Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/M-MqFSkr1HmNvzWbcr9PZGkzsBc.roa
File: M-MqFSkr1HmNvzWbcr9PZGkzsBc.roa (raw, json)
Hash identifier: OLdu1detMzUlRhhWkX4OT4c99kqV15N/EISLmqna+qM=
Subject key identifier: 33:E3:2A:15:29:2B:D4:79:8D:BF:35:9B:72:BF:4F:64:69:33:B0:17
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 150A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/M-MqFSkr1HmNvzWbcr9PZGkzsBc.roa
Signing time: Tue 16 Apr 2024 01:53:19 +0000
ROA not before: Tue 16 Apr 2024 01:53:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5386 (0x150a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 01:53:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=33E32A15292BD4798DBF359B72BF4F646933B017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:8f:c2:1b:d5:3f:4e:ad:da:6f:c7:18:21:
74:ea:94:30:86:6a:f4:d9:cf:ea:82:27:52:2d:6d:
e6:10:76:0e:d1:ac:c9:79:65:c9:b7:34:a2:94:79:
5d:58:ee:b4:4f:05:c7:55:cf:d8:72:e3:c6:10:7e:
5d:b6:5c:2c:16:33:45:47:a5:d8:04:33:b2:1e:56:
e5:4a:ca:bd:65:14:2b:ef:d2:ec:9c:a2:48:b4:c2:
88:0c:af:fb:f1:c1:83:f1:54:42:09:6c:00:ec:69:
1a:f1:93:ba:67:ad:46:be:b3:dc:f5:db:2a:85:30:
1b:3a:c8:e5:82:6e:b7:f0:46:76:cf:63:52:24:ec:
e6:ed:a3:4b:e8:83:78:84:98:e1:68:bd:88:34:ef:
da:e0:58:58:cf:f2:12:58:fd:b2:10:c6:d3:ac:e1:
77:e7:42:01:5b:4a:b9:83:83:14:80:c8:9b:0d:62:
d6:eb:47:f5:0c:d7:c5:a1:76:7d:3f:ea:50:77:6d:
bd:20:44:a3:05:d7:70:56:c0:aa:53:89:94:ec:1c:
ba:18:59:c2:aa:7f:0d:34:7d:eb:42:1a:e5:22:0c:
2a:87:88:64:89:30:56:37:bd:42:67:fc:f0:f0:5e:
e1:bd:36:34:74:ab:56:55:83:9e:a6:1f:f1:17:0b:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:2A:15:29:2B:D4:79:8D:BF:35:9B:72:BF:4F:64:69:33:B0:17
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/M-MqFSkr1HmNvzWbcr9PZGkzsBc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c3:48:fb:cd:c7:cb:1c:dd:2e:b6:38:4c:68:03:aa:da:bc:02:
48:54:04:c6:d3:95:6f:2c:4e:bc:d2:51:e2:01:01:f1:3a:61:
f4:33:3c:27:03:dc:8c:40:54:fd:b5:c8:2e:f4:b5:72:83:7f:
6a:33:e6:a6:d6:65:20:3d:43:d0:36:75:97:02:b7:d0:6a:01:
5b:0d:26:29:e0:ec:c1:84:f1:a7:e5:bb:16:53:59:2d:ca:72:
1f:27:92:9e:d2:5d:2c:20:9a:1c:0d:eb:91:4a:41:2d:af:a5:
81:a4:8b:61:93:1c:0e:aa:b7:de:81:68:a1:74:c1:38:63:aa:
01:95:d2:18:59:85:89:f6:7e:61:15:c2:f4:ce:f8:af:65:54:
55:fe:cc:76:d3:3f:19:29:c9:2e:27:91:41:e7:30:32:c0:c6:
5b:fe:c3:0f:58:dd:66:b6:36:8d:73:6d:6b:32:d7:62:9e:d8:
1f:d3:89:15:f7:60:d6:4e:55:7a:b7:a3:2d:5a:ce:b7:63:7a:
c0:1e:78:a1:fa:0c:1e:e6:b9:6c:34:83:d9:b4:f0:69:3d:1c:
13:4a:cb:c7:8e:93:a3:55:a6:43:6b:ab:ac:df:6e:e2:81:14:
99:c1:98:d9:80:d1:01:f4:c1:4b:b2:5d:43:47:76:8d:b2:67:
0f:94:55:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:54:02 2025 by rpki-client