Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/EUzwgFsHuj--_BWNVfIVJL3GHUk.roa
File: EUzwgFsHuj--_BWNVfIVJL3GHUk.roa (raw, json)
Hash identifier: ynUxUGeLvZt1jHdJ22mUO0quEnXf/OWmUTKDjwpzY/4=
Subject key identifier: 11:4C:F0:80:5B:07:BA:3F:BE:FC:15:8D:55:F2:15:24:BD:C6:1D:49
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 131C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/EUzwgFsHuj--_BWNVfIVJL3GHUk.roa
Signing time: Wed 10 Apr 2024 22:23:12 +0000
ROA not before: Wed 10 Apr 2024 22:23:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4892 (0x131c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 22:23:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=114CF0805B07BA3FBEFC158D55F21524BDC61D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:03:cd:c2:66:d2:bf:cb:72:66:65:d1:70:
06:69:5b:e2:1d:5a:3d:75:51:7f:0d:41:91:24:ab:
3a:25:2d:eb:b6:4f:2a:e9:12:c4:a6:29:8f:6e:ab:
e6:3d:eb:81:f8:1f:57:21:df:d9:f8:f8:a3:ae:85:
3d:4f:c3:20:f0:2c:30:c9:b5:0e:ab:47:86:2f:70:
f2:02:e5:d1:31:13:d9:f8:df:47:5d:dc:db:e9:c1:
82:29:3e:5f:16:65:02:be:41:a9:df:ab:fb:ad:5d:
e4:25:eb:72:4b:52:4e:de:13:f4:8c:a8:f0:e7:39:
b2:09:53:78:26:c0:8e:d1:71:e5:d7:15:7f:a9:82:
4e:0b:a6:ff:e8:ce:04:f1:99:cb:73:df:5d:5c:1a:
2b:b8:ba:5f:0e:c2:1b:29:89:ec:fc:e5:77:01:c8:
ec:cf:b7:3e:77:4f:be:d3:8d:20:24:bc:3f:ec:ce:
b6:21:8a:68:d2:c5:48:4d:22:c3:fc:af:a4:2c:6e:
1d:c4:be:3d:25:28:3c:52:ce:0f:54:f4:64:11:da:
01:22:11:89:70:57:16:8d:f3:7c:79:bd:4b:cd:14:
27:cb:f9:f8:19:92:aa:28:82:6f:11:6b:95:54:56:
da:3b:a6:9d:03:81:6c:fe:0d:3d:cf:d1:0b:cc:e8:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4C:F0:80:5B:07:BA:3F:BE:FC:15:8D:55:F2:15:24:BD:C6:1D:49
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/EUzwgFsHuj--_BWNVfIVJL3GHUk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ce:8e:2e:fc:04:ae:62:e2:6e:5d:3c:f0:06:2c:68:1c:c9:4e:
05:8e:db:96:1c:78:34:ad:85:4f:20:90:04:b7:c9:bc:01:1b:
ac:58:1c:58:79:8e:4d:da:9c:ee:ae:0b:62:2c:af:47:3c:17:
c6:74:04:90:1c:67:0c:99:4a:e4:04:c3:df:2d:3d:57:5c:b2:
23:06:5b:df:1b:cc:ab:21:e1:41:3c:3a:84:23:fb:5c:ef:b6:
fc:48:fe:0a:33:c0:4a:f3:4a:e5:6b:d9:be:81:bd:64:43:6d:
67:ff:1f:a3:34:1e:4e:6f:1b:b9:07:a3:a5:0d:22:43:e5:79:
a0:14:bf:b3:06:9c:37:24:04:d8:86:49:ce:c6:c7:1c:82:45:
5e:aa:8d:ae:de:66:f9:1c:9a:bf:2f:d2:f3:93:bf:be:5f:b7:
38:8b:e8:10:f1:e2:a3:6f:ac:21:75:13:fd:f8:b9:06:07:58:
6a:9c:a9:5d:48:93:f8:5b:20:38:1a:95:41:0d:11:69:d1:aa:
66:08:16:96:cd:cf:ab:08:f2:78:5b:28:62:5c:8b:6c:87:7d:
3c:d4:42:ab:af:1e:93:a3:25:f9:5d:1b:bc:4a:04:94:74:9a:
22:f6:d0:95:1c:e1:3b:80:6a:10:6f:32:64:5f:f9:12:bd:fd:
92:7e:29:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:58:19 2025 by rpki-client