Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Ex_7MzyZQ2WtIJBBpzzCkWNfxi4.roa
File: Ex_7MzyZQ2WtIJBBpzzCkWNfxi4.roa (raw, json)
Hash identifier: RbtXkIgLM6E4L7OhfXhSOMcrC9nkTJe2+sZsl/NGWvI=
Subject key identifier: 13:1F:FB:33:3C:99:43:65:AD:20:90:41:A7:3C:C2:91:63:5F:C6:2E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 18BE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Ex_7MzyZQ2WtIJBBpzzCkWNfxi4.roa
Signing time: Thu 25 Apr 2024 22:53:46 +0000
ROA not before: Thu 25 Apr 2024 22:53:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6334 (0x18be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 22:53:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=131FFB333C994365AD209041A73CC291635FC62E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:ad:29:79:80:73:e9:cf:b4:26:49:de:ea:
b0:62:b7:5a:ee:03:2a:3c:d2:f7:77:93:77:6c:16:
bf:8f:e3:e1:f0:d7:78:0b:fe:23:a8:42:0a:dd:c4:
d9:47:6d:4f:c8:50:90:50:fb:f5:fd:38:74:f8:cf:
4a:ed:19:37:26:46:41:f0:33:8e:99:8d:c3:d2:84:
5b:48:9c:7e:17:10:b8:11:b4:63:19:67:1d:ed:78:
90:0c:5d:ff:11:c5:fb:15:f4:8f:1c:30:b3:b0:da:
95:ce:c8:e3:7f:48:b5:3b:ab:b8:90:f6:ce:17:9a:
89:7e:90:07:f6:59:77:1e:9e:c5:fe:e7:87:b8:40:
4a:27:c5:6f:8a:72:5d:50:bd:24:fe:3b:b7:fc:cb:
de:ff:b3:90:5e:b6:7b:08:19:83:a9:04:51:4b:c4:
ac:06:34:5b:ba:7b:7b:61:e3:50:94:23:0a:7b:32:
29:ec:eb:1c:5c:0b:89:a4:0c:c5:64:dd:b4:92:00:
03:fb:c6:76:3e:0d:b6:61:19:96:5e:54:70:46:b9:
9b:7a:37:84:3a:bc:9a:01:23:c8:d3:a9:b6:ef:df:
49:54:5b:77:fe:46:12:52:d4:d3:3a:1d:f6:a9:52:
71:7b:92:c9:db:e5:ad:dc:b7:9f:95:29:50:12:47:
a4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1F:FB:33:3C:99:43:65:AD:20:90:41:A7:3C:C2:91:63:5F:C6:2E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Ex_7MzyZQ2WtIJBBpzzCkWNfxi4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:db:ea:2c:82:69:05:41:c5:5a:d5:d7:ad:07:c1:e0:44:35:
52:2d:18:39:80:04:1c:de:58:18:9c:cc:d6:a0:37:47:e3:69:
46:3c:46:82:11:35:bd:f3:18:1f:d3:9c:8e:00:dd:65:3a:94:
6c:94:43:bc:4e:c9:fa:81:60:0f:0d:41:d8:66:e5:18:a4:95:
f3:6c:09:b1:7f:ae:ad:f5:25:f3:9a:0e:5f:ae:b2:6a:54:bb:
cf:30:55:18:6f:36:e2:31:20:4d:d2:55:dc:4b:2a:80:af:3f:
4a:87:e3:3f:4d:87:33:01:08:30:24:34:33:a8:37:f5:ef:86:
5f:32:f0:f1:af:ae:12:f7:62:97:ac:86:6c:d1:df:13:c0:5c:
9a:a2:b7:f6:bc:b1:13:7f:24:6c:bd:e3:54:e9:44:2c:83:a0:
2e:98:dc:35:cb:66:f6:fa:78:24:a2:99:59:bd:b9:85:e9:8a:
f6:29:bf:55:77:dd:b7:63:8b:0c:89:d6:c2:a1:9b:31:1f:d4:
16:c7:74:2a:b5:53:a3:44:fb:ac:01:cf:d0:c6:c2:e7:f0:ea:
94:5b:68:3e:72:aa:f7:23:98:ac:cb:72:fc:1f:5b:5e:5f:07:
bc:c0:35:25:71:0e:e7:f1:2a:2a:59:47:8f:1d:96:1d:dd:35:
35:ae:04:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:24:06 2025 by rpki-client