Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/HO5ttVF5UIetRarOc8WyTeoxbJo.roa
File: HO5ttVF5UIetRarOc8WyTeoxbJo.roa (raw, json)
Hash identifier: 2EaD/F46SRQfSaWMw3T5bue+o79X1M8nNtXhhyOrq4g=
Subject key identifier: 1C:EE:6D:B5:51:79:50:87:AD:45:AA:CE:73:C5:B2:4D:EA:31:6C:9A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B0C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HO5ttVF5UIetRarOc8WyTeoxbJo.roa
Signing time: Thu 02 May 2024 02:24:05 +0000
ROA not before: Thu 02 May 2024 02:24:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6924 (0x1b0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 02:24:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1CEE6DB551795087AD45AACE73C5B24DEA316C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:58:f0:9f:bf:55:a9:85:b5:a9:e9:8a:8f:
7a:ad:37:7e:f4:e5:c5:62:d3:19:d5:f5:2b:40:81:
b8:bb:83:79:fa:e6:88:0d:d8:5d:e8:a6:2b:53:c3:
36:3b:9d:63:09:40:47:38:90:5b:f3:10:42:bf:a3:
e9:cd:6b:58:ad:46:14:67:5c:f3:65:c2:bd:8e:fe:
7d:f3:55:89:b7:34:06:7b:7b:5d:e1:9a:5c:f3:43:
38:da:67:25:d8:98:67:9f:8c:5c:73:9b:e0:bd:87:
08:7c:7e:a1:d5:60:7f:e6:f6:f1:5e:87:86:fc:7f:
7f:7d:41:c2:91:5b:2a:2c:9c:74:12:98:4d:68:e2:
bb:d7:5c:da:07:f1:4e:f5:8d:0c:f5:f8:ae:54:fb:
a4:c4:84:7c:4a:e8:4e:5c:33:d0:74:64:b0:c2:c1:
d5:e1:49:55:6d:a7:ff:f2:a9:0c:41:31:19:70:d8:
fb:2f:2c:83:a2:d8:60:6a:a7:91:c7:ff:98:d2:25:
a3:c3:3c:f5:c3:fe:f9:37:ad:95:6d:e2:c0:ea:c5:
52:61:4d:bf:9d:b8:67:92:59:08:80:b6:ce:bd:45:
e1:14:2d:1f:35:b2:ba:6a:6c:06:34:b6:1d:16:b3:
1e:ee:49:2a:a7:bb:a3:b8:78:12:ce:de:ab:88:ca:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EE:6D:B5:51:79:50:87:AD:45:AA:CE:73:C5:B2:4D:EA:31:6C:9A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HO5ttVF5UIetRarOc8WyTeoxbJo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
be:13:35:cd:7a:6e:38:a1:89:5c:24:b6:62:74:9c:05:c6:d5:
b5:15:66:cb:6e:14:9f:f1:ad:5f:06:c9:99:d5:0f:61:13:22:
49:17:68:2b:30:5e:c2:d3:34:d2:a9:d5:0d:67:c6:ae:26:71:
73:ad:0e:91:ae:29:4b:e7:24:3e:70:8a:48:73:a0:13:b3:5b:
12:9c:b3:32:98:3e:7b:b4:6f:8f:ca:4d:08:04:6d:7d:7b:64:
0e:b3:c4:62:f1:e3:0d:51:5e:a2:6d:0d:66:6d:56:d0:62:be:
85:cb:7a:9e:f9:7b:ef:85:1f:b2:a6:4c:7f:b3:42:cf:ff:36:
2a:35:21:a4:f1:76:3b:0b:83:8d:bf:ca:a3:b7:ce:d8:a7:13:
08:00:a7:01:e0:7c:40:e0:12:ea:b2:17:6a:ae:33:55:c5:e3:
d0:14:e7:91:fd:98:27:c7:64:99:35:40:32:32:64:0e:ae:c5:
a8:e1:a6:43:95:a3:32:b9:9b:47:f6:aa:20:a5:1d:79:cc:be:
c7:c8:a3:0b:78:cd:ed:68:ec:c1:4e:f3:50:0a:42:57:5e:ff:
44:67:82:66:e4:31:ba:3e:b6:ea:aa:85:9b:ed:01:17:1b:2b:
6e:7a:fe:ef:6e:29:56:02:9a:57:7c:e0:0e:91:51:6f:b6:31:
ca:5b:ff:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:50:47 2025 by rpki-client