Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/H0DHU1b0YFjk3elT1fVj1_sMgQU.roa
File: H0DHU1b0YFjk3elT1fVj1_sMgQU.roa (raw, json)
Hash identifier: AQc9mtjdoW+BqTEaVwPHWIUEKqA6j027JhiGbrUL9JM=
Subject key identifier: 1F:40:C7:53:56:F4:60:58:E4:DD:E9:53:D5:F5:63:D7:FB:0C:81:05
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19EC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/H0DHU1b0YFjk3elT1fVj1_sMgQU.roa
Signing time: Mon 29 Apr 2024 02:23:55 +0000
ROA not before: Mon 29 Apr 2024 02:23:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6636 (0x19ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 29 02:23:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1F40C75356F46058E4DDE953D5F563D7FB0C8105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:a5:6b:7d:8b:8f:05:09:1e:88:37:30:50:
ef:26:c6:13:77:3b:3d:6d:07:2e:1f:59:ef:57:c7:
2c:1a:7b:da:5d:e9:22:10:ed:37:e8:ef:24:48:77:
82:da:cd:ea:a5:e8:38:4c:0d:70:6e:7d:5f:f3:23:
50:88:70:58:a8:92:5d:43:36:89:ef:84:0d:01:68:
6c:e2:76:02:cc:a3:cb:7a:c4:3b:06:75:57:b1:34:
b6:cd:bb:72:1d:93:bf:90:3b:72:0d:4b:fc:fc:80:
34:c6:6c:58:98:5d:2f:ea:21:f6:1d:ea:ca:6f:e4:
87:88:f3:29:d5:ab:8f:cf:6f:56:57:e5:10:c9:64:
58:5e:8e:e0:ac:9a:e6:b6:b1:18:18:0a:8e:b0:9f:
97:ff:9b:68:1d:38:bf:d8:a5:5e:a6:ae:8a:ab:d3:
39:2d:aa:d4:78:a9:2f:35:ac:04:1a:e8:4e:48:b9:
a6:c5:ca:ea:2b:e8:76:ea:c9:da:b7:a1:63:26:24:
e8:55:44:a4:e6:33:84:9f:2d:e1:6c:12:f2:61:79:
43:26:d9:af:29:0a:7c:31:83:8f:85:19:12:a6:04:
fb:74:1e:1d:5e:6c:b0:b2:40:92:8a:8b:84:4c:47:
6f:ad:80:da:0e:c4:37:45:e1:b7:d8:a1:c0:09:f0:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:40:C7:53:56:F4:60:58:E4:DD:E9:53:D5:F5:63:D7:FB:0C:81:05
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/H0DHU1b0YFjk3elT1fVj1_sMgQU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:04:0f:c9:f3:ae:55:97:bc:fe:ca:14:6a:ae:e5:e4:d2:49:
c2:5f:bb:c2:ad:58:8f:f8:1c:2f:44:bd:1f:29:60:f5:a2:b5:
3f:3f:e5:c3:a8:77:88:d3:21:1f:32:d8:da:1b:0e:56:d9:25:
fd:0c:11:b8:6e:09:13:02:97:91:f4:aa:08:60:07:b3:e4:32:
87:cb:9d:7e:7e:83:b5:1c:57:52:0a:4d:e2:f1:b5:f6:f1:a5:
a6:cd:f7:47:85:7a:b4:10:49:42:a9:e4:0c:07:bf:73:cc:a2:
b5:ac:de:9b:17:87:55:cc:e9:75:ab:eb:e1:91:b1:e1:1f:92:
a7:f4:69:4a:e6:e9:ce:67:d6:01:a2:09:ff:98:89:45:80:01:
12:e6:50:88:db:bc:75:e6:93:f6:db:b0:1b:8d:36:ae:2f:5b:
7f:08:4c:f3:df:b4:d7:dc:5b:4a:3e:82:ca:de:e8:d3:9c:3b:
45:7c:3c:84:c1:0b:b4:63:c2:4b:42:2a:a9:20:4c:13:c0:5a:
5b:10:d6:f6:d6:d1:8b:c9:c1:58:5b:15:ff:40:a0:c3:32:01:
1f:2d:af:56:85:50:f2:f8:67:40:9e:f6:da:53:8a:ad:68:9c:
6f:03:ba:78:da:77:c0:a6:71:49:cf:a9:96:98:71:fe:a6:a5:
31:1a:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:52:43 2025 by rpki-client