Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Z6s9UCUkhHY6F_Ko9A9cTXUljt4.roa
File: Z6s9UCUkhHY6F_Ko9A9cTXUljt4.roa (raw, json)
Hash identifier: thJcQ3ug2OFcExnTOSFhy3obM5ke6TuUGG5cRj6BST8=
Subject key identifier: 67:AB:3D:50:25:24:84:76:3A:17:F2:A8:F4:0F:5C:4D:75:25:8E:DE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 183E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Z6s9UCUkhHY6F_Ko9A9cTXUljt4.roa
Signing time: Wed 24 Apr 2024 14:53:42 +0000
ROA not before: Wed 24 Apr 2024 14:53:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6206 (0x183e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 24 14:53:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=67AB3D50252484763A17F2A8F40F5C4D75258EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:10:eb:58:1c:92:e8:bd:d9:2b:ff:66:04:fb:
7d:2d:f1:09:a8:3d:fa:7a:28:77:3e:8b:0d:8f:40:
4d:54:8b:42:5f:95:a9:f1:62:10:a8:81:40:f4:41:
74:f0:7b:e9:7d:38:2c:a8:af:60:d3:00:68:1e:0a:
8c:26:8c:dd:c1:ae:42:2d:8f:05:f9:5a:84:2b:74:
4e:40:d6:f3:97:dd:68:87:ca:ab:d6:0a:8d:6c:ae:
86:f1:80:ee:c9:f7:9f:66:d5:fa:af:bc:ae:33:25:
a9:2a:76:5d:bd:2b:08:ed:e5:af:21:bb:ad:22:3a:
7e:b7:b2:8f:69:53:4d:3b:8c:4c:ae:70:8c:22:ea:
d9:e4:38:1a:82:ba:42:f1:50:82:89:31:b7:b1:5f:
fb:39:ee:0e:9f:a3:40:78:9b:e7:7a:e3:1a:b3:fd:
89:41:38:27:03:f0:00:af:19:1c:22:4d:ef:a7:38:
32:0e:ec:cd:a3:4b:b2:5d:d1:92:6d:3f:c6:0e:f5:
2d:ac:e5:7f:3d:15:bf:ae:8f:18:be:9f:59:f3:6d:
ac:f0:5a:ea:62:3d:db:86:ec:d4:d7:ca:0c:3b:12:
f4:7a:73:bc:44:f6:45:6c:a9:49:55:ca:16:f2:fc:
9d:7a:1a:ae:6e:f3:db:ba:f4:0b:c5:cd:fd:bd:af:
66:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AB:3D:50:25:24:84:76:3A:17:F2:A8:F4:0F:5C:4D:75:25:8E:DE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Z6s9UCUkhHY6F_Ko9A9cTXUljt4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d3:16:ff:e7:05:ac:23:21:33:87:6b:0d:ec:66:60:a5:60:a5:
f5:62:66:47:df:7c:ce:79:0d:52:4a:1f:8f:21:56:c1:ca:c9:
2c:13:92:ca:45:ac:1f:91:1f:a1:34:5d:5a:10:16:7c:7a:d4:
54:ae:7e:3f:be:b3:4e:ba:8e:ab:f2:86:46:f8:20:df:28:1f:
0a:7a:56:e1:55:6d:ae:fc:31:c1:39:9d:89:68:56:7f:e0:a4:
0e:1d:7a:3f:b6:4b:1a:fa:53:44:7d:bc:85:fa:6a:e8:e2:e6:
97:6f:cd:bc:66:d2:97:34:e0:6c:25:70:c7:7d:a0:10:b0:f2:
51:a7:14:ba:fc:81:4e:53:bf:50:44:d5:40:6b:90:52:64:23:
1a:e9:13:38:ab:e3:fd:58:ce:0e:70:78:40:69:09:a3:11:c9:
aa:d9:fa:d8:d7:83:39:fa:f3:27:ee:da:e8:af:a7:fe:f3:3b:
6a:d6:65:9a:0f:b6:a5:04:e0:ab:aa:48:fd:3f:cb:57:ea:28:
24:5d:93:77:f2:81:39:2b:24:27:6f:c1:d5:40:d8:df:93:4c:
e7:70:25:fd:57:ee:b1:7d:98:ff:6e:35:af:e0:f1:8b:ce:3e:
43:03:41:32:17:e1:91:7d:2e:8a:23:f8:92:8c:f0:08:5b:a4:
f8:88:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 18:41:09 2025 by rpki-client