Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/LP_CG7sP9SLtLCXDuMCeQHTbUro.roa
File: LP_CG7sP9SLtLCXDuMCeQHTbUro.roa (raw, json)
Hash identifier: H2JWsl/5GKNqojlwbh4Rpp663BucoFiGZGmmmrfhxGE=
Subject key identifier: 2C:FF:C2:1B:BB:0F:F5:22:ED:2C:25:C3:B8:C0:9E:40:74:DB:52:BA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1984
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LP_CG7sP9SLtLCXDuMCeQHTbUro.roa
Signing time: Sun 28 Apr 2024 00:23:52 +0000
ROA not before: Sun 28 Apr 2024 00:23:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6532 (0x1984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 00:23:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2CFFC21BBB0FF522ED2C25C3B8C09E4074DB52BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:6c:51:c2:7f:24:18:72:df:7b:28:12:fa:
be:31:5a:6b:aa:20:1d:1e:4b:02:ac:c7:f4:2d:19:
6e:cf:82:30:ad:4c:bb:aa:47:11:56:7b:12:51:bd:
18:38:0f:c3:b4:11:47:c9:4b:35:1d:41:2f:e9:9f:
18:02:bc:4c:a6:56:fa:88:34:a4:c7:e8:90:d9:d7:
f4:ac:3d:d5:af:9c:47:d3:00:82:8c:30:ba:91:d0:
5c:ea:fe:6d:7c:51:0c:ef:3e:c4:39:4f:1a:f4:a5:
2a:28:14:d6:9a:e8:85:2f:5a:0f:37:32:6e:c3:a6:
73:89:2e:0b:80:23:31:80:9b:c5:13:bb:6c:4d:21:
92:21:e9:12:36:1b:47:cb:11:14:e1:59:7c:90:cf:
7f:d0:e7:82:6c:2a:42:d5:e0:7b:89:8d:16:5c:9a:
d7:ee:96:4a:59:70:73:74:c1:8b:5f:bf:ca:ab:85:
79:b3:0d:58:c5:41:5b:6c:6b:7d:88:b5:a4:32:ec:
ff:1c:ab:65:8e:15:56:d7:b1:1f:a5:b6:3a:86:39:
9a:6c:5d:19:80:b9:b1:2b:39:1e:0d:e6:c6:02:95:
df:0a:42:24:f0:4d:0a:93:1c:33:f2:45:24:13:b2:
37:e7:c6:3a:06:56:64:db:18:9a:b3:66:30:b1:75:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FF:C2:1B:BB:0F:F5:22:ED:2C:25:C3:B8:C0:9E:40:74:DB:52:BA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LP_CG7sP9SLtLCXDuMCeQHTbUro.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:61:72:74:5b:f8:07:e5:fa:dc:05:bd:98:d6:d8:0d:9b:f0:
2f:ac:a6:9b:ae:00:cc:36:9b:88:2f:10:f0:2b:6d:c8:03:57:
d5:dc:20:82:28:c3:7b:14:0a:75:15:68:61:fd:51:74:9c:4f:
25:59:60:a8:32:0b:e8:80:34:97:80:7c:59:c9:28:e5:5f:cd:
f8:9c:4c:71:72:34:b9:f1:10:77:a0:0a:9a:1b:76:1b:2e:3c:
d1:31:25:45:20:e8:dc:3a:e3:07:d0:bb:2f:ee:03:ef:05:91:
6d:04:0e:d3:f3:21:24:c2:a7:3f:38:12:52:b9:69:a8:03:6e:
71:4f:1a:53:ae:77:14:af:2e:24:f3:39:72:91:95:dc:21:63:
4a:6e:e4:90:2d:bd:ec:22:80:87:61:34:cb:f1:56:aa:d9:6f:
b5:b3:d3:7c:83:29:06:6a:a6:d0:ed:f3:2e:06:ce:04:4f:e4:
e8:f9:ef:71:29:71:4d:a6:68:4e:9b:6b:05:59:f5:d9:b0:56:
e3:bb:fc:73:ed:8c:c6:46:12:e7:fa:57:ff:f8:52:64:e5:25:
4f:6f:48:b6:cb:32:a6:0f:d1:88:74:36:82:92:e0:41:1b:48:
71:09:14:3a:c9:97:56:5b:0a:d8:c6:9c:96:22:2c:13:2e:4d:
09:c4:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:46:18 2025 by rpki-client