Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Pz1Mkc6h74b6PCCMDMWyjnI1dpw.roa
File: Pz1Mkc6h74b6PCCMDMWyjnI1dpw.roa (raw, json)
Hash identifier: TplJxN7GkLu8I6yXbh/FfrRgmzNQsA+3Fsy4nR1CaWw=
Subject key identifier: 3F:3D:4C:91:CE:A1:EF:86:FA:3C:20:8C:0C:C5:B2:8E:72:35:76:9C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1884
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Pz1Mkc6h74b6PCCMDMWyjnI1dpw.roa
Signing time: Thu 25 Apr 2024 08:23:42 +0000
ROA not before: Thu 25 Apr 2024 08:23:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6276 (0x1884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 08:23:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3F3D4C91CEA1EF86FA3C208C0CC5B28E7235769C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:66:a0:a5:50:8d:27:e8:c2:02:d3:c4:d6:
e6:a0:e8:e4:bd:3b:2b:82:28:e7:07:f9:55:25:87:
96:78:06:c8:8e:7b:46:b5:44:70:36:2c:05:67:84:
21:91:18:d9:12:7d:8d:f6:7e:66:bf:3a:46:4f:d1:
84:ef:78:68:f2:26:23:89:47:29:85:70:95:26:7b:
42:16:a6:91:2f:c1:7f:4f:b1:3f:6e:da:3d:a6:58:
19:9d:f7:88:9f:ac:77:bb:0a:3a:9d:4f:f2:c9:48:
64:3c:de:7e:51:3c:f2:ca:50:2a:71:6f:bf:9f:2b:
b5:6f:cc:b9:89:e9:5c:27:49:20:fe:3f:f0:64:b4:
1b:55:e9:a0:6a:8f:e0:5d:94:0e:93:8c:01:5a:fa:
78:b7:64:46:62:7a:50:c7:03:22:28:34:52:8d:f7:
b1:b2:bc:77:2b:7f:eb:1d:98:05:d0:1b:dd:14:a1:
6b:94:0d:1c:da:cd:98:5e:9d:5f:19:d8:aa:fb:dd:
bb:fa:84:0e:89:34:f6:a1:8b:69:23:ba:d8:81:e3:
c6:88:eb:9d:70:6e:cb:36:1d:62:24:61:86:08:9a:
99:92:11:ed:ba:b2:fb:3a:eb:41:05:3d:fd:31:66:
91:f4:be:8d:74:04:df:d3:2a:f1:9b:12:1f:e6:c3:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3D:4C:91:CE:A1:EF:86:FA:3C:20:8C:0C:C5:B2:8E:72:35:76:9C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Pz1Mkc6h74b6PCCMDMWyjnI1dpw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:e4:ed:04:0a:d1:19:42:21:30:97:40:91:13:83:d0:ab:4c:
3d:74:21:43:c6:f7:af:e5:5c:f3:3d:03:70:d4:21:02:4a:65:
cb:4c:84:58:ee:84:20:57:63:6d:05:82:ab:f4:15:69:7c:be:
8b:ea:98:6c:e8:a9:6d:fa:05:83:23:b5:da:3f:10:38:5d:5b:
c1:f9:e2:3f:3a:02:dd:4d:3a:2d:67:47:0d:af:c7:4d:8a:d0:
a8:1f:35:4a:4c:40:5d:6b:d3:cb:c5:f4:68:cb:66:8d:34:2c:
2e:a6:2a:21:1d:e7:d5:21:41:3f:e8:f7:77:2f:6e:3f:1e:40:
20:64:ce:be:d6:0f:81:09:f3:16:d4:26:cb:9e:83:d1:f0:69:
84:11:16:a9:9d:07:9a:1b:56:b3:91:54:df:a0:d4:b1:44:65:
ab:59:b3:9e:14:60:a2:54:e8:71:9f:ae:a7:2f:0e:81:e3:c6:
db:d8:27:6e:02:15:5e:1f:bd:49:ba:05:e1:19:f0:d9:43:6e:
d6:fb:93:1b:5b:94:2d:ce:d4:f4:0b:cf:6c:22:c7:cb:b6:95:
dd:c2:ec:ff:ac:c8:33:f5:0b:d0:43:80:90:80:f2:5e:ac:bd:
02:6e:0b:d5:2b:f8:62:c4:16:af:4a:0b:24:1e:10:2f:d7:53:
40:5f:16:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:50:00 2025 by rpki-client