Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Ip4rNcCWU5JyxpXWCXbOe65Kg64.roa
File: Ip4rNcCWU5JyxpXWCXbOe65Kg64.roa (raw, json)
Hash identifier: 3wTWE5ywpay+WvtJLSJboTqeGIyEKKl1jAzQrVuM3uo=
Subject key identifier: 22:9E:2B:35:C0:96:53:92:72:C6:95:D6:09:76:CE:7B:AE:4A:83:AE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 144E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Ip4rNcCWU5JyxpXWCXbOe65Kg64.roa
Signing time: Sun 14 Apr 2024 02:53:17 +0000
ROA not before: Sun 14 Apr 2024 02:53:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5198 (0x144e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 02:53:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=229E2B35C096539272C695D60976CE7BAE4A83AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:a4:c7:8b:cb:5a:0a:c7:fb:50:aa:9b:f2:
b3:90:fb:1b:d8:b8:72:ec:0c:ee:56:a5:dc:f9:a2:
8e:78:66:67:9a:0f:1b:2f:1d:3b:80:ba:e1:fa:7e:
00:14:c8:3f:7c:0f:b1:a2:90:ab:05:d4:cd:ce:8b:
43:be:a1:da:59:67:2c:2e:db:cc:7a:90:70:83:01:
eb:ef:83:c0:ef:55:6d:2b:99:01:a5:de:6b:de:57:
2c:ca:71:76:c1:9f:e0:7e:94:8c:07:7f:82:9d:98:
8d:7e:91:c7:91:fe:b6:23:b9:92:17:d7:ac:3f:f8:
49:e1:da:6b:44:14:ed:e4:22:20:7d:d2:08:5f:b0:
54:33:71:7b:12:46:a0:28:30:7e:55:23:a4:dc:4e:
13:f7:2d:76:13:f5:0b:15:b1:b6:62:0a:ad:b9:dc:
7b:51:5b:fb:2c:ad:a7:d5:94:25:9c:fd:90:b9:3d:
fc:69:bf:35:75:32:d4:3a:23:ae:2b:14:2e:8e:68:
08:b7:03:e7:af:14:47:af:a7:fa:f4:36:20:43:11:
44:3b:77:db:ea:40:68:93:04:39:db:86:de:0a:90:
31:81:78:51:8f:32:68:9a:0b:37:64:fd:4c:47:93:
90:0a:36:21:6c:57:40:96:69:90:f7:42:b9:b9:e3:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9E:2B:35:C0:96:53:92:72:C6:95:D6:09:76:CE:7B:AE:4A:83:AE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Ip4rNcCWU5JyxpXWCXbOe65Kg64.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:dc:ba:72:50:70:8a:fe:0f:0d:d7:47:a2:d8:00:4b:8d:5c:
db:dd:49:8d:82:28:cb:41:81:2e:3e:c8:10:02:07:c6:e2:a0:
e8:fd:d8:8c:ed:81:86:97:b8:48:e1:fb:3a:d6:d8:d2:a2:9f:
c8:25:56:d6:a8:0f:4b:12:ec:b8:51:00:4c:cd:ca:fb:45:06:
70:33:8b:e2:c9:e0:8d:90:9f:3d:63:0c:2b:77:c1:99:45:57:
b5:04:49:f2:76:f0:bb:9a:77:c9:fc:ce:63:ca:92:b4:38:67:
e8:45:ac:b2:17:b4:5b:6c:48:47:29:d3:1a:30:4a:18:50:5a:
1f:ab:9a:f6:83:d4:16:8d:39:95:1e:08:62:77:1a:67:6b:d0:
08:80:a9:12:41:b7:cf:9e:8b:3a:a0:17:35:4b:c6:d5:8c:71:
eb:ad:e7:cb:27:dd:3a:bb:f0:aa:b7:e7:93:76:42:31:d4:ec:
86:15:39:b4:1f:73:5e:cc:2b:f1:2b:71:d7:0b:9c:af:85:f4:
56:da:15:f7:cf:b0:16:5f:86:5a:b5:d1:90:da:dc:02:b1:46:
53:bd:be:0c:9b:ab:fc:33:8c:9a:ec:66:74:fb:4a:fe:29:4c:
56:12:3f:84:3a:ef:e1:b6:6e:b0:87:e1:09:f8:59:5b:47:6a:
1c:1a:c7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 08:00:28 2025 by rpki-client