Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Mj4ehGSm5d50Bka9f2R9CFh8CGQ.roa
File: Mj4ehGSm5d50Bka9f2R9CFh8CGQ.roa (raw, json)
Hash identifier: u1WThRnVFI9zvOx4evROOyFklV2WQ6vDx4Y6BxVd5Ug=
Subject key identifier: 32:3E:1E:84:64:A6:E5:DE:74:06:46:BD:7F:64:7D:08:58:7C:08:64
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1036
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Mj4ehGSm5d50Bka9f2R9CFh8CGQ.roa
Signing time: Wed 03 Apr 2024 04:52:40 +0000
ROA not before: Wed 03 Apr 2024 04:52:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4150 (0x1036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 04:52:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=323E1E8464A6E5DE740646BD7F647D08587C0864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:38:06:14:1c:78:ff:e7:f3:05:40:ad:3b:
e2:44:bb:9e:e4:7e:43:16:b9:6e:d9:b1:88:17:92:
b8:39:b8:1a:d4:9b:c4:cf:7b:cc:01:9d:fa:1b:1b:
53:b2:9d:fe:52:cf:0b:43:de:b3:77:b7:42:cc:48:
66:4e:bf:ff:c2:60:16:60:05:4e:53:b1:9f:79:69:
8e:bd:78:0f:5e:a3:de:a5:11:af:74:be:a3:8b:d6:
48:d9:d9:d6:4d:a8:39:54:2b:b3:d2:02:ef:ca:96:
a9:1e:4e:cf:a4:17:b7:57:48:d3:33:23:41:88:27:
88:b0:e8:18:5f:b6:80:c9:d3:85:f3:73:3b:e7:f7:
3f:a4:ef:96:cb:cb:40:f8:f5:d1:73:03:6e:9a:d0:
19:cb:4e:2e:4b:ed:3a:ca:be:e8:90:f6:ae:e2:e5:
dd:29:e1:81:25:ae:21:45:cf:57:c2:9b:00:b8:9d:
70:43:9c:3b:bc:b2:87:25:25:c7:e5:a1:4b:cd:7d:
b9:fc:88:dd:79:0a:ee:1f:d5:e0:4e:f0:b2:36:9a:
ee:bf:a1:23:9d:14:2d:7a:4b:40:95:a1:f1:d7:71:
81:92:d8:72:25:f7:0d:f3:b6:94:0c:57:3d:46:84:
17:14:c5:e2:51:ef:86:da:16:6c:22:e3:ae:1b:ef:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3E:1E:84:64:A6:E5:DE:74:06:46:BD:7F:64:7D:08:58:7C:08:64
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Mj4ehGSm5d50Bka9f2R9CFh8CGQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:b0:12:c4:a9:da:f6:73:e1:1e:1a:73:39:d4:9d:3d:ba:dc:
93:47:07:6b:b5:77:b2:42:28:7a:0c:ff:0f:a9:09:3a:4f:cd:
90:9d:6d:ea:7e:f7:e6:d9:f8:37:80:24:db:ee:52:a0:f1:0e:
81:ad:7d:48:08:f3:9f:41:45:22:f6:4d:0c:33:c5:d8:b5:a1:
01:f5:95:12:c3:ee:1e:d9:05:33:96:b3:63:82:28:04:2e:85:
e1:95:56:3c:1d:34:18:d7:ad:c4:c9:66:6d:67:a3:31:dd:70:
10:75:3f:72:4c:81:c6:75:86:f0:14:88:15:45:ad:6e:aa:5f:
e5:32:5c:6d:16:50:3f:53:bb:ae:a5:50:a5:72:88:47:c7:31:
57:c2:86:27:ed:02:cf:fd:0a:d6:7c:a1:d0:97:31:33:eb:0b:
58:59:c4:b7:95:d7:22:20:62:e6:29:9d:37:b6:81:3a:d5:ec:
b1:82:63:5a:6f:c2:0c:9a:31:8e:12:a6:36:07:b5:16:b1:0c:
35:d2:77:f1:22:c2:c3:16:e9:d0:5b:d6:52:bd:1e:b5:52:cb:
63:05:23:b1:7b:10:f1:f1:dd:67:d6:42:44:75:81:f4:2a:3a:
5e:45:0b:dd:3c:d7:82:b3:d7:2c:1f:04:61:6e:e5:22:58:eb:
b4:d2:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 11:01:01 2025 by rpki-client