Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/CXwitpY2LLIWpmVcvvUZpzogxjw.roa
File: CXwitpY2LLIWpmVcvvUZpzogxjw.roa (raw, json)
Hash identifier: ajkpgkgYGo73mOnkcbFbihHfVr9IkkKB1gwtleW14QQ=
Subject key identifier: 09:7C:22:B6:96:36:2C:B2:16:A6:65:5C:BE:F5:19:A7:3A:20:C6:3C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1072
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CXwitpY2LLIWpmVcvvUZpzogxjw.roa
Signing time: Wed 03 Apr 2024 19:52:46 +0000
ROA not before: Wed 03 Apr 2024 19:52:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4210 (0x1072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 19:52:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=097C22B696362CB216A6655CBEF519A73A20C63C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:42:e9:fd:26:ca:64:a8:fe:01:44:8d:68:
da:ff:0d:73:44:3b:c4:3b:24:b0:49:e4:8b:05:7e:
0d:2d:c6:f4:11:d2:30:17:6a:63:54:e2:ca:46:82:
35:47:94:9a:53:c5:8e:18:c9:c9:07:56:6f:5d:e3:
75:81:2e:9b:ac:f6:4b:d0:48:af:8f:b1:f2:33:ff:
d7:61:e3:91:4f:ec:6e:5b:65:21:02:55:f9:91:e4:
ce:85:5c:2b:6c:01:e9:19:7f:66:92:f7:75:95:2b:
f2:82:a2:f4:cb:08:4c:13:8b:00:3d:42:f9:96:62:
37:b2:ce:e7:cc:92:8e:89:53:74:20:64:9f:7d:4d:
49:58:2c:6d:d0:9c:77:5e:85:45:42:42:e4:f1:7c:
54:9b:f0:da:3b:78:4c:7b:e1:79:c3:65:d4:8f:37:
5b:b2:3f:cd:f5:74:12:3b:6b:fa:36:62:19:40:27:
7f:22:4a:5f:6a:9c:9b:ba:30:ac:13:c6:92:d7:d8:
f0:f3:9a:ec:9f:b1:bf:00:c2:63:a2:c5:07:76:86:
47:60:48:31:eb:e5:86:89:4d:9c:f8:3e:90:2b:ea:
4d:77:6e:5d:76:23:f7:6f:94:1c:30:f8:df:32:b2:
0f:e5:d5:13:66:65:72:d7:b2:91:99:8b:55:28:85:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7C:22:B6:96:36:2C:B2:16:A6:65:5C:BE:F5:19:A7:3A:20:C6:3C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CXwitpY2LLIWpmVcvvUZpzogxjw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:cb:1c:26:44:5f:23:46:be:31:1b:e2:ad:04:d1:f5:4a:e5:
3f:11:d2:45:1e:72:eb:56:bc:58:a0:dc:f0:36:b7:cd:4d:00:
7c:ac:fc:04:fe:83:53:a0:d6:1a:ea:40:e2:60:c4:54:3b:19:
7b:96:68:90:8c:81:e9:af:55:8f:f9:d8:59:3e:b2:f9:e2:ea:
35:ba:2c:28:93:fd:ff:e5:a8:08:ba:51:f4:5f:ba:e8:00:c2:
e1:2d:48:fe:86:aa:e0:be:37:89:4b:28:0a:11:7f:2d:6b:30:
78:e1:fb:01:b2:ae:17:6f:ea:1e:a1:dd:19:cf:a7:5a:90:5b:
af:f1:30:56:72:a8:73:bb:19:eb:ab:00:8b:d0:a3:a6:07:9b:
a9:02:1f:1a:43:8d:dc:6a:e4:e4:d2:3e:17:c8:ce:d2:4c:46:
da:8f:5d:f4:f0:d5:ac:f1:7c:dc:ee:a2:6d:3f:f5:f3:8f:ee:
95:a6:dd:5a:fa:90:e0:0d:d5:c7:22:77:cb:7b:43:3c:83:fb:
32:12:f8:2f:a5:82:30:71:b0:d4:ee:eb:4b:c6:b5:59:ba:38:
13:4d:9c:36:1f:a0:e9:8e:21:4c:01:5e:38:40:05:f6:a8:90:
73:83:68:37:a3:75:f9:90:b0:25:f0:14:f1:6b:77:39:5b:8c:
89:7c:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:48:59 2025 by rpki-client