Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Db0-UQL-jSffcYWnj0o8mjzXFyA.roa
File: Db0-UQL-jSffcYWnj0o8mjzXFyA.roa (raw, json)
Hash identifier: VWl7megNyl0g4Lb2mvSaZkiK/0pMBRmFp210dwq+t+s=
Subject key identifier: 0D:BD:3E:51:02:FE:8D:27:DF:71:85:A7:8F:4A:3C:9A:3C:D7:17:20
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1594
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Db0-UQL-jSffcYWnj0o8mjzXFyA.roa
Signing time: Wed 17 Apr 2024 12:24:15 +0000
ROA not before: Wed 17 Apr 2024 12:24:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5524 (0x1594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 12:24:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0DBD3E5102FE8D27DF7185A78F4A3C9A3CD71720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:57:9c:59:3e:b9:8d:e1:0d:6c:73:30:b5:
ea:80:59:34:57:c1:06:47:3f:ae:02:cf:58:61:35:
fd:f3:cc:4d:71:86:50:55:38:cb:91:03:0c:9d:e4:
44:03:bf:94:0c:08:a1:50:63:6c:a5:60:16:8f:b7:
d1:a8:1f:63:b1:5f:c8:be:04:8a:0a:f9:01:fb:a4:
68:86:32:e0:e9:ba:55:5d:24:ec:85:41:45:1d:80:
ec:48:98:c5:e3:74:fd:b6:b5:84:44:83:87:4d:de:
c2:63:56:4e:8b:b9:6f:c1:6e:fc:d7:54:05:76:7e:
1e:b6:d8:59:6b:24:9f:0a:9d:15:76:83:70:bf:0d:
c4:4f:43:83:67:49:ce:7e:81:7b:c9:80:47:10:30:
ac:22:02:90:c3:22:c0:cb:77:97:30:ba:1f:d0:f3:
53:0e:88:22:7e:97:79:43:38:e4:60:31:c3:6c:1d:
a8:45:f0:e3:13:05:22:3c:82:b6:d9:8c:05:70:a2:
5a:6b:0e:d4:e4:fb:9b:9c:de:70:c2:c9:86:cb:e0:
8b:9f:1c:75:b4:f3:be:dc:08:95:ba:83:6e:f0:1d:
e0:2e:d6:c5:1c:66:34:74:3c:92:56:0d:cc:4c:6f:
6b:15:c4:fa:65:41:da:4a:41:eb:e9:f8:35:6c:82:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BD:3E:51:02:FE:8D:27:DF:71:85:A7:8F:4A:3C:9A:3C:D7:17:20
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Db0-UQL-jSffcYWnj0o8mjzXFyA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:a3:7b:c2:ed:5b:53:4c:92:4d:2e:2c:89:06:97:a9:b4:f5:
a3:8f:d4:53:17:45:17:38:07:d6:4a:05:41:d7:51:00:f9:a6:
74:54:08:b2:91:8f:87:25:62:ce:22:9f:5e:90:cf:4a:4e:b8:
db:54:1b:96:52:ff:8f:a8:6f:94:e1:13:41:37:ab:9e:b2:33:
29:f1:b4:46:37:e0:e1:5d:dc:4a:d3:b8:bf:8b:ad:2d:6d:e3:
92:ef:d7:2b:e1:8a:a2:70:37:96:1a:05:ea:d9:d2:db:c1:1c:
62:18:4a:81:43:15:0e:e1:4a:a6:f6:14:ef:d3:d9:06:9f:26:
5d:6b:6b:04:40:4f:77:47:a0:e1:1e:15:19:50:33:a0:db:c7:
0d:0e:c0:08:66:7b:67:03:41:f6:d8:a0:dc:2c:6f:a0:7f:91:
57:6c:07:ea:ff:6a:8c:f7:ed:b0:80:8e:e2:14:81:8a:f4:f2:
cd:93:4b:b1:e4:8e:04:76:3e:75:c8:24:f3:a4:73:2f:63:1f:
9d:e5:aa:5b:52:28:6a:ea:8a:ed:3f:72:ec:1f:23:e9:91:82:
02:41:74:fe:ed:28:79:64:c4:b1:bf:da:13:56:3c:7b:cb:8d:
9f:e8:9b:87:37:40:9c:61:30:29:8b:91:23:b1:aa:da:0a:2a:
b3:3d:fd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:51:49 2025 by rpki-client