Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/C78_pgpmGIgqAvA6AMyvHci9MjE.roa
File: C78_pgpmGIgqAvA6AMyvHci9MjE.roa (raw, json)
Hash identifier: B8kQbZoZFTBianZ/tFFB00Q9Kl812PY3G0OFNznpv/Y=
Subject key identifier: 0B:BF:3F:A6:0A:66:18:88:2A:02:F0:3A:00:CC:AF:1D:C8:BD:32:31
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C98
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/C78_pgpmGIgqAvA6AMyvHci9MjE.roa
Signing time: Mon 06 May 2024 05:24:16 +0000
ROA not before: Mon 06 May 2024 05:24:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7320 (0x1c98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 05:24:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0BBF3FA60A6618882A02F03A00CCAF1DC8BD3231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:ee:aa:17:71:65:d3:0b:c3:af:2d:17:2b:
c2:c1:bc:2f:60:61:c6:c8:be:a6:e3:2e:6b:f0:02:
22:b9:77:fc:b0:55:a0:5d:de:a2:53:ca:77:03:d4:
b6:48:89:f9:6f:20:fd:93:9e:b6:7f:4c:7e:7e:2b:
7e:73:46:15:df:c7:0a:9e:ec:6b:15:0a:50:46:2e:
b5:53:fe:9b:cf:e7:4a:cd:73:11:73:75:af:ee:b6:
2a:5f:e7:ac:68:eb:2d:95:9d:e5:c9:bb:d4:d4:95:
ee:0e:b3:af:89:c0:ac:87:03:63:0d:6e:76:2c:d4:
e7:46:c2:dc:e3:62:dc:91:b6:f6:b1:05:31:cc:95:
ec:b7:45:9f:75:f2:95:b3:61:06:40:41:ac:b9:b8:
12:05:92:b9:a4:54:2c:57:d7:5b:b4:fe:a2:32:d3:
36:b1:c8:9b:6a:ed:e8:06:78:da:10:f4:91:2f:d8:
37:1a:04:7e:17:f6:66:96:22:01:4b:4e:f6:c0:ed:
3f:52:69:08:0c:6d:d0:db:5b:db:9a:1a:9e:b6:88:
19:12:b2:af:6b:d2:8a:63:b2:5a:48:48:a4:6a:27:
f9:4b:96:b9:11:42:10:ac:3d:2b:71:12:62:77:31:
7f:73:49:94:82:b6:8b:f0:75:85:4f:31:21:d9:6b:
14:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BF:3F:A6:0A:66:18:88:2A:02:F0:3A:00:CC:AF:1D:C8:BD:32:31
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/C78_pgpmGIgqAvA6AMyvHci9MjE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:ca:ac:5b:25:75:20:b2:47:8f:9b:23:80:d5:8a:b7:b1:6e:
d3:f1:0d:98:05:85:5e:64:a1:84:49:c2:6a:9e:75:c2:ea:72:
b0:59:6d:15:06:ef:3e:b1:5e:29:21:66:eb:ac:ab:0d:0f:b9:
43:82:01:dd:49:00:47:e2:b7:f1:f7:d1:2a:08:39:e7:99:76:
db:6e:3e:2c:ad:59:01:3f:76:77:3f:7c:3c:42:ab:fa:1d:d0:
0f:ef:3d:8e:d8:53:c8:b3:e1:e6:f3:d2:c5:23:cf:29:3c:0a:
d9:7a:d9:46:e5:0b:7b:20:6b:fe:a7:26:42:c7:53:80:22:29:
95:ac:94:ed:f7:8e:f7:29:2e:bc:5e:2d:3e:b4:4f:60:6d:7e:
c0:e8:66:f6:3b:f4:04:1e:2f:67:39:cd:93:76:b8:cd:9d:3e:
4a:1e:e6:e5:2b:1b:e6:70:5f:80:15:5d:c1:ac:16:64:12:58:
c9:fa:3b:e4:40:d7:05:9c:a9:12:36:5d:63:ea:42:c8:44:0f:
7d:97:54:0c:9c:40:26:fe:59:0a:2e:75:74:65:03:e4:0b:f0:
12:4b:47:c9:23:bb:f8:6d:95:92:13:66:8b:a7:5e:6a:e4:a8:
9f:fe:e0:31:67:19:cf:59:52:fe:fd:a6:e4:eb:0b:e2:32:3e:
3f:fc:66:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:54:11 2025 by rpki-client