Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/CU1Gx_8e5l6YTrChfKUVpy2mx54.roa
File: CU1Gx_8e5l6YTrChfKUVpy2mx54.roa (raw, json)
Hash identifier: kAVJHtfB8oC9qEf3W0rN8gwom9WtX19CASa4h7ASVHE=
Subject key identifier: 09:4D:46:C7:FF:1E:E6:5E:98:4E:B0:A1:7C:A5:15:A7:2D:A6:C7:9E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D5C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CU1Gx_8e5l6YTrChfKUVpy2mx54.roa
Signing time: Wed 08 May 2024 06:24:45 +0000
ROA not before: Wed 08 May 2024 06:24:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7516 (0x1d5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 8 06:24:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=094D46C7FF1EE65E984EB0A17CA515A72DA6C79E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:66:3f:5f:88:17:cb:8e:79:32:8b:b0:a2:
02:10:ce:95:74:18:50:0b:32:fb:2c:5a:52:93:4e:
d8:fc:7f:5b:ae:af:5b:90:c7:70:6e:9d:de:cc:cd:
18:99:cd:74:f3:d2:13:3e:72:be:15:8a:d0:5b:a4:
27:63:21:b2:26:0c:95:73:0c:2e:4b:9e:93:1a:b4:
c8:12:2a:66:aa:d9:ea:4b:28:90:a4:d1:d7:07:ec:
85:30:41:99:2d:7d:5c:0d:de:1a:1c:a4:8f:94:b8:
38:83:c8:47:69:ee:51:e3:e9:46:49:ac:9d:d6:88:
b0:4f:0e:9c:fd:2f:3d:91:ed:4d:82:6d:4a:ec:6f:
7c:bb:c6:39:69:b3:de:65:29:3c:50:16:70:f7:be:
97:8b:49:2c:5c:b8:a5:52:5e:7c:99:5a:9e:fc:af:
b3:1b:e1:66:b4:e7:dd:48:6f:76:f8:e4:f3:67:67:
50:b9:bb:88:ad:62:08:80:22:b1:85:87:40:5a:00:
65:93:fb:71:e1:ea:3b:cf:5f:1b:6d:8a:01:d5:3e:
0f:60:0e:ef:aa:be:1d:94:19:56:9d:b9:fb:11:3b:
34:51:fb:82:a9:77:0c:d1:88:f0:fa:96:bd:d8:48:
54:ee:bc:62:dd:14:51:58:b4:66:3d:92:b3:2b:60:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4D:46:C7:FF:1E:E6:5E:98:4E:B0:A1:7C:A5:15:A7:2D:A6:C7:9E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CU1Gx_8e5l6YTrChfKUVpy2mx54.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:9d:26:89:83:df:fa:2e:af:94:10:ea:a9:22:04:28:77:0b:
82:92:11:0e:35:c6:6d:09:ce:1e:e3:56:21:db:71:21:7e:e6:
97:67:7b:35:21:a4:2c:55:7e:5a:d8:76:ac:44:b8:3f:24:e2:
66:87:7c:2b:91:a8:e2:16:93:29:a7:23:98:87:59:52:b7:b8:
17:22:c0:3e:b2:05:28:df:87:b4:54:05:b8:0f:6a:24:44:e4:
71:94:c3:0e:66:38:53:7f:b1:f6:29:a8:f3:1e:4c:85:15:34:
0f:71:2a:ff:35:55:c3:c5:55:e1:3e:be:41:01:4f:10:d0:9f:
63:91:ed:1a:11:23:fa:16:fc:ed:6a:38:eb:a1:3f:4a:34:fe:
c1:d5:84:9d:68:c8:8b:88:33:57:75:a4:d6:09:da:0c:a1:de:
48:11:8a:31:cd:61:f6:16:4f:b4:c2:85:46:f2:41:2f:32:21:
58:22:7e:d5:3a:cb:d1:e4:52:89:6d:e1:4c:a0:7f:5f:d4:9e:
9d:25:c2:e5:b8:98:88:9b:15:e4:7f:ea:c0:79:75:72:7d:6b:
ee:68:e0:87:c5:05:d8:02:c7:94:96:86:ea:8f:c1:00:0d:88:
87:77:e1:57:67:00:ce:fc:c5:72:2a:de:ae:04:cc:e9:34:64:
f5:5b:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:43:31 2025 by rpki-client