Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/HZC5Z8sACi3YATg2dfgP2MYWa4k.roa
File: HZC5Z8sACi3YATg2dfgP2MYWa4k.roa (raw, json)
Hash identifier: F1yhnF0RmWqvzJuhb4ybh5knNCGMlqSYDM7Qa+m50Jo=
Subject key identifier: 1D:90:B9:67:CB:00:0A:2D:D8:01:38:36:75:F8:0F:D8:C6:16:6B:89
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D7C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HZC5Z8sACi3YATg2dfgP2MYWa4k.roa
Signing time: Wed 08 May 2024 14:24:23 +0000
ROA not before: Wed 08 May 2024 14:24:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7548 (0x1d7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 8 14:24:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1D90B967CB000A2DD801383675F80FD8C6166B89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:45:09:35:aa:aa:6a:c7:89:b6:d2:f9:8b:
f6:72:a5:a2:e2:43:e5:5b:6e:11:4d:9c:40:b3:03:
38:d1:f3:56:6a:a4:d2:61:5d:34:ad:e3:69:86:2f:
79:77:13:4b:99:c8:7a:25:2f:32:a2:74:05:48:32:
07:e5:5d:1c:03:98:c3:c5:00:a7:d3:60:17:45:fc:
1b:56:b4:e3:07:f5:13:95:d2:85:69:71:8c:d0:f8:
7f:c3:aa:ed:17:35:ba:27:89:c9:fc:c3:c1:cf:af:
78:70:84:fd:3d:1b:75:20:e0:ed:83:f0:34:de:1f:
25:9f:0a:46:8d:75:95:9b:46:cc:66:b2:78:5a:c8:
e0:91:82:b1:20:8e:38:b0:8b:66:1d:59:60:ae:5f:
ec:a9:7b:71:97:01:b1:7e:6e:bf:13:0f:3c:22:89:
7c:43:22:4c:24:6c:a2:b5:3a:9a:7d:e0:03:fb:49:
dd:00:14:3e:b4:c0:5f:c2:6b:17:96:e1:94:5a:8b:
98:1e:fa:db:0d:cc:2a:3e:2d:14:42:af:e9:ca:36:
57:51:0c:4b:9b:81:0b:a7:3d:69:39:84:a3:f5:70:
1d:e3:7d:01:33:39:b5:ab:ad:44:26:9d:d6:bc:97:
7b:17:54:e9:e7:7a:24:d5:cb:db:c3:2b:33:dd:61:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:90:B9:67:CB:00:0A:2D:D8:01:38:36:75:F8:0F:D8:C6:16:6B:89
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HZC5Z8sACi3YATg2dfgP2MYWa4k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:d6:e4:d6:44:7e:8b:86:d9:3d:fd:d5:87:80:80:4f:de:4c:
06:73:6c:ce:61:ca:0b:d1:d3:29:66:73:cc:5a:5e:54:fb:f2:
b8:84:0d:4b:8d:e4:ed:fd:c2:ef:93:62:68:e8:fd:9c:81:d1:
d2:29:0b:a3:14:ad:7d:76:75:85:af:63:2c:ea:99:60:6d:75:
ff:37:97:11:45:d2:35:fd:c5:2f:bc:93:a1:6b:64:c1:35:3c:
c2:9d:92:7d:d3:1b:0f:27:6e:d6:63:b8:e9:c4:c1:d7:bc:99:
1e:92:52:6b:72:81:bb:fc:28:be:e9:b8:92:98:16:fd:c6:cd:
ea:99:a7:3e:45:d2:6a:66:17:8a:f4:b7:a1:be:f2:be:73:f6:
f0:af:52:b7:8a:1e:dd:9c:13:67:87:e5:2b:ac:00:80:84:aa:
f6:b8:41:57:4c:44:53:7b:d9:f4:44:76:e0:63:94:b9:fa:65:
11:52:58:31:9d:ab:73:fa:98:01:47:4f:1d:4b:68:0b:8c:30:
98:60:3a:29:5c:14:89:63:99:14:c7:98:17:e6:30:15:64:43:
08:36:82:a1:35:6a:00:19:99:1b:2b:bf:5a:05:c0:9f:f3:f6:
74:68:fd:31:38:de:ea:da:d1:5b:95:df:18:4e:c7:65:dc:22:
93:b0:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:44:21 2025 by rpki-client