Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Jr7gZO6OdGqsqJCFjRi--8AhfCg.roa
File: Jr7gZO6OdGqsqJCFjRi--8AhfCg.roa (raw, json)
Hash identifier: FzGnY0TEe5s/vokWmKvukaObtKNOYHXcXIV3wRQ63EY=
Subject key identifier: 26:BE:E0:64:EE:8E:74:6A:AC:A8:90:85:8D:18:BE:FB:C0:21:7C:28
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15CE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Jr7gZO6OdGqsqJCFjRi--8AhfCg.roa
Signing time: Thu 18 Apr 2024 02:54:18 +0000
ROA not before: Thu 18 Apr 2024 02:54:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5582 (0x15ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 02:54:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=26BEE064EE8E746AACA890858D18BEFBC0217C28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4b:0e:d3:2a:80:da:98:b1:e4:b4:cc:52:e7:
84:4c:72:97:79:81:09:16:da:9a:dc:da:42:c2:72:
98:0d:68:97:50:6e:b6:a9:36:1d:dc:13:14:00:88:
4b:60:92:d9:1c:06:45:99:f4:ac:1a:5f:5f:b0:bf:
c2:ed:0e:c5:89:59:02:54:36:20:17:35:71:e8:6e:
f4:46:5c:e3:59:bd:f4:ce:95:53:0f:71:86:9a:44:
69:1b:a4:a7:32:fa:2b:b4:21:ef:82:ef:92:45:1f:
30:92:c6:28:5a:9a:45:97:4a:5e:ef:60:50:08:1d:
96:95:ae:bd:05:b0:e0:90:16:73:50:b5:25:f3:39:
6e:29:eb:18:38:47:38:fb:32:e3:55:d0:e3:22:3b:
f0:71:15:6c:24:2b:33:98:f9:50:82:ad:6b:58:4b:
8c:7f:7f:06:04:58:f4:2c:d8:45:d9:ef:16:60:e9:
04:a8:ac:d2:7d:43:29:9a:5b:12:5e:db:11:21:4a:
88:d1:e3:e3:45:e0:a1:ae:3a:e0:8b:a6:13:cf:b5:
75:e8:68:5d:23:44:65:8e:d4:8d:bb:cb:b4:28:c5:
cf:2c:ba:2e:f3:92:94:99:90:1f:62:c9:81:e9:22:
b3:b0:bb:fb:b0:76:ce:43:55:91:13:c7:aa:55:e8:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BE:E0:64:EE:8E:74:6A:AC:A8:90:85:8D:18:BE:FB:C0:21:7C:28
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Jr7gZO6OdGqsqJCFjRi--8AhfCg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:1a:33:2e:32:c3:84:8f:f0:68:8e:6b:1a:26:cc:21:ea:07:
bd:a7:1c:33:37:47:62:ee:69:57:5d:29:dc:56:0f:70:37:f6:
9b:8d:de:d1:27:7c:a6:34:ef:2a:d6:1a:56:b4:45:b1:c5:84:
67:32:a6:bf:53:cd:04:36:47:22:ca:6f:a2:c7:c0:e9:24:46:
3f:c6:82:1c:65:2a:d8:0c:56:57:28:1e:0e:f9:82:5c:31:82:
35:41:c0:98:02:03:13:48:e5:5e:8f:eb:f2:66:ee:57:45:56:
4f:7f:4c:a6:f8:e6:0a:7f:9d:02:44:95:2c:c3:df:18:18:eb:
a2:9f:71:6b:b0:6d:8b:dd:05:c4:43:e6:53:e8:1c:3d:2f:93:
2b:25:36:ae:0f:28:e2:a4:c3:05:ec:7a:ac:63:cc:dd:6e:ee:
dd:d8:44:99:74:d2:e7:27:25:5d:61:0c:3f:a2:c0:76:7f:44:
db:db:21:68:49:8e:78:11:5b:18:ba:b8:52:7e:37:92:fd:fb:
e1:3c:4c:f2:ef:73:e2:e5:7b:ba:41:88:ec:a7:65:b3:97:f5:
9d:bb:14:d7:b3:9a:7d:bd:e0:50:ce:29:d4:cd:1c:3a:ea:e8:
1d:4c:b7:f7:64:f6:1a:6d:c4:7f:53:d4:70:b2:15:83:10:2f:
69:1b:ed:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:45:24 2025 by rpki-client