Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/IpdcpsCqfFkw2PAEC2eF0wkq13o.roa
File: IpdcpsCqfFkw2PAEC2eF0wkq13o.roa (raw, json)
Hash identifier: AQeUfTTqhanlrsBKPrhFdPa2gb7qUmBYApkenoPRpks=
Subject key identifier: 22:97:5C:A6:C0:AA:7C:59:30:D8:F0:04:0B:67:85:D3:09:2A:D7:7A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D18
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IpdcpsCqfFkw2PAEC2eF0wkq13o.roa
Signing time: Tue 07 May 2024 13:24:57 +0000
ROA not before: Tue 07 May 2024 13:24:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7448 (0x1d18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 13:24:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=22975CA6C0AA7C5930D8F0040B6785D3092AD77A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:6a:a8:cf:c6:c2:fe:0f:e8:6a:9b:26:4c:
4d:be:3a:45:9d:d7:72:ea:a1:4b:e9:5d:b9:ad:da:
54:18:5b:2b:48:d0:f5:6a:b2:db:14:4a:4b:7b:b8:
92:e7:c1:60:3e:38:eb:e4:88:93:be:81:03:9e:86:
9e:ea:8a:52:4c:9a:25:d1:6e:d5:57:ef:a6:65:10:
b5:50:14:02:0c:d0:72:c0:0e:f1:02:d3:45:4d:1b:
e5:eb:d8:5e:f1:73:73:fb:81:88:a8:9d:60:be:91:
ab:77:89:37:65:c2:22:ef:a3:fe:a6:5d:35:35:7a:
bb:30:37:aa:df:40:a4:0c:7a:50:81:eb:a2:d2:cc:
94:52:a5:79:1a:31:21:3c:34:17:57:ff:48:7a:3e:
fc:70:0f:a4:27:32:59:9f:4c:e9:76:61:23:fe:b0:
17:78:77:78:4e:be:6e:09:0d:d4:48:17:75:a8:10:
0a:73:13:cd:3f:2d:fc:5d:55:0f:30:d6:5d:f4:15:
3b:18:df:79:eb:c5:39:91:5b:09:c3:e1:b0:3d:7b:
0c:fa:82:83:7c:c3:23:ce:70:cf:c7:b8:6d:66:29:
85:01:f8:0e:78:23:68:7c:12:ee:61:a2:45:e9:2a:
3b:39:45:5a:03:74:3a:ee:25:c7:50:73:7d:0c:b6:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:97:5C:A6:C0:AA:7C:59:30:D8:F0:04:0B:67:85:D3:09:2A:D7:7A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IpdcpsCqfFkw2PAEC2eF0wkq13o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:55:98:cb:3a:4e:8a:b4:c3:1f:9c:f4:54:d7:a5:d4:62:7a:
08:ff:1a:a8:b3:66:a1:94:11:74:22:10:63:e6:e4:b8:b5:ff:
96:19:4f:77:09:54:06:0f:25:8a:19:48:62:77:0e:ac:eb:0a:
aa:51:96:cc:9e:e0:12:ea:71:ce:eb:ee:42:f7:11:29:b4:83:
0b:b2:70:52:2a:d3:65:93:ed:c9:8f:37:e9:46:99:65:25:26:
1d:8a:64:4f:24:53:a0:a7:b8:a9:c4:70:38:a7:63:93:1f:3a:
aa:83:aa:9c:d7:97:ab:d4:b7:e1:43:08:7d:76:9d:53:f0:3f:
24:d3:ad:be:64:14:36:84:05:3b:31:ac:ba:83:d7:fe:17:6f:
e7:41:e4:b6:09:ea:61:a2:dd:94:90:f8:f8:9b:5e:d0:dc:30:
08:78:90:d1:de:84:28:9c:c9:07:c3:02:87:e0:01:4c:64:29:
a1:0e:80:e5:ef:1d:ac:e8:16:61:19:6b:6e:e4:11:f3:db:a7:
33:6e:f9:83:f4:3a:3a:eb:a7:fd:17:1f:2b:b7:f8:41:d8:cf:
73:ff:1f:62:bd:85:5b:4c:48:48:3b:64:8e:89:c2:23:3b:f5:
ea:8f:09:2b:3b:87:55:86:d8:07:41:af:94:a6:7d:69:78:8a:
b2:88:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:52:55 2025 by rpki-client