Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/HVIqtXJmwGVWM8fT6Px04u4JaRE.roa
File: HVIqtXJmwGVWM8fT6Px04u4JaRE.roa (raw, json)
Hash identifier: X7Rub1TQdVUkXrXPi4Uzq3DAg5bdI4Z3pbZhwQnhZTo=
Subject key identifier: 1D:52:2A:B5:72:66:C0:65:56:33:C7:D3:E8:FC:74:E2:EE:09:69:11
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CDA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HVIqtXJmwGVWM8fT6Px04u4JaRE.roa
Signing time: Mon 06 May 2024 21:54:20 +0000
ROA not before: Mon 06 May 2024 21:54:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7386 (0x1cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 21:54:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1D522AB57266C0655633C7D3E8FC74E2EE096911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:17:08:f8:2b:08:29:5c:07:0d:1b:48:1a:
29:43:6e:69:76:99:20:8b:88:7a:0f:47:1a:b8:54:
b5:11:63:c2:c7:96:56:6a:73:5f:87:9b:d5:a7:ef:
a5:a1:a6:51:f8:82:60:86:bc:33:4a:b8:f8:c0:f2:
18:85:61:eb:c6:6d:cd:41:74:1e:fa:fa:1e:b1:25:
d1:83:e0:ed:1e:a1:5e:cd:49:a3:1e:3b:0b:d5:97:
89:97:48:2b:83:2c:6f:eb:7b:34:a9:8b:34:12:33:
68:a0:16:0b:fb:a5:00:0c:04:27:35:5e:b0:1b:81:
6b:5e:30:a9:58:50:ee:92:cd:09:38:62:87:0f:f4:
c7:8a:d8:55:89:15:73:4a:42:28:1f:64:83:b3:9e:
eb:13:72:a4:87:cf:fc:4e:9e:c0:da:c9:9b:78:26:
0b:51:c2:0e:c9:04:b5:21:4d:11:97:a8:5a:38:36:
c7:c8:cd:ba:d8:e8:cc:43:aa:37:75:81:1e:3f:fb:
c4:90:58:5a:5a:15:55:0a:3c:af:8f:a6:7f:07:44:
2d:f9:79:a2:dc:0e:f8:f0:f3:64:d1:07:ee:98:23:
95:72:5a:f3:86:8a:92:50:49:9d:f1:2c:9d:66:36:
56:46:0d:eb:12:57:de:b7:01:96:79:18:b7:78:2a:
8e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:52:2A:B5:72:66:C0:65:56:33:C7:D3:E8:FC:74:E2:EE:09:69:11
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HVIqtXJmwGVWM8fT6Px04u4JaRE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:ca:27:73:ad:71:20:43:63:f6:7e:3d:22:47:b7:c1:5a:d0:
e8:9a:b2:53:cd:ee:18:c0:b5:6a:43:3c:d0:1f:5b:38:cc:f3:
8d:fd:84:5f:b8:2d:19:d1:bb:8d:07:a4:b8:cf:4c:13:fa:35:
79:e8:a0:09:49:58:6c:04:bd:a1:a9:9b:93:6b:84:0a:12:bb:
f6:67:aa:99:12:3d:d8:ac:d6:da:0a:35:93:28:d1:7b:6c:2e:
e7:5d:84:76:85:40:04:8a:09:17:99:70:eb:29:73:84:7d:53:
c0:93:11:65:ea:5a:e8:18:34:31:ba:d7:00:4c:24:52:4c:ae:
29:11:e9:ca:49:38:32:9c:17:2c:e2:f9:46:41:30:66:66:79:
4a:58:28:6d:e3:08:4a:69:95:5a:f9:2b:9e:7d:0c:08:cb:b5:
1f:87:08:03:09:24:db:ab:eb:2e:48:9d:54:33:17:96:65:3e:
7d:24:40:8e:cb:fe:90:22:79:bd:c5:18:e7:18:68:bd:19:09:
0e:5c:c3:39:0e:f9:b4:de:a4:0a:88:0a:13:a2:de:08:23:c0:
19:d0:d3:1a:21:01:e5:3d:42:d3:d9:3e:a8:b3:2c:2c:57:a0:
28:08:1d:aa:e9:1e:4f:b6:00:5f:cd:5d:d4:f5:3e:ac:59:e6:
81:7a:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:50:59 2025 by rpki-client