Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/UCKA8UPhZi5tE-QHCo3nhVEpdfQ.roa
File: UCKA8UPhZi5tE-QHCo3nhVEpdfQ.roa (raw, json)
Hash identifier: alYNVr8uYKFGZXkfGFqZxQuqP0A1i1kH/RkhFLdVZ7Y=
Subject key identifier: 50:22:80:F1:43:E1:66:2E:6D:13:E4:07:0A:8D:E7:85:51:29:75:F4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 11A2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/UCKA8UPhZi5tE-QHCo3nhVEpdfQ.roa
Signing time: Sat 06 Apr 2024 23:53:45 +0000
ROA not before: Sat 06 Apr 2024 23:53:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4514 (0x11a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 6 23:53:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=502280F143E1662E6D13E4070A8DE785512975F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:30:6f:97:d5:24:57:11:80:36:de:17:c7:
55:a9:15:02:6e:24:44:73:fb:54:90:63:34:c5:a6:
d1:46:7a:be:29:7a:31:2c:a7:f3:35:ae:36:9b:cb:
d6:61:21:07:3e:e4:ff:12:c6:4a:f4:b2:be:e3:e5:
61:fd:a6:b3:37:81:b8:9b:ab:f5:c8:31:ed:c5:0c:
e1:11:58:05:97:8d:75:93:f6:48:e6:53:3a:f5:9e:
5f:8e:8d:b7:be:ff:c0:19:c8:5a:d4:94:4d:6b:b9:
a3:42:65:70:05:e1:f4:92:3e:42:ed:b6:f8:ee:d3:
dd:25:e0:e5:c7:ba:82:2b:d3:a2:68:70:38:87:53:
d1:ab:bb:5a:de:53:bb:36:18:d0:64:26:c2:c0:2c:
00:2d:76:5e:76:bd:50:bf:d8:e6:c8:ac:48:ec:67:
8e:b9:47:77:47:2a:07:c3:9d:f0:22:f3:b1:7e:c2:
64:57:d7:64:75:fc:d3:fd:8e:00:59:32:ab:48:ae:
82:59:45:e0:07:5b:a6:03:02:7f:89:67:61:25:bd:
fe:b8:ca:c0:7c:05:64:6e:75:f4:22:73:a1:67:37:
26:eb:5b:93:98:43:9b:52:fb:1b:c5:6d:e2:a2:03:
a5:08:6d:02:2e:3c:a5:47:fb:19:77:11:52:2a:ad:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:22:80:F1:43:E1:66:2E:6D:13:E4:07:0A:8D:E7:85:51:29:75:F4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/UCKA8UPhZi5tE-QHCo3nhVEpdfQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c6:a3:2f:2e:3e:22:7f:90:74:2a:8a:02:d5:1b:15:66:56:67:
90:3d:74:7e:5f:31:b9:60:a4:29:43:d5:ea:72:82:61:5e:91:
1f:5f:8e:c7:78:68:d3:6c:22:74:df:0e:f1:64:bc:06:1d:ce:
f3:19:10:3e:73:41:6f:14:2e:8e:b6:1e:63:53:1e:1d:ce:91:
23:06:f1:e6:5a:08:63:92:10:d8:43:28:d0:a9:9d:0a:32:df:
fe:4e:d5:cc:ca:4d:a6:fa:38:b7:a5:48:17:61:3c:0a:f1:77:
16:95:73:92:6d:a6:d5:81:f4:c8:73:59:f9:c0:91:79:0e:47:
68:59:6c:60:54:9a:98:07:de:8d:2b:0b:89:ac:77:c9:5e:b2:
1c:fe:16:91:e7:26:7d:47:d4:3e:19:2d:ed:34:5f:4b:a8:7f:
6d:5f:ea:36:13:57:e2:6e:6f:89:4c:2c:d3:2f:7c:60:c2:16:
d1:e2:ba:6f:9c:41:6c:62:14:76:f9:0a:4c:32:bd:0d:0b:08:
7c:23:66:05:c9:ca:af:25:80:80:96:56:f2:37:0c:e0:db:91:
0a:f6:33:3f:cb:40:cf:a5:68:c1:49:93:cf:1e:3d:11:10:2f:
bf:09:93:f8:6f:8b:cc:0b:b1:66:99:5a:56:a0:f3:d5:44:44:
04:f2:3b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:47:08 2025 by rpki-client