Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ANEFuQ7c7udCZE5JG24u0imTy_E.roa
File: ANEFuQ7c7udCZE5JG24u0imTy_E.roa (raw, json)
Hash identifier: NHKX9FjUVnrbrzxZt4wLThrL30zWt1B9N/7KbegJAEs=
Subject key identifier: 00:D1:05:B9:0E:DC:EE:E7:42:64:4E:49:1B:6E:2E:D2:29:93:CB:F1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 120C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ANEFuQ7c7udCZE5JG24u0imTy_E.roa
Signing time: Mon 08 Apr 2024 02:22:55 +0000
ROA not before: Mon 08 Apr 2024 02:22:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4620 (0x120c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 8 02:22:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=00D105B90EDCEEE742644E491B6E2ED22993CBF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:05:23:9a:0f:d5:2a:45:6f:3a:f2:17:93:90:
45:71:65:82:8b:cd:bf:8a:37:96:1b:5a:d8:ff:5c:
c5:24:8c:19:6a:81:4e:bc:a4:75:c7:85:56:77:a9:
34:2e:13:52:c1:ac:b6:8e:78:d6:e1:35:8e:e8:41:
9d:63:29:85:fa:8c:63:79:a0:55:64:e8:d3:98:24:
2a:e8:47:d1:c9:cd:d5:2c:63:b2:1c:fa:8e:6a:61:
90:bd:47:26:f5:37:03:65:97:32:a1:99:7f:6a:2c:
e4:06:3d:ca:92:71:4d:95:6a:8e:58:c6:69:ef:94:
10:77:a9:7e:f0:1c:1c:f7:d8:9b:b1:71:b2:2f:19:
90:8c:47:22:6a:76:b6:62:f7:62:7a:ff:d9:a3:71:
b4:66:0b:fa:4f:db:10:b4:ac:6a:1a:69:9e:5d:12:
1b:31:5d:f6:54:2f:c8:7f:dd:bc:cb:07:49:89:db:
e2:76:dd:3a:75:f7:9a:21:22:6c:13:17:dd:be:8c:
d5:84:42:e7:83:d0:5c:3a:80:ae:f6:9d:56:0f:ab:
cc:cd:0d:5a:11:7d:92:d1:a3:77:62:f5:42:a2:d2:
f8:cb:62:9d:c5:6d:e7:30:b8:03:31:b6:06:07:c1:
fd:48:c9:11:ee:74:c0:a7:41:ff:1c:82:be:8f:24:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D1:05:B9:0E:DC:EE:E7:42:64:4E:49:1B:6E:2E:D2:29:93:CB:F1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ANEFuQ7c7udCZE5JG24u0imTy_E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:4c:b9:b8:2c:5c:ed:d0:a0:42:29:aa:a6:6e:95:77:bd:db:
db:2e:a0:34:93:4f:6b:18:15:0c:44:8d:61:b0:cb:b4:78:ac:
a2:d7:4b:7a:8a:09:4e:d8:d0:15:f4:47:ab:17:dd:a5:2c:92:
5d:03:87:8e:ff:b3:2c:29:87:ff:20:6f:c6:22:e9:8c:a0:27:
60:ec:63:84:1d:e9:0b:51:89:18:c3:78:98:ed:a0:04:2f:ba:
bc:ff:2a:22:f8:9c:52:da:a6:00:01:46:02:0a:56:5b:e2:79:
41:f7:e9:ee:63:11:cc:aa:91:b5:cf:57:06:e8:f7:cf:d3:8a:
db:92:ce:b4:4a:b3:7e:98:cd:5c:5e:0c:76:a5:a6:d2:ab:04:
cd:c8:5e:79:85:89:ef:69:b1:9a:95:a8:9a:65:14:47:7b:f1:
b3:3b:b3:6c:fd:c7:d8:65:a0:52:97:ca:ec:d1:83:ea:13:04:
36:59:23:96:15:ec:58:40:9f:a3:af:87:e4:5e:93:cc:a7:79:
5e:aa:f5:45:96:52:88:da:5c:0a:50:da:d2:6a:b4:b9:83:b1:
03:6a:7b:d2:33:2d:b2:7b:8a:d5:3d:59:3e:46:eb:b8:68:1e:
35:94:63:d5:43:ac:29:09:4d:f7:3a:bf:54:8f:d5:cf:05:ee:
9b:90:6e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:54:59 2025 by rpki-client