Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Os709XfrerU_z55hr9zESsZOUhQ.roa
File: Os709XfrerU_z55hr9zESsZOUhQ.roa (raw, json)
Hash identifier: jbvkjIFARaz8jK+BIldLH1Bv0dj3oSLSw8c4RgKRl4A=
Subject key identifier: 3A:CE:F4:F5:77:EB:7A:B5:3F:CF:9E:61:AF:DC:C4:4A:C6:4E:52:14
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 146C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Os709XfrerU_z55hr9zESsZOUhQ.roa
Signing time: Sun 14 Apr 2024 10:23:21 +0000
ROA not before: Sun 14 Apr 2024 10:23:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5228 (0x146c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 10:23:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3ACEF4F577EB7AB53FCF9E61AFDCC44AC64E5214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:97:25:c1:64:b5:73:a6:fb:dc:3c:24:cb:
cb:b9:65:4b:b3:26:1e:53:6b:be:bf:6a:8d:57:df:
69:59:9b:a0:99:db:7e:79:0b:b4:80:4d:b5:8e:04:
49:aa:a4:8e:e3:94:fa:9c:cd:46:7e:9c:d0:13:2e:
02:ff:35:85:1e:85:49:d9:55:b0:4d:4b:fd:73:a6:
56:4b:ef:90:be:28:27:6e:ce:65:6e:66:46:80:c1:
e5:65:20:54:08:45:19:fc:c1:6a:3e:70:4c:94:24:
fe:9a:be:a6:57:9d:01:d4:eb:91:c6:38:2c:0c:0a:
1d:6e:62:c4:d7:06:b9:bd:60:05:5f:c7:59:81:8b:
5a:35:69:bc:41:0d:a1:3a:8b:2d:89:9b:ed:e0:59:
d6:f0:63:43:76:dd:f8:c0:94:77:e2:03:aa:38:e8:
91:a6:57:c4:c6:44:a0:94:b4:bb:b9:7e:fa:2f:ea:
36:ab:c3:c3:56:5e:b5:b0:b1:02:1e:94:93:d3:8c:
68:33:f3:60:2d:ad:16:1a:e8:6c:35:f1:6c:92:e7:
dc:28:fb:2d:fb:2e:d5:1e:f0:07:4e:41:c3:ed:8f:
19:dc:8c:ff:c4:f6:ff:1b:ed:cc:f1:37:76:00:16:
69:74:c9:f9:88:2e:61:46:fe:fe:22:9c:41:73:5d:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CE:F4:F5:77:EB:7A:B5:3F:CF:9E:61:AF:DC:C4:4A:C6:4E:52:14
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Os709XfrerU_z55hr9zESsZOUhQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d2:c6:df:08:4c:0f:ad:98:14:8d:d0:a8:33:e7:3a:bb:a2:b6:
86:4b:ee:0a:5a:5c:95:a0:fd:5e:43:22:22:43:70:5d:2e:61:
c9:04:4c:69:9e:ae:7e:24:a1:fd:b2:87:5f:2a:22:69:e9:40:
29:5a:63:24:fb:ce:51:29:2d:49:17:55:2c:a5:fc:9d:0d:ba:
8d:c0:3c:ee:83:82:27:03:bf:c9:7b:67:65:37:fa:1d:b3:72:
7c:b7:d7:a2:b1:82:ab:1b:e1:cb:59:0a:2c:47:4e:76:bc:5e:
55:5a:3e:53:57:46:5c:e6:a8:38:e3:09:69:fb:f0:33:45:18:
4b:76:eb:4a:54:41:27:76:37:79:29:21:f0:3a:1f:0a:ac:eb:
f8:f7:cf:81:37:f1:df:b0:e2:42:dc:13:74:c1:ba:e8:dd:91:
1f:05:7a:01:5c:de:a2:67:6c:58:22:6f:da:48:f7:22:d3:a6:
c9:4b:b3:5e:61:08:50:f0:e4:03:d4:c7:b3:a5:a7:d2:5b:d5:
a4:85:51:0d:83:cb:a6:55:e9:3e:e4:06:80:c1:79:05:7d:5e:
e3:82:0e:2b:9f:6f:74:5f:ad:04:31:e4:7b:eb:03:9f:ed:32:
ae:c2:22:6f:e3:f1:3f:a5:0d:61:05:d1:19:a3:d4:c2:f8:cf:
97:09:3f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:56:07 2025 by rpki-client