Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/UvNEQ2AikGuj8-xUIIIo0jbHuFI.roa
File: UvNEQ2AikGuj8-xUIIIo0jbHuFI.roa (raw, json)
Hash identifier: 3ln5eEXLjoJJPIaf2oUaf2B7XKXDF6kbviD+mpfsRxk=
Subject key identifier: 52:F3:44:43:60:22:90:6B:A3:F3:EC:54:20:82:28:D2:36:C7:B8:52
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14A2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/UvNEQ2AikGuj8-xUIIIo0jbHuFI.roa
Signing time: Sun 14 Apr 2024 23:53:17 +0000
ROA not before: Sun 14 Apr 2024 23:53:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5282 (0x14a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 23:53:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=52F344436022906BA3F3EC54208228D236C7B852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:31:9c:c6:31:b3:b2:a9:8a:6e:b5:0c:11:
93:15:ea:57:68:37:72:d3:87:75:3b:2b:91:56:b0:
41:34:3f:58:88:ab:0d:12:d3:c7:57:61:6b:3e:5f:
1d:ae:14:77:cb:04:7d:72:71:d7:a7:0f:39:36:5d:
c3:c8:db:7f:44:0a:c1:a1:36:74:c3:0c:f7:88:4f:
36:4d:0a:9f:3d:9d:50:8d:72:f3:59:d3:88:80:a0:
7b:ee:5b:95:3c:7f:81:e9:24:d2:6b:f8:11:ea:b5:
01:4f:22:17:d6:bb:d1:6e:f5:2b:af:80:ce:22:1b:
b9:84:9c:54:35:3b:c2:6c:78:c0:e2:b8:1c:fc:fb:
89:b3:95:10:19:5a:e2:3d:6f:1d:e6:42:a8:47:b7:
ef:c0:75:ba:64:ad:69:88:7b:29:c4:2a:ec:57:34:
c3:fd:1b:d0:e8:38:99:66:87:39:a8:92:63:b1:51:
30:75:95:e2:0c:c2:e4:a5:0e:18:6c:72:bb:47:c9:
60:1b:26:93:bd:7d:d8:46:d7:4f:0e:66:3f:2c:92:
03:8b:42:2e:38:12:b2:15:bf:2d:66:72:1c:2a:8d:
30:50:55:4d:5a:87:57:56:92:9f:a2:7f:7d:26:a4:
1c:28:81:0a:8b:83:e4:1a:3a:6d:2c:cc:44:96:86:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F3:44:43:60:22:90:6B:A3:F3:EC:54:20:82:28:D2:36:C7:B8:52
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/UvNEQ2AikGuj8-xUIIIo0jbHuFI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b8:95:c3:cc:f2:36:4e:41:bf:d9:e9:9e:0b:46:86:8f:df:1c:
62:0c:43:f9:74:d1:75:06:69:2a:27:d0:bc:15:bc:94:70:ab:
ea:93:c4:c6:dc:43:0b:c9:4e:3d:5a:e9:01:c4:49:b8:55:77:
61:37:99:13:81:5f:6b:40:79:3c:ae:68:05:d5:bb:d6:78:38:
3a:4c:3d:d9:2e:af:49:1c:15:6e:de:05:a8:0d:03:7f:57:5e:
19:b0:c7:10:42:6e:44:a9:25:0d:d1:b1:5d:9f:47:b2:b1:83:
ea:6e:53:37:a7:9e:19:8f:1c:86:15:ec:5a:6e:5b:1a:cb:34:
85:87:ab:0b:65:90:5d:87:66:b9:a5:66:f8:e0:b3:13:5a:29:
30:0d:06:fd:d9:a6:b6:ea:ca:d8:cb:6d:61:19:7c:2d:85:59:
f1:90:d8:96:02:22:48:d3:5d:81:89:ea:a9:50:f1:78:a3:3c:
d9:80:94:4a:79:84:e8:05:77:97:b9:c5:5e:7d:c1:8a:71:7d:
c2:bf:1a:55:43:5b:c8:9f:f6:20:18:50:10:8e:76:ac:07:0e:
49:0e:22:81:c7:4d:26:d2:a2:bf:c6:95:55:a1:ef:37:4d:b1:
e1:4f:fb:6b:1a:fd:da:0f:1a:a8:af:e4:8f:3f:ed:8a:ba:37:
b5:a2:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:48:58 2025 by rpki-client