Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/NzXQqrKdfGjUZKGhfeo0vaACWfA.roa
File: NzXQqrKdfGjUZKGhfeo0vaACWfA.roa (raw, json)
Hash identifier: Xlh6cVg48iYsOE0DVOeMEvIORYecqgXPR3JkZw7QsI0=
Subject key identifier: 37:35:D0:AA:B2:9D:7C:68:D4:64:A1:A1:7D:EA:34:BD:A0:02:59:F0
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BC8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/NzXQqrKdfGjUZKGhfeo0vaACWfA.roa
Signing time: Sat 04 May 2024 01:24:17 +0000
ROA not before: Sat 04 May 2024 01:24:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7112 (0x1bc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 4 01:24:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3735D0AAB29D7C68D464A1A17DEA34BDA00259F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:38:64:d5:2a:a5:cc:f7:82:ae:b6:07:28:
4c:6c:30:7e:78:5e:e5:53:d0:a3:f2:87:52:12:a1:
93:bd:63:87:ce:8a:a4:0d:3e:d1:29:3c:91:e2:26:
10:f1:43:32:73:92:6b:3a:59:b8:78:2b:3e:ad:de:
37:01:a9:c6:eb:9a:b5:5b:9e:e0:22:68:bc:b5:1d:
96:6e:53:56:4a:25:71:98:83:16:18:f7:97:52:4f:
e1:86:24:74:33:ff:a9:46:6f:40:e3:63:fe:7d:22:
bf:31:cc:9a:d1:cd:c3:d2:99:6d:d8:c9:5f:cf:5d:
5c:0c:f3:01:af:7d:89:a1:15:e7:b2:ea:4b:38:21:
78:1c:6a:79:15:24:23:c8:bf:f6:d5:bb:17:52:c7:
6a:7e:8e:16:e1:37:ab:d7:d9:d1:7f:6c:21:91:15:
d5:94:09:18:0a:af:35:87:d2:f7:34:11:71:03:e7:
04:b8:23:c2:44:72:fe:43:ec:3b:98:24:53:82:3c:
44:e3:fa:90:30:cc:24:03:7b:44:90:6b:7b:8c:f3:
53:c7:12:61:41:29:05:c8:86:45:c8:4c:7d:f8:d0:
17:21:0f:09:6f:55:f8:b4:24:c6:c0:88:bd:59:cd:
6a:15:94:70:a7:a5:9d:97:bf:fe:f0:70:59:01:c2:
9f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:35:D0:AA:B2:9D:7C:68:D4:64:A1:A1:7D:EA:34:BD:A0:02:59:F0
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/NzXQqrKdfGjUZKGhfeo0vaACWfA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d6:23:ab:d4:b9:94:61:a2:1f:42:b8:6d:1e:69:76:94:ed:d4:
ba:86:6a:c5:57:d5:43:d3:5d:38:cc:bd:0e:19:5a:fc:4c:24:
76:04:fe:d3:e1:c6:21:01:c1:9e:25:3d:fa:07:de:91:cd:25:
5f:33:d1:72:6e:8c:a9:5e:37:3b:b7:5a:37:38:f7:ec:3a:f7:
6f:10:2e:ae:84:db:02:c1:3a:44:72:c4:51:39:cd:07:40:95:
c7:d4:fd:24:54:2a:6d:fc:99:1d:14:71:1c:3f:f3:86:74:98:
23:a6:fe:90:fb:60:7d:66:9b:87:41:9b:d9:c3:04:90:d7:ea:
3a:de:0a:eb:d2:d8:2b:6e:6e:1c:c3:a8:bc:97:e4:53:c7:bf:
23:ca:ef:a2:15:9c:17:6a:22:83:21:73:96:27:2e:c7:24:68:
3d:a7:68:72:25:ff:dc:1e:2e:75:79:35:81:54:0f:80:ba:fc:
31:df:3e:50:7d:7f:bc:7f:12:23:d5:38:09:a4:80:f4:5e:e7:
5a:01:cf:27:81:48:74:91:8e:16:8b:c2:f2:d0:35:42:53:9f:
10:d5:06:98:61:0b:b7:ca:9e:89:cb:9b:b3:06:e6:89:d0:4e:
06:e8:df:f3:af:0f:9e:d2:b4:b1:65:66:20:86:b1:a4:a9:e5:
c3:a3:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:54:44 2025 by rpki-client