Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/CqGPRSc9C6kGvQkKPWgeztSqOZ8.roa
File: CqGPRSc9C6kGvQkKPWgeztSqOZ8.roa (raw, json)
Hash identifier: M0iMgp2lLYhXHCOat+G3pWGzuzY5aIhXsRrLIBR006M=
Subject key identifier: 0A:A1:8F:45:27:3D:0B:A9:06:BD:09:0A:3D:68:1E:CE:D4:AA:39:9F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 188E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CqGPRSc9C6kGvQkKPWgeztSqOZ8.roa
Signing time: Thu 25 Apr 2024 10:53:41 +0000
ROA not before: Thu 25 Apr 2024 10:53:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6286 (0x188e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 10:53:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0AA18F45273D0BA906BD090A3D681ECED4AA399F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:18:cb:7c:18:c3:ee:cd:5e:d8:ed:7b:41:
2a:d5:b9:a0:f3:2b:67:3e:85:6c:b3:d1:88:5c:18:
49:c7:a3:33:17:6c:70:7f:b4:15:a9:ed:ad:16:ff:
0b:0b:82:da:a1:44:99:bd:13:83:f1:57:09:00:68:
36:03:13:0f:cd:db:b6:41:54:e2:10:fc:48:27:5f:
87:76:9e:f9:7b:7d:e1:7f:1b:af:7e:b1:75:c9:61:
67:2d:f9:65:0e:be:20:5c:1b:02:42:dc:fc:93:56:
9c:46:c1:e4:f2:92:29:c3:12:9a:bb:83:96:bb:cd:
cb:0a:03:65:f2:eb:48:7c:7f:f5:ba:5d:9c:41:98:
ad:19:c8:0f:43:da:29:82:8d:00:4d:3a:b7:cf:07:
b2:7c:35:25:cb:cb:9f:fc:9d:99:19:5e:0e:44:8b:
3a:23:cd:3c:b2:3e:9b:6f:bf:cd:fc:63:07:97:e4:
02:e9:81:35:ac:e6:7d:ba:ce:be:63:64:3b:1d:9b:
a1:21:1f:90:80:b8:92:05:c2:79:82:10:c6:0b:c3:
89:26:b1:6b:2d:39:41:f1:69:fd:55:6a:d6:c2:cd:
d3:1c:78:de:0d:26:e1:5c:4b:56:b8:88:8e:03:f1:
33:66:8f:b8:2a:af:1b:ec:1a:b9:10:56:f8:bf:8f:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A1:8F:45:27:3D:0B:A9:06:BD:09:0A:3D:68:1E:CE:D4:AA:39:9F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CqGPRSc9C6kGvQkKPWgeztSqOZ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:1a:d0:17:ab:8b:a1:50:72:57:ac:57:6a:a2:64:c1:1a:02:
5f:0f:bd:91:aa:1d:ab:e5:f9:5f:96:3d:e6:19:a1:a7:c1:71:
5e:dc:04:89:f3:e8:3e:80:54:d8:67:c7:23:6c:fd:80:ed:3e:
5f:7e:2d:32:8d:77:8e:87:ea:3d:05:94:27:1e:6e:dd:f9:a8:
ff:ce:db:a6:2a:2a:2d:c3:a5:92:a6:92:ee:37:60:7e:09:8f:
e5:15:bc:c3:ed:23:2f:23:15:17:28:6b:a7:be:74:a5:df:5d:
4e:40:d0:39:73:fc:4b:66:f2:aa:12:5e:79:55:37:53:6f:f3:
e7:b0:b7:9d:d3:77:86:40:8c:fc:02:49:21:0b:ea:1b:6a:be:
be:93:d3:f4:b0:31:bc:e5:5d:47:95:51:c9:41:dd:63:ca:04:
ae:3c:ca:39:3e:8b:c4:a8:cb:66:8e:6c:cc:34:38:a7:a6:de:
71:ca:9c:bc:96:4b:fb:a2:ed:7a:e1:d3:2e:28:76:61:b7:c2:
f1:27:a2:db:84:3c:5f:a0:7b:55:f7:d2:25:2a:cc:02:7d:82:
5a:5c:bb:93:36:81:01:26:be:fe:41:8a:ed:c9:d5:7d:21:07:
84:ba:26:0c:86:eb:ee:40:ec:c3:fc:39:7a:15:95:55:da:3c:
36:26:9e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:57:44 2025 by rpki-client