Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Qxqni5Xu-PEmL2R2shLIN4gscG0.roa
File: Qxqni5Xu-PEmL2R2shLIN4gscG0.roa (raw, json)
Hash identifier: oR0AtC3igmrOppK32y3SSTsQ4sNgtI200eqgwDVPRXU=
Subject key identifier: 43:1A:A7:8B:95:EE:F8:F1:26:2F:64:76:B2:12:C8:37:88:2C:70:6D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1996
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Qxqni5Xu-PEmL2R2shLIN4gscG0.roa
Signing time: Sun 28 Apr 2024 04:53:52 +0000
ROA not before: Sun 28 Apr 2024 04:53:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6550 (0x1996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 04:53:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=431AA78B95EEF8F1262F6476B212C837882C706D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:15:79:b0:ee:7f:77:0c:06:87:c8:17:c3:
4a:50:d0:85:1f:4b:00:ec:9b:b7:c0:1c:ca:41:7c:
43:01:85:fe:a9:0c:f2:58:e4:e7:4f:c7:e3:8a:c7:
1a:55:d1:8b:06:96:bc:a4:89:a1:0b:36:e2:f1:a8:
f8:58:02:9e:da:a8:52:d2:c4:af:d7:84:cd:ed:f3:
b6:0e:19:71:0d:e8:c3:1f:0e:c6:7b:dc:ee:bb:b8:
68:99:7d:97:54:f9:89:32:d7:55:3b:69:b3:0f:16:
54:c6:c1:29:51:2b:3d:7e:96:19:2b:5f:cb:44:71:
e1:9f:b6:70:8b:c3:90:d3:ff:df:c8:b1:e3:f3:b1:
0e:3a:eb:fd:b5:26:3a:71:54:fc:fc:99:a7:ef:47:
f7:fd:74:10:31:a0:3f:a4:63:f5:39:0e:13:bb:43:
22:3d:3c:95:91:1f:bd:c9:59:db:21:c2:88:6c:91:
d0:e4:95:f1:8d:31:93:4c:27:53:72:57:8e:cb:25:
89:73:59:4b:da:1b:52:e0:63:fa:1e:bc:ee:16:e2:
ab:4e:67:3c:0b:ea:d2:d2:1c:6b:65:76:65:1e:22:
4f:98:9d:f9:a9:d3:00:2f:24:58:92:ab:59:1b:64:
5a:ba:0e:6d:04:c9:a4:18:60:bb:fc:08:f6:f2:2e:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:A7:8B:95:EE:F8:F1:26:2F:64:76:B2:12:C8:37:88:2C:70:6D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Qxqni5Xu-PEmL2R2shLIN4gscG0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:9e:40:77:2e:e1:07:a5:2f:19:01:00:3a:ea:cd:d9:66:62:
b8:0b:f4:00:03:e6:66:94:e6:16:3f:43:b5:3a:29:8a:9c:d0:
84:08:0d:50:d2:69:97:cd:3e:2c:2b:b6:82:dd:25:13:ad:6c:
b7:f6:0f:d1:17:c7:97:4d:af:9f:07:ed:33:f9:c4:b7:95:e0:
5b:3e:6f:08:a2:63:93:d3:c1:fa:1d:9a:8a:ca:95:6b:64:d9:
e7:4b:cf:a0:06:10:2e:70:0c:1f:24:b8:d8:dd:ab:74:e1:a7:
30:b4:9e:dc:98:47:89:e4:dc:21:5c:e6:ca:af:93:dc:b3:55:
8d:d0:e9:37:69:55:79:30:cb:2f:df:41:96:0e:4b:57:82:b0:
e9:be:1c:60:ee:da:6d:45:86:e1:96:24:9d:ff:85:27:5e:33:
8a:6f:f7:ad:4a:77:5a:78:42:e9:ec:c0:77:78:47:5c:1b:26:
d5:81:8b:15:bc:3a:02:26:2e:bd:92:ec:51:ad:e2:b0:79:39:
39:f3:d9:08:c5:8a:a6:57:d3:ae:08:eb:2d:56:9b:89:15:9d:
13:0c:ba:92:96:91:70:bd:03:92:de:cf:2b:1c:62:b5:b4:3b:
64:e1:82:5b:2f:42:fb:8e:c0:2d:0a:a4:86:55:ae:ef:44:55:
e5:3c:19:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:55:52 2025 by rpki-client