Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/V-i-OQnp6i7KiFVwrzMD6r-FvmU.roa
File: V-i-OQnp6i7KiFVwrzMD6r-FvmU.roa (raw, json)
Hash identifier: fj5P/QsZzBt7Mob9WMJnioyetmF4oIarXj2hWYpaCLE=
Subject key identifier: 57:E8:BE:39:09:E9:EA:2E:CA:88:55:70:AF:33:03:EA:BF:85:BE:65
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BBC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/V-i-OQnp6i7KiFVwrzMD6r-FvmU.roa
Signing time: Fri 03 May 2024 22:24:21 +0000
ROA not before: Fri 03 May 2024 22:24:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7100 (0x1bbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 22:24:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=57E8BE3909E9EA2ECA885570AF3303EABF85BE65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:56:32:a2:52:2d:36:1a:94:9a:01:54:fc:
39:2d:a3:3b:3f:d3:77:05:ef:fd:06:3a:73:ea:7b:
2e:44:9a:83:48:9b:92:44:bf:71:8e:42:f4:bb:9c:
f3:e3:b9:5c:dc:03:a0:67:17:c4:3d:9a:71:d4:cc:
dc:d9:7b:a9:25:9c:7b:8f:7f:8f:b3:9b:c6:64:f7:
db:81:61:cb:dd:d0:b4:26:74:97:a1:65:ef:78:b1:
aa:32:a1:a6:dc:c3:85:f2:13:71:b3:fd:28:cd:d0:
e6:ff:9c:98:38:19:d2:7b:8f:55:c1:a2:95:4c:ec:
6d:4f:20:e6:20:4e:94:ff:c5:dc:95:73:e4:4a:ec:
70:90:40:e9:b6:14:82:f4:33:12:5d:97:71:e6:1f:
9c:1b:1d:b7:d9:c2:97:45:ca:5f:76:52:68:23:90:
0c:b6:3a:4e:b5:21:16:ba:55:85:1b:a1:16:49:39:
eb:6b:3d:36:58:50:7c:92:33:76:84:f3:a4:fa:4e:
cc:a3:ff:16:ad:a0:a5:99:19:e2:a9:77:93:c1:0a:
b8:87:c7:aa:75:6d:07:73:e9:19:54:97:aa:be:93:
ce:0a:b1:82:58:38:7e:d9:c6:a8:0a:cf:4d:3e:47:
0b:f3:18:b9:e8:4d:d3:18:4b:05:da:1a:03:86:5b:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E8:BE:39:09:E9:EA:2E:CA:88:55:70:AF:33:03:EA:BF:85:BE:65
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/V-i-OQnp6i7KiFVwrzMD6r-FvmU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:d7:c6:e6:d9:0e:c7:12:3d:35:c5:b9:28:3b:dd:47:ab:f6:
aa:97:fe:e0:f2:b0:4b:3d:c4:4e:7f:12:f4:64:e7:9e:75:36:
09:c0:bd:a8:54:cb:35:b1:47:ee:cf:67:ae:9d:0f:88:c9:e7:
78:f7:27:e6:55:9d:f8:b1:a8:11:e9:78:8e:5b:28:10:94:44:
dc:61:a5:64:ae:ea:ad:c2:49:45:57:1c:28:5f:a3:fa:93:7e:
a8:ce:5c:6a:bf:d0:07:99:bf:ab:ae:45:f2:a4:88:90:10:84:
fd:08:a6:30:b5:5b:8a:a4:65:dd:97:5a:6b:92:df:03:86:b5:
ff:40:52:b5:f6:25:ee:0d:8c:f4:0e:c5:be:4c:f3:7b:2b:2f:
8f:f6:97:81:70:b4:71:f2:e3:ba:80:af:d2:4f:f1:71:de:77:
4c:41:c0:a5:92:04:b8:b8:66:27:a9:8e:19:a8:87:ca:ec:b1:
1c:df:48:c7:c3:70:13:a6:89:4d:7b:0c:b2:b2:3c:a0:86:b9:
5a:7e:0c:05:0c:57:76:c5:01:b4:26:f6:e8:a1:28:e6:e8:d8:
c9:73:63:9e:8e:af:19:1f:04:e3:83:42:d1:55:06:9b:b1:b2:
6b:61:4c:65:60:9c:f4:21:a5:e9:7c:28:52:c8:02:51:60:15:
61:22:49:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 11:02:02 2025 by rpki-client