Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/RRMW70obhZLwUA_ShF3ftY3BqCQ.roa
File: RRMW70obhZLwUA_ShF3ftY3BqCQ.roa (raw, json)
Hash identifier: 1zIajBNBv5CvN1sH6fxl8iuktWgvlnD2t/u4gjVuEuA=
Subject key identifier: 45:13:16:EF:4A:1B:85:92:F0:50:0F:D2:84:5D:DF:B5:8D:C1:A8:24
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19B8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RRMW70obhZLwUA_ShF3ftY3BqCQ.roa
Signing time: Sun 28 Apr 2024 13:23:53 +0000
ROA not before: Sun 28 Apr 2024 13:23:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6584 (0x19b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 13:23:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=451316EF4A1B8592F0500FD2845DDFB58DC1A824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:2f:08:c9:b1:28:0f:09:18:d6:20:34:8b:
c0:9d:e9:cd:7f:84:ef:9e:b9:87:d2:3f:fd:bd:37:
3f:55:d5:09:ec:6e:f0:e8:8a:68:63:15:66:6f:92:
b8:6a:d5:04:18:32:a2:e4:45:a6:40:5b:c1:5a:2c:
b7:72:10:18:1b:1f:c3:f3:72:e6:02:2d:ae:74:57:
db:7c:a6:de:24:dc:44:93:3b:e7:72:3e:4b:e6:93:
4e:0b:a6:46:05:b2:6d:ae:d0:30:10:cd:e8:30:46:
9c:a3:c3:0e:1d:29:4c:c7:25:d3:6c:b7:88:8b:ac:
3e:bb:76:b6:a8:ca:40:f0:c3:b8:4e:30:72:05:ec:
62:b0:5e:2f:39:08:2c:c9:f7:0d:b4:47:e3:d6:08:
e4:f3:c7:02:b0:d2:5b:e0:04:f8:d1:bb:0c:9e:9c:
39:2a:d1:aa:b5:88:af:98:ea:49:5d:67:4d:a0:e6:
9c:17:58:28:9a:d3:98:af:42:2a:01:7d:aa:03:bd:
f6:e9:bb:ed:d7:23:51:bd:b3:82:9f:57:94:6f:9f:
28:56:fa:a1:cf:ea:09:b2:74:a5:06:47:20:ce:2d:
1e:65:8d:5e:7b:41:c6:bd:2c:49:81:e6:f8:c3:11:
61:e4:2c:81:49:28:d2:64:26:72:38:59:3c:25:33:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:13:16:EF:4A:1B:85:92:F0:50:0F:D2:84:5D:DF:B5:8D:C1:A8:24
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RRMW70obhZLwUA_ShF3ftY3BqCQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:31:87:cb:e8:5d:46:75:9d:cc:02:e4:ba:86:cb:d7:b3:dc:
bd:af:6b:07:31:84:68:26:f8:b2:37:f2:73:cf:70:2a:c2:05:
90:d5:89:d5:d1:f5:5f:ce:76:44:6f:a5:09:2c:62:aa:3c:23:
d2:de:63:e5:b1:43:df:e2:13:90:46:3e:05:49:0e:a4:d4:4f:
4f:df:f5:e1:2e:5a:84:bd:d5:4f:c1:d3:b4:ac:df:28:f2:64:
c0:a9:01:c5:ef:07:51:d2:b6:05:34:50:21:11:9e:d3:25:88:
2b:bb:94:71:a7:4d:24:a0:d6:99:51:50:a3:ef:2b:4f:35:8c:
a5:02:36:fe:b1:85:6b:ff:72:1b:af:b6:b1:f9:19:22:7e:d3:
68:11:73:64:7f:9f:cf:6a:10:8a:4a:f0:71:37:15:25:57:1a:
10:80:44:f6:ca:4b:4b:82:ae:d9:bb:74:56:08:a4:85:f8:c5:
d6:db:bf:bd:16:f3:5c:6a:01:34:bb:6f:56:17:50:dc:2e:4f:
bc:96:30:30:63:8f:01:62:d1:8a:d7:d3:f0:ad:10:de:bd:64:
2a:ba:7f:04:25:43:be:0d:e3:c3:4f:9c:dd:0b:9f:27:cd:26:
1f:db:f7:51:ee:a7:d7:1f:53:01:bd:c6:0e:30:dd:2a:7a:1c:
9f:0a:de:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:41:44 2025 by rpki-client