DA:53:2F:61:1E:8E:83:BC:D4:E0
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/A7HuXET3qk4S0NpTL2EejoO81OA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c1:4f:54:9e:2f:e1:18:72:b4:1c:f2:10:69:ae:72:fa:bd:46:
b4:32:84:fb:05:93:ce:29:9a:ac:b9:7e:de:72:86:40:2e:54:
4b:32:32:01:e3:19:8f:64:51:d6:fd:e3:f8:78:87:b6:72:2f:
68:3f:05:ae:58:81:1b:78:cc:ea:10:cf:b4:a5:29:f9:73:1c:
3b:ca:dd:b7:55:80:e3:08:1e:59:e9:53:48:fa:ed:fd:03:8e:
09:14:f5:e0:56:54:8e:38:ea:4a:0e:71:c5:6e:78:2a:18:1e:
92:fb:f3:d9:5c:3b:03:fa:d5:de:f3:cd:0c:02:5f:3f:97:55:
7e:8e:e0:13:8d:66:5b:fd:29:dd:63:7f:3f:00:b4:68:27:02:
b1:a1:1b:1f:06:38:c4:49:d3:8b:76:ba:fd:35:ab:b6:a0:00:
d3:b3:fd:23:4d:c1:c5:30:bc:24:a9:d7:af:c1:46:18:9b:08:
b4:13:40:62:0f:44:38:8e:b5:29:b9:b2:93:56:9a:bb:9f:ef:
33:4c:4c:9f:63:f8:a1:a4:8a:5a:05:3f:0c:98:2b:96:88:a6:
95:bd:7c:b6:83:6c:f7:5f:ff:67:25:e5:d5:0e:71:7a:9c:60:
2f:63:5f:75:46:49:88:93:a9:40:ab:0d:04:b3:e7:00:17:92:
28:01:53:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:53:10 2025 by rpki-client