Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/DB6NgR8ZcT0crFiCqmkrnMFxQCQ.roa
File: DB6NgR8ZcT0crFiCqmkrnMFxQCQ.roa (raw, json)
Hash identifier: 20EY/8O9krtOVBR+iIpPQFjbbh1JyHD/BivrVm3kRa0=
Subject key identifier: 0C:1E:8D:81:1F:19:71:3D:1C:AC:58:82:AA:69:2B:9C:C1:71:40:24
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 126C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/DB6NgR8ZcT0crFiCqmkrnMFxQCQ.roa
Signing time: Tue 09 Apr 2024 02:23:01 +0000
ROA not before: Tue 09 Apr 2024 02:23:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4716 (0x126c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 9 02:23:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0C1E8D811F19713D1CAC5882AA692B9CC1714024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:fb:64:8f:37:21:fa:83:1d:62:72:52:f6:
2c:7e:22:a2:5b:62:dd:f4:93:b6:92:c9:b0:14:b2:
32:3e:f3:dc:40:14:4a:f9:06:a9:1d:a2:08:2c:db:
a4:cd:83:38:ea:58:6f:70:c4:80:32:11:e2:cd:f9:
77:62:74:5b:52:86:03:d5:ca:42:7d:7e:e6:09:46:
31:1f:c6:3a:64:25:33:d1:2d:b2:57:1b:49:b5:da:
9c:27:8b:94:8f:95:c1:a9:e0:af:c5:a1:d6:9a:ef:
b8:1c:0c:1b:21:84:e3:41:03:72:b6:b3:87:31:12:
d2:0d:c4:d2:76:73:71:63:fb:27:af:f2:ff:03:c8:
5f:ac:c4:30:7a:13:0e:ed:2a:17:64:19:f6:bc:81:
ba:82:f8:9b:82:73:b7:69:2e:ca:d4:bd:2c:d2:36:
0e:85:1d:a7:ec:c2:a9:49:12:f6:51:a9:d4:90:e3:
1c:a1:9f:73:3a:7b:d7:9d:52:d1:bd:84:40:17:f1:
82:a7:b6:4d:4e:78:60:87:9f:8b:62:a3:e3:1a:13:
e7:b7:98:98:f6:c5:93:89:42:90:0b:23:e2:b2:84:
64:54:d4:fc:72:41:04:7f:67:ce:fa:25:e1:e6:d2:
7a:71:3c:f2:29:91:c8:6e:34:6e:09:57:1b:f6:fe:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1E:8D:81:1F:19:71:3D:1C:AC:58:82:AA:69:2B:9C:C1:71:40:24
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/DB6NgR8ZcT0crFiCqmkrnMFxQCQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:f9:cc:c4:03:56:16:1d:2e:25:d3:ca:a3:5b:58:28:ee:e9:
9c:d8:e6:ed:37:cd:2b:2d:ed:7d:37:46:c8:ae:06:6e:a1:31:
c5:ed:90:95:ee:00:c7:c7:21:9a:85:48:10:ab:7c:52:89:64:
6b:7a:01:95:32:37:44:de:b2:99:66:dd:99:cb:df:cc:c7:22:
c2:ec:40:82:9c:35:01:45:71:12:39:83:be:ac:88:33:ce:46:
a7:c5:b4:4f:9e:3c:a0:57:22:35:8e:b4:9b:46:f8:68:1f:34:
1a:29:cc:1b:ad:65:b9:ca:a7:7a:b8:cb:86:1d:72:a0:7c:29:
c2:80:82:27:e9:36:52:f3:8f:2a:43:aa:ee:df:b8:28:20:15:
ec:19:43:5c:ca:8e:7a:b6:8c:44:fc:23:1f:3e:74:96:6b:56:
f9:49:c4:b3:81:38:09:a0:c4:02:58:15:9c:a4:f7:82:66:4f:
43:52:a7:4a:a3:fa:4a:2d:65:a8:35:0e:8b:16:a5:10:7d:a0:
52:b4:2d:9e:b6:d7:ea:47:96:c3:75:fc:3a:37:5b:a5:88:fd:
9c:b4:48:3f:2f:b0:55:06:ea:75:e6:52:79:df:55:ee:88:45:
90:fc:86:59:26:17:d4:cf:cb:c1:7e:a3:e6:8b:25:bd:41:a1:
fb:a0:4a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:20:27 2025 by rpki-client