Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ZrsFwDeNRaVRBEmkqLTGk_N7tIs.roa
File: ZrsFwDeNRaVRBEmkqLTGk_N7tIs.roa (raw, json)
Hash identifier: kxDuYb3nAHKhVQ9aMo6T7YZ2tL5K67NFdX3Lcp9lI4E=
Subject key identifier: 66:BB:05:C0:37:8D:45:A5:51:04:49:A4:A8:B4:C6:93:F3:7B:B4:8B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E6C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ZrsFwDeNRaVRBEmkqLTGk_N7tIs.roa
Signing time: Fri 29 Mar 2024 10:22:28 +0000
ROA not before: Fri 29 Mar 2024 10:22:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3692 (0xe6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 29 10:22:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=66BB05C0378D45A5510449A4A8B4C693F37BB48B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:57:65:b8:5d:04:51:34:3f:2a:89:2c:c9:
5d:16:25:94:79:55:8d:5a:59:d5:22:1c:dd:d7:db:
58:13:bc:7f:a4:c4:f2:43:96:19:f6:58:ab:25:42:
d7:b9:14:96:88:26:12:4a:7a:11:5f:45:07:46:9e:
fc:87:7f:bd:bd:c2:28:59:ea:aa:dd:6a:42:8f:50:
0c:44:da:62:f5:f2:8e:4b:3d:1c:31:d9:99:3c:b7:
12:c5:ad:f9:6f:de:da:55:a3:f3:5a:58:b8:91:5f:
4d:ec:d5:00:2c:72:3c:98:c0:9c:20:e3:98:11:15:
c2:e6:c8:fb:d3:dc:3c:2f:5c:23:7c:a5:2e:af:de:
c3:e4:e8:9b:e1:67:b0:40:31:ad:8b:b8:21:9d:c1:
12:08:6e:ed:3d:64:4d:83:e7:b1:24:73:81:c0:39:
87:cd:0a:94:9e:96:a0:49:ca:93:59:e6:51:d1:c8:
82:71:d0:17:b2:ac:ae:c5:12:28:6c:cb:cc:b8:b7:
36:bb:85:c8:fc:63:bc:e5:44:df:45:74:50:a9:9f:
fc:30:22:d4:aa:4f:6b:29:10:83:73:45:27:22:cc:
f1:9c:55:d7:f2:97:f0:b7:ca:7b:d0:8d:0c:de:d6:
47:d2:ce:38:7a:89:5b:1c:41:7f:9a:e3:c9:34:96:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BB:05:C0:37:8D:45:A5:51:04:49:A4:A8:B4:C6:93:F3:7B:B4:8B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ZrsFwDeNRaVRBEmkqLTGk_N7tIs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:b1:b7:ce:96:6b:5f:90:66:17:04:01:fa:24:39:36:26:d9:
11:93:c1:83:48:69:78:cb:44:9c:64:3b:b3:c8:30:8d:96:e1:
19:ad:42:82:0b:b4:00:31:43:dd:87:dd:a1:f1:98:83:64:0b:
fd:68:16:b4:94:3c:d5:c8:54:dc:6e:87:d6:e0:60:17:d2:44:
c7:49:c4:d8:b5:fa:1e:b5:e0:96:7f:0b:55:bd:9b:c1:de:88:
ae:2e:ef:ed:1f:aa:05:ac:5a:38:d3:82:b1:41:7e:5a:f8:94:
6a:2f:4d:7c:f9:30:a0:2d:d1:89:63:20:6d:f4:32:6d:12:0c:
e0:e4:a1:ae:d7:4b:74:69:a9:c6:d9:dd:9d:e9:43:3e:ca:4b:
7a:71:63:18:d3:fe:26:fe:71:44:68:2d:4b:47:f3:8e:58:19:
58:ac:08:c7:00:bb:8e:26:2e:ac:af:15:7c:e5:09:fc:d9:f8:
e6:fb:e1:80:81:2a:f1:1b:0f:23:5f:7c:3c:85:df:b6:0d:d4:
c3:6d:d6:cb:07:5b:f7:b4:43:35:32:61:a8:06:6d:3a:14:82:
f4:19:2e:30:12:8d:8b:10:eb:3f:c7:aa:2a:c6:d1:42:2f:99:
de:d9:65:78:dc:82:e4:7e:24:41:0d:39:eb:75:8b:f8:d9:f6:
4e:d8:c5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:45:38 2025 by rpki-client