Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Ior8a-7_0XeSuTj9zCExujXsmeY.roa
File: Ior8a-7_0XeSuTj9zCExujXsmeY.roa (raw, json)
Hash identifier: RdaLhpDJLkUi84sO6IFeOwydDrxkuBZIbU1nAI+V5OI=
Subject key identifier: 22:8A:FC:6B:EE:FF:D1:77:92:B9:38:FD:CC:21:31:BA:35:EC:99:E6
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14D2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Ior8a-7_0XeSuTj9zCExujXsmeY.roa
Signing time: Mon 15 Apr 2024 11:54:14 +0000
ROA not before: Mon 15 Apr 2024 11:54:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5330 (0x14d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 11:54:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=228AFC6BEEFFD17792B938FDCC2131BA35EC99E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:10:fe:7d:9b:9f:8c:d9:70:0c:55:18:53:
79:cb:fb:3d:13:44:27:a7:fa:1d:fb:e6:e6:ea:74:
13:ba:cd:af:e0:19:84:0b:0c:f9:3b:40:63:5b:7b:
a3:c1:f9:fa:19:27:c5:3c:e4:05:db:bf:ea:16:33:
34:86:40:d6:f3:f7:dd:81:c8:76:47:10:ed:c3:2c:
f1:92:f0:f4:45:f6:70:03:98:07:11:22:6d:78:d7:
ff:06:8d:57:8f:20:b0:3a:0a:f8:72:c5:d5:c7:13:
d6:fc:62:7e:b9:eb:f9:ee:a9:eb:f2:0b:de:0a:78:
00:e5:df:36:b4:61:8a:42:d6:53:7c:87:d6:fb:9d:
5a:69:a1:0b:da:0a:23:fc:78:48:f1:3a:d7:d9:49:
ef:02:a6:e4:07:6a:74:51:ec:c0:26:85:3b:9a:d8:
0b:e0:d6:20:9a:39:77:6e:07:87:e4:db:20:f6:e7:
15:11:ef:92:9f:15:24:43:ef:f2:0a:c9:39:08:57:
6c:5c:df:b7:c9:c0:e3:1c:25:26:f5:44:c7:05:f8:
60:b8:6e:be:32:86:4a:23:34:51:c9:88:3f:96:2a:
0c:c2:b4:18:9b:14:dc:b1:9c:1e:80:52:bf:3f:19:
12:6f:6b:06:95:08:b0:65:8c:2f:21:b7:b8:f5:9e:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8A:FC:6B:EE:FF:D1:77:92:B9:38:FD:CC:21:31:BA:35:EC:99:E6
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Ior8a-7_0XeSuTj9zCExujXsmeY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:84:47:6a:bb:b8:e4:ae:61:02:0a:81:26:29:dd:18:3e:80:
6a:23:7a:bf:2e:b6:86:4e:32:09:40:1c:99:80:21:6a:46:94:
53:08:10:9e:24:eb:a0:f9:d6:fa:1b:6e:23:cf:c0:b7:fa:68:
8d:68:98:6a:47:7b:8d:7a:0f:68:00:96:0c:1c:f3:d6:43:9e:
58:eb:49:1f:0a:b4:e9:4b:11:8c:f9:06:c1:5b:ac:f4:43:63:
ad:58:1b:4b:eb:31:b6:c0:db:3f:9e:37:d7:59:e9:38:10:a9:
fa:4d:5f:9b:f1:42:2d:67:59:68:6d:e1:8e:f9:ad:3f:1a:bf:
ac:df:df:fe:04:98:bb:e3:21:0c:52:fa:d9:7a:90:81:c8:5f:
7e:86:9b:de:f9:26:d2:c9:85:fc:92:fb:9d:98:54:1e:40:9a:
81:9f:f6:a9:44:ca:9b:d8:8a:e9:34:32:08:df:c4:f7:11:f2:
fd:8f:ae:cd:97:7d:2c:21:e6:07:c7:41:dd:54:aa:93:be:57:
f4:72:7e:85:7b:f4:fd:cf:4e:16:bc:8f:16:a9:dc:9a:f2:5a:
89:8d:5f:4f:77:ba:41:0a:8b:18:00:b7:16:9e:91:b6:21:6f:
00:e0:fe:36:74:9e:21:62:d4:d6:eb:41:09:88:e9:07:76:2d:
4a:6f:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:52:42 2025 by rpki-client