Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Z98MbQRhetp-foib8FEfPz10bN0.roa
File: Z98MbQRhetp-foib8FEfPz10bN0.roa (raw, json)
Hash identifier: EO4VsUu1BLRXa5QLNpEV4NqfwMBtgRv/G97NU23aGPM=
Subject key identifier: 67:DF:0C:6D:04:61:7A:DA:7E:7E:88:9B:F0:51:1F:3F:3D:74:6C:DD
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 155C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Z98MbQRhetp-foib8FEfPz10bN0.roa
Signing time: Tue 16 Apr 2024 22:23:20 +0000
ROA not before: Tue 16 Apr 2024 22:23:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5468 (0x155c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 22:23:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=67DF0C6D04617ADA7E7E889BF0511F3F3D746CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:9a:4a:5d:22:03:54:56:08:92:97:d1:de:
c4:c0:f6:d5:90:29:e5:9c:c9:a7:ca:6c:4f:94:b0:
39:4f:8d:19:8b:5a:eb:cf:42:4d:72:4e:d3:8d:07:
72:d6:3e:56:f1:a1:78:8c:48:4b:5f:57:81:84:d0:
a8:35:95:f7:ec:b0:22:38:dd:9e:3b:38:1e:47:33:
4a:1d:8d:be:60:02:1b:40:41:f9:19:eb:0b:0f:43:
f4:fb:2e:5e:3a:13:e3:75:ad:36:38:42:e5:53:17:
85:ee:a4:0c:85:cf:af:94:fb:c3:67:2e:76:40:ee:
3a:ac:14:7a:64:20:e1:33:1b:a4:9d:74:7c:18:ad:
00:8b:aa:b4:d9:ca:f4:0c:a3:48:1a:6d:8d:dd:0e:
65:e7:ee:22:57:85:5f:d1:13:5d:a1:23:31:31:33:
8d:46:be:24:d0:43:0b:99:b9:72:f4:74:d4:17:6c:
73:24:c2:63:64:cc:c7:76:51:10:4e:b3:e3:1b:74:
55:18:6f:c6:44:05:af:0c:2c:fa:28:61:8f:40:68:
07:f0:82:1c:55:4d:77:f8:47:4e:51:a9:4e:95:39:
f4:34:f9:b3:0c:04:e8:56:c0:76:36:60:1f:74:c6:
9d:2c:8f:e8:5a:39:94:26:4a:c9:ec:4f:ce:30:2f:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DF:0C:6D:04:61:7A:DA:7E:7E:88:9B:F0:51:1F:3F:3D:74:6C:DD
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Z98MbQRhetp-foib8FEfPz10bN0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:ab:e5:76:3a:dc:c0:d7:33:b0:ef:75:0a:6c:6e:1e:4e:e1:
e0:cf:d2:52:3d:9f:8a:e3:b7:fb:d4:57:91:22:34:4b:12:9a:
7b:4d:6c:f4:ee:08:22:5e:a9:da:5e:4f:35:b4:be:56:0b:57:
1d:ca:ef:50:ae:4f:c5:32:62:5c:2a:2b:b4:ff:a8:66:cc:13:
36:e8:f6:eb:d7:21:ed:4f:95:4a:c3:88:8b:c2:5b:96:ba:61:
86:56:a5:6a:70:dd:51:8e:f0:4c:78:15:dc:63:94:56:8b:e2:
2a:cf:cc:ca:02:7e:26:d2:45:b1:fc:22:07:ce:a4:e9:01:19:
35:fd:0f:cd:06:86:51:90:da:5b:7d:43:41:39:f8:32:b0:8f:
e2:71:28:1d:69:ec:02:d3:9e:27:ed:76:0e:eb:34:9a:8e:52:
7b:86:0c:4c:65:b8:cc:7f:da:2a:71:69:27:8d:a2:15:f7:e2:
43:56:c8:7c:7a:28:28:c3:ac:db:2f:16:30:ff:72:73:c8:ba:
b9:b5:96:4f:93:ef:6d:ab:b6:bf:38:23:7e:bc:f0:a5:af:a1:
54:42:b8:f7:71:1d:2a:d5:86:53:bc:e1:00:ef:1d:e3:17:4a:
ad:7e:e2:bf:e3:d0:3b:24:48:05:a8:2f:82:4a:4c:b8:67:13:
3e:1e:fa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:45:33 2025 by rpki-client