Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/N4ap3OJbddSHCEPivHYnjl_gvdg.roa
File: N4ap3OJbddSHCEPivHYnjl_gvdg.roa (raw, json)
Hash identifier: SPToRgxQXu3ZOPOa6vIEo/kNzjAFWwsXh8L7k0tOJY4=
Subject key identifier: 37:86:A9:DC:E2:5B:75:D4:87:08:43:E2:BC:76:27:8E:5F:E0:BD:D8
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1382
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/N4ap3OJbddSHCEPivHYnjl_gvdg.roa
Signing time: Thu 11 Apr 2024 23:53:13 +0000
ROA not before: Thu 11 Apr 2024 23:53:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4994 (0x1382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 11 23:53:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3786A9DCE25B75D4870843E2BC76278E5FE0BDD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:21:62:e1:c3:29:42:b0:85:7e:8f:71:63:9c:
7d:aa:15:27:76:94:33:34:2f:c0:d1:a3:c9:a0:31:
74:9f:2b:29:75:0a:cd:d9:15:32:49:1d:60:c6:af:
a4:f9:cd:4c:92:a4:90:28:64:1c:a8:94:60:a8:fe:
32:1d:23:3c:b2:38:17:51:7e:0d:ef:85:18:5d:1b:
f8:6d:14:5a:ce:3b:f7:1c:4e:00:0e:38:e6:81:62:
bf:e2:86:1d:9c:f3:d9:13:dc:63:78:22:c9:1f:79:
55:5f:97:bf:a9:62:6d:a9:2a:4e:05:aa:95:63:fb:
d6:12:bc:a0:b6:a9:ee:2b:e4:ef:b9:02:f3:6f:34:
5d:f4:a4:3b:c7:89:bf:a9:0e:d4:ab:55:62:73:4a:
c3:40:65:be:09:61:43:1b:1d:b9:d3:01:f2:0d:5d:
a4:7d:29:7f:4e:f5:c6:a0:4a:ea:e4:7a:a7:e5:0c:
f7:03:c5:77:61:b8:cf:bc:56:6e:bd:91:e7:cb:8e:
ba:f2:34:45:94:3a:2f:6f:43:42:65:4b:c1:62:2f:
61:b1:37:da:d1:3f:a0:49:de:44:50:19:7c:92:00:
bb:05:a7:7b:59:52:11:23:c1:e2:38:3e:92:19:e5:
57:d2:38:e1:fa:15:b6:53:dc:fe:f3:5e:f6:e6:a4:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:86:A9:DC:E2:5B:75:D4:87:08:43:E2:BC:76:27:8E:5F:E0:BD:D8
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/N4ap3OJbddSHCEPivHYnjl_gvdg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:d6:8f:f6:1f:63:ea:78:86:78:8a:6b:ea:17:c4:bb:c2:f6:
44:d6:9e:f0:e1:c1:ed:99:6d:ad:cc:32:4e:b0:8d:f5:11:51:
96:63:30:6f:ab:0a:c9:95:1c:d1:dc:52:30:fe:ce:4e:9b:a9:
3a:2f:42:24:fb:8c:69:17:a1:db:01:b4:d5:75:4f:bf:43:ce:
41:e0:a2:73:8e:86:b1:fc:4f:c1:07:1e:be:70:05:5a:46:69:
7d:85:a4:ae:42:53:ac:50:cf:c4:66:01:7e:1d:1c:57:70:be:
74:e3:f8:62:a1:08:09:3f:ce:77:22:33:a4:80:4c:b4:82:87:
f1:d2:fb:74:4b:fc:c8:9d:ae:a4:0b:d6:7b:c4:c3:a7:be:2f:
b2:12:2d:bf:da:de:80:1c:0c:95:d5:08:da:bb:81:77:b1:da:
8d:59:64:b7:de:ec:24:cf:68:5a:27:51:40:1e:d1:92:a7:ae:
f7:f6:a6:95:97:a1:a0:04:ec:e5:d5:43:50:15:f3:87:76:03:
30:dd:c8:db:95:b1:ed:62:ed:0d:97:bc:1f:69:32:79:69:21:
10:81:8f:8d:0d:1e:b2:24:0c:22:bc:08:bb:15:94:d3:9d:f1:
71:81:02:a8:b2:1f:88:3d:5c:b1:1e:c3:02:84:f9:88:49:94:
a6:c2:e6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:53:46 2025 by rpki-client