Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/X7VG7byNOij07zt72aPqaVGUkzM.roa
File: X7VG7byNOij07zt72aPqaVGUkzM.roa (raw, json)
Hash identifier: mgH2lOzQDGvhkRsRwjalzl1H61T2pg+S3HTDI1bA2qU=
Subject key identifier: 5F:B5:46:ED:BC:8D:3A:28:F4:EF:3B:7B:D9:A3:EA:69:51:94:93:33
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1980
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/X7VG7byNOij07zt72aPqaVGUkzM.roa
Signing time: Sat 27 Apr 2024 23:23:54 +0000
ROA not before: Sat 27 Apr 2024 23:23:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6528 (0x1980)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 27 23:23:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5FB546EDBC8D3A28F4EF3B7BD9A3EA6951949333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:82:f9:f2:6c:27:f5:15:36:a2:3d:cb:03:ec:
31:be:a8:d5:56:18:a5:13:10:44:e0:d7:07:86:80:
0f:a2:94:ed:ab:cc:65:b3:48:87:ce:55:32:60:91:
35:c8:25:7a:8f:0c:1f:a0:3c:b1:ed:53:50:9b:65:
8b:3f:76:0a:ed:1b:7d:7f:25:4b:0f:20:ad:15:6c:
f8:1d:11:e8:d8:d1:64:e1:c4:5a:e0:9c:9e:0b:4e:
d2:03:72:e3:4e:20:d4:b6:d0:ec:53:0e:18:11:5e:
35:57:7e:40:45:55:94:3e:ec:47:05:c2:ad:58:7b:
76:2e:f0:5b:7f:40:c0:99:86:cb:f6:f8:a7:fc:0a:
ba:81:87:af:4e:b2:fe:8f:10:d6:02:89:99:15:f4:
f2:6c:63:37:1e:a1:15:2d:d2:ab:22:3b:dd:de:7e:
44:96:2e:23:e2:20:44:2e:28:3e:c0:54:d6:5f:b6:
0d:ce:43:41:ef:3d:85:14:8d:f0:fc:b9:8b:7c:94:
8f:76:f2:52:fa:98:19:8e:57:2e:1a:9c:df:2c:09:
19:9f:0f:09:73:82:d2:9f:6d:7f:8d:1f:8b:4c:97:
45:52:e6:3b:b9:8e:54:5f:fb:36:96:53:ac:52:1e:
e7:95:32:75:61:b9:f1:70:fa:35:29:fe:d8:8b:30:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B5:46:ED:BC:8D:3A:28:F4:EF:3B:7B:D9:A3:EA:69:51:94:93:33
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/X7VG7byNOij07zt72aPqaVGUkzM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:3f:c2:60:ef:d9:10:87:3a:4e:07:76:5d:cc:6c:97:a2:c9:
8a:3f:f6:b2:41:88:74:a0:6e:27:6a:8a:f1:8b:5e:ed:2f:af:
28:ef:25:f1:d9:b6:5b:81:e7:49:f1:80:bd:1b:2c:fc:62:6e:
f2:34:90:70:b9:0b:02:b6:c9:bd:71:7d:87:f5:c1:1c:b5:d0:
c2:0c:cd:d3:59:7e:04:8f:64:b5:5d:e7:05:20:61:e2:ae:9c:
8d:6c:6d:57:c0:ff:f6:21:2c:50:9c:2b:51:7b:e5:20:23:7b:
60:92:06:ea:a4:64:d5:7a:3e:2e:31:d4:e9:39:05:00:57:d9:
76:8c:69:22:75:83:66:5b:2e:5b:96:b9:2e:51:da:3d:d9:bf:
92:a4:39:75:d6:ad:d9:66:5a:4f:da:9d:65:c4:b6:fb:bb:a8:
1d:79:26:d1:83:2c:6f:ab:d7:7c:2a:0f:f1:c9:b3:dc:ef:46:
46:ec:65:cf:41:fd:e5:6f:7e:15:e5:30:94:59:bc:27:7b:c7:
1e:9f:46:09:0e:4b:6e:45:0f:5d:ef:27:64:56:e9:64:8e:e1:
08:5a:06:0c:c6:86:a0:ea:1f:da:25:19:29:b1:05:31:c5:b2:
da:d9:5c:d3:da:fd:01:93:72:ad:99:e2:73:b7:51:39:d1:81:
b7:4a:f5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:52:25 2025 by rpki-client