Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/TgVEil5_-0KcdzQ0DQEbXAJpF1w.roa
File: TgVEil5_-0KcdzQ0DQEbXAJpF1w.roa (raw, json)
Hash identifier: IYolY7HilVJ9L1++LZlYcRmbIrpWAshxX9usjkHBWb4=
Subject key identifier: 4E:05:44:8A:5E:7F:FB:42:9C:77:34:34:0D:01:1B:5C:02:69:17:5C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E36
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/TgVEil5_-0KcdzQ0DQEbXAJpF1w.roa
Signing time: Thu 28 Mar 2024 20:52:29 +0000
ROA not before: Thu 28 Mar 2024 20:52:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3638 (0xe36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 28 20:52:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4E05448A5E7FFB429C7734340D011B5C0269175C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:74:24:36:f4:63:2b:42:de:3a:14:6d:b2:a2:
0d:a5:7b:08:20:6e:73:9a:28:e6:96:3d:34:c9:9b:
b2:7f:27:b3:28:d5:98:81:e8:8b:a3:b2:e9:38:ca:
00:89:14:7f:11:36:eb:95:b8:62:77:2e:e0:7b:5d:
ca:41:74:e3:8f:4f:a2:15:b3:0d:b5:77:56:f3:37:
4d:7b:28:12:10:cb:c6:34:97:04:77:1a:87:de:bb:
1c:c5:d4:86:63:32:7e:77:25:8f:28:44:a0:fe:ac:
cf:f9:28:fb:ae:65:18:ae:ac:48:fc:e1:a0:ae:1c:
ca:6d:b8:b5:3c:e2:8e:d0:47:d6:de:f4:a8:79:6a:
8c:48:d8:47:c7:91:63:62:fb:70:54:81:b6:ea:0a:
1d:95:2d:7b:27:81:b0:27:ee:ca:c6:f5:91:ff:54:
f6:b0:4f:08:a1:6f:01:01:0b:fc:ef:a1:34:b3:2d:
41:54:9f:d6:67:00:bb:ff:2f:e9:81:2e:45:8c:51:
ab:da:2b:04:40:7e:1e:7d:31:2f:16:58:06:cc:19:
ca:a6:97:ad:13:90:f1:58:a7:fd:14:3b:1c:ce:a6:
0d:9e:ae:75:c0:f7:30:be:a0:f9:ee:c3:92:bf:11:
44:0b:21:99:a8:2f:af:90:58:02:90:74:0e:a5:ae:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:05:44:8A:5E:7F:FB:42:9C:77:34:34:0D:01:1B:5C:02:69:17:5C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/TgVEil5_-0KcdzQ0DQEbXAJpF1w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:bd:36:d8:cf:39:44:56:f9:f1:3f:c1:b0:19:8c:8d:59:89:
44:35:d3:38:26:b4:de:15:f6:c0:c5:60:e3:b9:d9:18:d9:1c:
86:69:e5:29:2f:40:55:83:98:7a:3b:66:c6:17:43:f1:cc:f8:
1f:56:93:d8:57:a5:c2:13:04:d0:2b:2e:7a:f5:44:6e:39:ac:
9b:05:93:36:db:19:b2:b6:ef:2a:68:c0:70:b3:a1:2f:45:52:
f6:94:3e:53:17:64:eb:50:e9:a6:f0:a4:71:39:4e:1c:b5:a8:
3e:bc:52:ef:e8:4c:42:68:a6:7b:6d:52:e7:17:ae:32:59:8d:
f0:69:fe:7a:ca:c0:cd:a5:88:30:79:02:eb:47:91:6d:9c:e7:
7f:6f:e0:c2:42:b2:ab:3e:01:12:f1:45:12:d6:67:13:72:ef:
c6:03:25:85:f2:bf:f0:06:42:e7:1e:10:cd:57:07:c4:ac:c5:
b8:7e:d5:0a:8b:43:88:ab:d1:a4:0d:eb:fe:39:17:48:62:78:
34:fb:7d:0c:2c:f1:a5:a0:0a:9d:1f:51:94:06:c4:c2:d8:48:
b3:34:33:5c:04:a9:56:e2:79:62:75:1e:32:a7:1f:cf:81:e9:
f5:1c:c2:97:b2:42:72:30:bc:4c:0c:62:f1:e6:5b:39:af:28:
a2:4f:c7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:54:32 2025 by rpki-client