Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/HJqgG4972Notl4ghdOuMySXzH2k.roa
File: HJqgG4972Notl4ghdOuMySXzH2k.roa (raw, json)
Hash identifier: 4Lkh+jIcz5svkJtcoVKAb2W6FS9jvrRutUhxwVE+UrY=
Subject key identifier: 1C:9A:A0:1B:8F:7B:D8:DA:2D:97:88:21:74:EB:8C:C9:25:F3:1F:69
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 18AC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HJqgG4972Notl4ghdOuMySXzH2k.roa
Signing time: Thu 25 Apr 2024 18:23:55 +0000
ROA not before: Thu 25 Apr 2024 18:23:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6316 (0x18ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 18:23:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1C9AA01B8F7BD8DA2D97882174EB8CC925F31F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:b7:bc:73:6f:33:08:77:26:14:97:bc:da:
d4:86:dd:4b:65:e8:c1:86:91:16:e9:55:3c:7d:f9:
3c:35:ff:34:f4:99:14:35:f9:2a:ec:5d:8e:f7:be:
32:f0:67:09:be:52:40:8b:53:cc:f0:c7:7e:3f:05:
59:b2:6d:e3:b1:91:94:45:34:0d:82:fd:07:c1:e5:
78:58:f1:69:d9:32:dc:f9:90:bd:36:52:1f:32:be:
24:65:85:3d:bf:c2:14:5e:52:e2:0f:62:ec:b1:e1:
60:60:d9:3a:18:1b:c4:5b:64:eb:b5:36:e5:c4:bc:
a1:8b:86:1a:ac:55:be:03:5f:24:08:ae:86:1c:e3:
0b:18:32:49:9b:b0:5c:74:72:97:1c:c4:ee:71:b5:
f5:bf:f1:2a:ff:5a:9f:8b:41:1e:64:b9:eb:97:b8:
e3:e2:e7:c6:23:ec:d4:a5:73:46:bb:91:8d:3e:40:
e7:be:91:b3:ae:92:44:5d:04:d0:08:f6:31:b7:34:
1d:0d:f9:30:3d:f1:62:75:95:d8:00:bf:18:af:47:
4b:43:6e:0b:0b:e2:7b:e6:a7:79:40:d5:1d:3b:d4:
df:e0:ce:61:bc:ad:16:af:f5:24:ca:02:88:4b:9f:
5e:ea:b9:74:d1:0a:d5:b5:5b:a4:0a:b9:58:52:2a:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9A:A0:1B:8F:7B:D8:DA:2D:97:88:21:74:EB:8C:C9:25:F3:1F:69
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HJqgG4972Notl4ghdOuMySXzH2k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:2d:ae:b3:65:da:b6:20:75:23:8e:5e:0c:c8:b9:d3:a1:95:
b6:df:c2:86:f3:f8:45:89:3e:44:c8:62:41:4a:d9:50:4c:43:
ee:cf:a1:06:ab:8d:0b:8d:8d:43:da:ea:b3:61:02:aa:b7:79:
6e:4c:74:9d:bb:d6:3d:14:1e:13:1b:42:8f:a5:b5:df:03:fa:
da:44:3c:5e:9b:7b:68:70:e1:cd:36:4b:fc:f9:46:0e:1d:36:
05:77:76:96:c8:59:85:c6:9a:28:82:ee:85:79:2c:2c:b4:52:
30:c7:33:4b:f0:8b:42:53:f2:75:e5:b8:f1:89:5b:3d:4a:2f:
13:91:61:33:05:d7:9c:e3:33:b0:3f:84:9e:5a:d8:70:87:8d:
5a:42:0e:ac:fc:c8:62:8b:bc:d1:55:03:f5:02:aa:74:e5:e0:
94:6e:cf:ec:0d:7c:2e:97:0b:f9:ea:a6:84:d5:9f:df:cd:b8:
c3:4e:fe:14:ed:1d:40:94:02:1a:a2:79:bc:77:1b:2a:b3:bd:
57:f5:2e:9c:fe:e2:bd:c5:0d:5f:72:57:5b:ad:30:59:b6:a9:
f4:38:74:fd:2c:4c:50:ec:de:e7:c3:1c:b5:79:df:ac:5a:1b:
71:62:9b:bd:e8:f5:af:c0:e7:5a:ba:f6:79:90:bc:00:e3:1a:
bf:5e:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:58:18 2025 by rpki-client