Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Jwq73dzMb72XoJomGtwL8tsz_8o.roa
File: Jwq73dzMb72XoJomGtwL8tsz_8o.roa (raw, json)
Hash identifier: lNzvuzDGB0SQ2nC2YE6MXloNW9fdXjohH3uM0RueX6g=
Subject key identifier: 27:0A:BB:DD:DC:CC:6F:BD:97:A0:9A:26:1A:DC:0B:F2:DB:33:FF:CA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1530
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Jwq73dzMb72XoJomGtwL8tsz_8o.roa
Signing time: Tue 16 Apr 2024 11:23:23 +0000
ROA not before: Tue 16 Apr 2024 11:23:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5424 (0x1530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 11:23:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=270ABBDDDCCC6FBD97A09A261ADC0BF2DB33FFCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:17:4e:b8:a7:b7:a6:08:e9:86:29:64:3d:
b4:d7:68:c9:5c:54:29:ec:21:21:a3:7e:bb:49:89:
96:1d:37:eb:5f:04:33:a3:32:8b:3f:fe:8d:0f:bf:
c2:15:0f:e3:f9:07:22:61:3d:d2:57:69:7a:7c:98:
a2:68:84:96:67:fd:11:60:d3:b6:77:51:81:df:1e:
51:e0:bf:f4:37:9c:a1:7f:c7:26:d0:72:85:42:df:
56:d5:fc:1f:25:f2:9d:cc:fd:37:62:aa:16:07:0a:
dd:05:cd:75:fe:00:86:92:6c:fc:90:d5:13:85:66:
55:f6:30:ab:5b:e9:ae:78:2b:0f:e7:20:03:e5:ba:
c5:17:13:69:2c:77:ef:6f:dd:d9:f1:45:52:40:1d:
14:d4:8a:bb:04:13:6e:ae:f3:ee:c9:22:a2:c7:e3:
52:57:cd:73:f8:a6:91:f1:cd:2a:30:9f:99:d8:91:
31:f1:31:78:1c:79:0a:4d:a5:e1:18:73:09:7c:4c:
15:06:56:37:27:3a:2c:d6:ee:ca:ab:76:65:41:d4:
4b:d7:c0:8a:76:10:be:58:6a:57:27:f3:7d:38:63:
0f:fb:97:15:90:04:fe:5b:c4:49:96:de:e6:e0:63:
c2:e5:12:90:4f:a0:3d:28:3c:a9:30:ce:bd:ff:32:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0A:BB:DD:DC:CC:6F:BD:97:A0:9A:26:1A:DC:0B:F2:DB:33:FF:CA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Jwq73dzMb72XoJomGtwL8tsz_8o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:af:23:b9:a0:2f:82:af:e3:57:a7:02:06:b1:63:d3:3e:20:
b0:e3:2e:f0:bc:ef:07:1e:bd:b0:11:0b:93:68:fb:59:d9:8a:
5b:7d:ea:75:62:87:88:02:34:5d:50:a4:68:3e:24:44:56:03:
17:f9:58:db:d8:8e:7f:9a:31:ac:22:42:4b:94:bc:20:53:9f:
2f:1d:83:1f:e8:6c:68:47:e4:c1:90:0b:41:1a:97:b5:58:50:
d0:a9:42:87:8f:a1:98:76:fc:a1:55:4c:36:8c:22:a9:ac:bd:
97:9a:ed:93:3e:b4:3f:c9:e6:6e:7f:01:cd:34:ea:91:33:47:
e0:5e:74:68:2a:d0:06:91:c3:77:cf:b3:2e:1b:26:c5:0d:5b:
95:c8:72:f1:a1:39:8d:20:12:eb:ce:95:86:b4:5c:d1:d2:17:
ea:4c:ab:0e:57:91:97:22:a2:83:c7:40:3a:71:1f:ea:20:10:
82:b8:ac:32:c5:ee:c0:f0:0f:81:95:47:4f:87:38:49:cd:54:
30:7c:7c:3c:90:b0:da:87:34:97:60:f1:f1:93:10:54:8a:7f:
cc:87:44:5f:a3:39:2c:76:6b:40:7b:a7:6a:56:d9:ca:b1:d8:
67:ed:1e:72:f4:9c:86:f6:37:84:bb:ac:a7:1a:96:f0:06:9a:
42:53:c1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:45:33 2025 by rpki-client