Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/I2mLJZ3RVZMpUBypq7aE3eL_mDY.roa
File: I2mLJZ3RVZMpUBypq7aE3eL_mDY.roa (raw, json)
Hash identifier: 09w3QxNnZ7CuquLfy5EFkQRwuNBvFL/2QbLNXtO/aVg=
Subject key identifier: 23:69:8B:25:9D:D1:55:93:29:50:1C:A9:AB:B6:84:DD:E2:FF:98:36
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D3E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/I2mLJZ3RVZMpUBypq7aE3eL_mDY.roa
Signing time: Tue 07 May 2024 22:54:57 +0000
ROA not before: Tue 07 May 2024 22:54:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7486 (0x1d3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 22:54:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=23698B259DD1559329501CA9ABB684DDE2FF9836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:96:aa:e6:e5:22:24:a2:9f:79:a2:f9:fb:
c6:8c:1c:83:cd:b4:9a:13:e2:85:98:9f:b7:e4:43:
6f:b4:47:e1:fd:7a:10:a6:1a:f6:05:28:e9:81:de:
4f:8d:d0:bc:7c:3f:37:0a:4f:e4:17:41:ee:12:f7:
ca:60:28:63:88:eb:ee:84:91:c6:6c:c1:b5:9c:2d:
55:36:42:fc:a9:42:66:cf:85:82:c6:16:b4:f8:0d:
43:8f:2f:e3:dc:56:04:a5:57:93:4a:9a:b8:3b:3b:
ee:99:bb:e9:fd:f1:2b:84:a5:94:e9:31:8b:9a:b3:
15:56:05:2f:06:80:8b:0a:f5:39:d7:0c:b7:c9:f3:
aa:0a:6e:49:40:5d:05:af:2d:d7:85:71:58:74:d4:
24:14:4e:2e:4b:db:b6:bf:ee:13:9d:c3:0b:61:28:
12:5c:39:3a:96:13:ca:8d:62:ed:86:fe:8b:61:b4:
d9:b9:48:6c:5a:fe:a9:8d:a7:d7:37:4b:ce:6c:58:
d7:f3:4d:69:98:19:7e:68:6d:99:95:0f:70:e9:6d:
2e:3b:47:6f:f1:52:7b:ae:98:d5:98:b8:ff:8e:9b:
8c:18:6a:a2:86:c3:46:9e:dc:14:a2:48:a6:38:50:
08:6a:6c:63:ee:db:dc:9b:c8:8f:26:56:12:e5:4f:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:69:8B:25:9D:D1:55:93:29:50:1C:A9:AB:B6:84:DD:E2:FF:98:36
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/I2mLJZ3RVZMpUBypq7aE3eL_mDY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:b3:00:80:d2:db:12:ab:67:06:ee:04:6d:5b:3f:5b:b6:26:
cc:a4:74:c4:46:56:5f:02:cd:a1:2f:81:25:33:03:b9:bd:fb:
5f:dc:05:d7:74:eb:dd:04:c7:dc:ef:7c:f7:e4:64:e4:f0:38:
19:9a:f0:9d:db:2c:d8:f4:2a:82:5e:0e:60:1b:3b:88:2d:4b:
aa:c5:3e:0e:1c:b3:8d:c5:47:14:2d:ae:7c:8d:d7:e2:00:27:
c6:d1:d3:2f:7c:05:43:36:9c:4d:15:b1:77:b4:dc:19:4a:51:
63:4e:7c:23:82:bd:84:57:f7:88:14:e5:aa:95:c2:a7:19:a5:
45:e7:1b:6b:93:0d:60:be:61:7d:ae:68:f6:8b:5f:94:a2:c4:
30:90:7b:9f:9e:01:08:c0:2e:02:01:29:fd:f1:95:98:06:97:
39:69:e6:3a:9d:52:24:20:78:01:74:12:92:d3:f5:34:12:f9:
94:69:5c:d1:57:15:94:6f:11:67:f4:8c:a6:1a:97:cd:7d:12:
ef:2a:ed:aa:8d:0e:a8:3d:b6:c8:13:f7:59:c8:39:c9:24:94:
e9:18:32:fd:a7:e9:f9:c2:15:60:92:ab:58:a6:7a:6d:17:91:
5d:70:e8:d1:51:8b:03:28:ce:01:c4:de:bf:00:07:e3:37:a2:
6e:05:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:42:16 2025 by rpki-client