Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/_31Q430VCfAf8jUB1o8c9aC0yyk.roa
File: _31Q430VCfAf8jUB1o8c9aC0yyk.roa (raw, json)
Hash identifier: VhHvxMGA6BA+mIAUj4jhJYTkDO5cFJgnRa/KoTf1q5Y=
Subject key identifier: FF:7D:50:E3:7D:15:09:F0:1F:F2:35:01:D6:8F:1C:F5:A0:B4:CB:29
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B28
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_31Q430VCfAf8jUB1o8c9aC0yyk.roa
Signing time: Thu 02 May 2024 09:24:52 +0000
ROA not before: Thu 02 May 2024 09:24:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6952 (0x1b28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 09:24:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FF7D50E37D1509F01FF23501D68F1CF5A0B4CB29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:74:e1:92:cc:b4:66:89:a2:bf:03:e4:d7:
f0:f8:1b:26:73:ee:6c:cc:c8:16:50:32:8b:58:23:
ae:6a:aa:4d:d5:ea:ea:50:7f:6b:79:40:5d:ef:f6:
b1:e8:e8:97:77:da:18:c8:af:08:d5:02:4b:56:0b:
c3:ae:e5:f0:87:c1:a6:fc:fe:94:06:d7:9d:d3:18:
95:13:4c:25:4c:36:23:24:40:0f:a2:cc:48:d1:d5:
6b:f2:83:3b:cf:58:dd:87:6f:0f:ba:b3:15:6d:c8:
18:6b:5f:95:ba:60:94:b9:6e:9e:dd:3b:c9:41:e7:
19:d4:66:5c:62:ba:ad:df:34:48:51:f4:5a:8c:7e:
1e:48:de:81:65:91:07:1e:39:5a:57:84:0b:ea:4a:
0e:58:9f:d2:92:66:a7:98:a5:0a:ce:d4:00:57:df:
57:00:d7:a8:7f:10:64:06:1c:61:b5:a3:06:b1:45:
10:72:d8:88:4b:21:81:5b:c9:36:d6:4e:eb:7b:78:
44:b0:b8:95:99:87:de:f6:4f:da:a6:6a:94:38:58:
14:8b:c9:ea:e4:3b:07:ae:70:9f:03:25:84:71:d9:
5d:b5:b3:1d:64:06:ef:d2:1e:7b:ab:45:fb:17:f2:
e6:c0:3f:3c:36:6b:ac:f3:e8:66:d0:74:aa:51:53:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7D:50:E3:7D:15:09:F0:1F:F2:35:01:D6:8F:1C:F5:A0:B4:CB:29
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_31Q430VCfAf8jUB1o8c9aC0yyk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:57:2a:83:58:e8:18:5c:74:d5:a4:fc:24:73:e1:c6:52:82:
55:03:39:54:d8:6b:54:db:a7:85:23:9c:61:7e:ee:00:d4:25:
81:c9:05:e4:3e:1f:d5:b0:1c:63:7f:da:62:ce:42:1e:38:d0:
cc:06:1d:e6:be:47:a5:09:51:08:0f:97:11:f2:df:33:8b:f1:
21:5d:d0:3b:01:0c:18:cd:0e:6d:58:b6:f8:d5:fe:dc:8c:44:
72:f3:3b:ee:b0:30:c5:22:8b:80:75:43:eb:4d:6c:52:e9:f5:
40:82:ad:b5:9d:78:08:5d:d5:48:5e:e2:5a:7c:ff:c0:ac:0a:
f7:01:92:f2:b3:3b:d7:e7:eb:74:4b:6b:9b:fd:55:db:e9:16:
c3:7e:63:42:87:fb:c2:db:3e:9c:6c:40:da:7e:b1:ba:8d:2a:
6f:67:1a:32:ad:c7:50:26:bd:41:2d:31:b4:e0:b0:37:7f:71:
bc:4b:6b:16:7d:b2:a8:94:1b:6e:7f:5b:9c:ac:70:0e:1c:1c:
60:a6:8d:6e:65:d7:cb:26:48:2a:1e:25:8b:9c:c2:f0:e7:40:
dd:03:5e:a0:a9:27:84:f6:21:93:2d:b1:61:e7:a9:22:fd:11:
e1:a3:f1:5b:19:29:2e:6c:60:bc:85:38:12:a3:e6:bb:cc:3d:
fd:0d:3c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:49:57 2025 by rpki-client