Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/C3w7UokXpcqvMSCREWlSUOqLsZ8.roa
File: C3w7UokXpcqvMSCREWlSUOqLsZ8.roa (raw, json)
Hash identifier: 47uPBjQPAJXgm1OjTBBaiz0jbNZjBQGL8i/7UMX9I3I=
Subject key identifier: 0B:7C:3B:52:89:17:A5:CA:AF:31:20:91:11:69:52:50:EA:8B:B1:9F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F00
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/C3w7UokXpcqvMSCREWlSUOqLsZ8.roa
Signing time: Sat 30 Mar 2024 23:22:32 +0000
ROA not before: Sat 30 Mar 2024 23:22:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3840 (0xf00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 23:22:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0B7C3B528917A5CAAF31209111695250EA8BB19F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:f7:9a:8d:46:8b:18:33:4f:a1:4e:b5:9c:
bf:46:17:c6:25:14:7d:a8:d1:a3:c1:20:20:7d:7a:
71:c8:c8:07:55:65:9b:e6:9b:28:ed:7f:c5:06:76:
35:4a:7b:81:78:5c:2a:21:fc:dd:86:c9:14:e8:d4:
d1:52:23:83:e0:72:cf:15:66:87:39:6e:98:e8:b1:
d7:98:fc:9c:6f:e4:8e:35:6d:80:92:e3:55:da:80:
73:4f:dc:27:11:06:43:eb:77:7f:05:ae:d2:15:88:
04:70:d0:d0:d2:33:c8:36:bf:c3:88:96:b8:10:07:
ac:3f:fe:91:bd:68:61:f3:85:9d:7f:28:c7:ac:16:
22:9a:3e:f1:13:31:f7:4a:56:9d:77:83:67:38:5d:
4a:ac:bb:2c:7a:5d:03:71:f4:19:4e:69:ca:e4:8c:
25:98:b3:bf:27:21:6b:87:ec:fe:d3:87:97:69:73:
d6:6b:46:b6:94:74:89:b4:9b:39:4d:8c:b6:08:46:
ff:2d:1e:23:9b:22:81:dd:f5:25:a9:2a:ab:fe:d1:
ae:ae:f1:ce:74:af:d4:f2:2d:66:37:3a:0c:2c:60:
3c:ad:df:91:7f:fe:39:16:83:fa:86:8b:df:21:b7:
d9:03:ce:c4:ad:ad:d9:b0:07:90:9a:f4:98:a7:52:
b3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7C:3B:52:89:17:A5:CA:AF:31:20:91:11:69:52:50:EA:8B:B1:9F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/C3w7UokXpcqvMSCREWlSUOqLsZ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:76:d8:6d:a2:70:f1:4c:2e:a5:84:d5:7b:d9:9b:6d:02:0d:
75:7b:91:6e:83:a5:b4:90:58:5e:d8:bf:5d:af:7e:03:73:ec:
28:aa:13:cd:ee:4d:54:65:93:37:a3:b2:41:59:2d:94:f2:50:
4f:53:f9:5d:08:90:1d:63:85:56:e9:5c:da:f3:8b:02:19:28:
ca:c2:78:b4:c0:8b:ec:8b:36:72:39:c9:32:11:89:65:d7:7d:
4e:60:32:f2:5b:79:5f:a5:4b:73:27:aa:5a:2a:ff:11:76:fc:
f4:28:4b:5c:62:71:0d:28:d2:18:e7:9c:d9:67:26:fe:f4:e0:
31:ea:b7:92:ef:f2:93:7d:aa:30:ba:74:25:db:33:79:ea:12:
a6:ef:f7:a4:7b:ce:9f:59:f5:a6:4c:f0:ca:c1:e6:a9:10:4e:
f8:b9:01:ec:50:2b:1e:c7:b0:89:93:5f:a2:8c:10:58:5a:02:
70:c5:15:20:0f:9e:72:4d:76:8d:9e:2e:77:4d:ca:90:0e:83:
20:41:40:13:57:fe:5c:6f:f6:a2:a8:48:4d:c8:b7:c0:49:88:
83:2e:83:bb:77:34:6e:b5:d7:b7:af:70:73:0f:aa:5d:fb:05:
83:aa:eb:da:9a:23:eb:fb:9f:76:5b:2b:3e:0a:92:10:3e:bb:
41:48:bf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:55:46 2025 by rpki-client