Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/J1KkZJmR6Yu-aAa_hfKTfEUkdpY.roa
File: J1KkZJmR6Yu-aAa_hfKTfEUkdpY.roa (raw, json)
Hash identifier: lqMksy00xW8vqNMr742qlv8lT1q7dcz1ayl2HvLreJ4=
Subject key identifier: 27:52:A4:64:99:91:E9:8B:BE:68:06:BF:85:F2:93:7C:45:24:76:96
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0DCA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/J1KkZJmR6Yu-aAa_hfKTfEUkdpY.roa
Signing time: Wed 27 Mar 2024 17:52:26 +0000
ROA not before: Wed 27 Mar 2024 17:52:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3530 (0xdca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 27 17:52:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2752A4649991E98BBE6806BF85F2937C45247696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:88:51:f0:b1:04:0e:84:cc:8d:cb:c1:f6:
e6:d2:1e:fa:a7:95:9d:71:12:8a:f9:f2:b4:48:98:
fd:48:62:fb:ad:12:6e:b4:ff:c3:bd:03:ab:fc:d7:
45:2e:ac:c7:71:4b:ee:35:50:93:d8:3c:6c:8f:07:
d3:9d:da:3c:80:84:7d:7a:d7:9c:d3:c5:46:11:6d:
4d:10:7c:11:eb:b3:d6:92:11:06:24:d5:21:fe:7b:
5b:ef:53:c9:47:fb:55:e5:b6:0e:12:4c:5a:b5:89:
69:c0:74:10:bb:1d:38:6f:e9:56:c4:b8:08:1d:bf:
b6:0d:d6:98:2a:df:ff:bf:2c:b5:75:b9:ba:83:9f:
2d:40:7d:0d:81:2b:a7:3b:38:f9:a4:ba:08:1c:56:
1b:83:05:da:7d:43:aa:d5:74:a3:ed:12:87:df:8c:
94:c5:16:fd:2e:7d:0c:75:a9:08:bf:dc:75:09:31:
65:4c:a2:6a:79:c5:cc:b0:be:62:a9:54:c6:be:c7:
ee:84:90:96:9e:f9:7e:87:80:5e:73:5b:ad:60:80:
7c:3c:a0:b3:67:e5:90:ea:96:33:64:73:35:e2:93:
b5:13:81:ec:8b:12:a6:7f:70:b6:5a:e1:6f:66:fe:
c7:1c:e3:9b:78:02:b8:ee:79:d5:61:08:97:b5:c9:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:52:A4:64:99:91:E9:8B:BE:68:06:BF:85:F2:93:7C:45:24:76:96
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/J1KkZJmR6Yu-aAa_hfKTfEUkdpY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ce:30:37:5e:15:75:a5:af:82:1a:07:53:58:67:99:0a:a4:f7:
15:f8:19:1f:f5:2c:e9:2f:ae:8c:a1:a9:40:54:da:19:9f:c8:
8c:f1:ed:bb:09:2b:20:a7:22:a9:bf:c1:6d:32:3d:9f:0f:5e:
59:5c:bd:6b:6f:d5:b8:e2:1f:b7:4f:36:11:4d:22:57:fc:e2:
07:58:28:c5:06:79:2f:81:c0:50:c1:59:81:73:ab:0a:57:bf:
dc:8a:e4:88:2f:4e:fa:67:8c:5a:da:00:7a:dc:08:73:b4:98:
51:7a:1e:a2:36:17:90:62:2a:59:b2:b0:2f:72:ab:19:56:6f:
cb:f5:c1:20:b1:eb:30:a3:22:aa:77:93:bf:0e:8a:6d:e8:88:
54:37:d0:a0:9c:94:81:38:ac:e6:30:b6:e4:ab:51:23:ec:af:
26:10:57:94:56:7a:9f:65:53:7e:c2:97:d3:ea:c2:22:99:d9:
25:06:a4:2b:72:ea:d8:96:37:09:84:6d:ae:01:34:b3:8f:25:
75:4b:40:5f:6b:0e:b1:21:3b:b3:e5:96:37:df:61:f2:17:29:
cf:f3:76:30:e7:94:19:71:b2:fb:50:77:3b:ad:93:75:17:d8:
50:10:23:62:3b:a4:b7:61:7d:69:98:21:3b:c5:1f:d2:02:5c:
b0:20:be:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:58:45 2025 by rpki-client