Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/_qe3HAMgtGp2wKrIusN8677_YBU.roa
File: _qe3HAMgtGp2wKrIusN8677_YBU.roa (raw, json)
Hash identifier: j+SftvCZiOgkKbrdpN1KM7IBzQUDwFmJ/DcmMfwmJXU=
Subject key identifier: FE:A7:B7:1C:03:20:B4:6A:76:C0:AA:C8:BA:C3:7C:EB:BE:FF:60:15
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B5A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_qe3HAMgtGp2wKrIusN8677_YBU.roa
Signing time: Thu 02 May 2024 21:54:09 +0000
ROA not before: Thu 02 May 2024 21:54:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7002 (0x1b5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 21:54:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FEA7B71C0320B46A76C0AAC8BAC37CEBBEFF6015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:f9:eb:40:e1:c9:02:9c:51:7b:63:38:fb:
ea:e3:71:89:36:f4:42:c5:bb:fe:16:6e:92:72:2d:
30:dc:30:4e:c1:1e:37:2e:44:50:4f:da:9a:df:a7:
fc:d1:ef:a4:3c:53:0a:ac:1a:5b:8b:c6:70:57:9d:
66:2f:00:17:2e:12:13:cd:2d:bf:72:2c:8e:bb:54:
f0:2a:06:e8:a2:00:6b:6a:b6:94:de:0f:0a:f1:fc:
02:9f:c2:d5:11:3e:76:7f:cc:5f:b2:89:44:6e:f5:
69:c4:d3:81:9f:f2:a1:96:5f:4d:87:60:5f:ce:46:
25:6a:8d:84:80:57:55:83:20:db:f4:64:c6:97:38:
fb:bf:e5:51:d1:3d:bc:98:29:f5:0c:02:2b:ff:12:
d1:d6:c0:e2:0b:47:ae:85:c0:35:94:3d:9d:e8:08:
2c:fc:e8:bf:e9:39:b5:25:31:5a:ed:b1:25:72:99:
70:ce:4d:89:3e:3c:f6:6e:ee:3e:a4:05:1c:70:b4:
2b:27:29:37:24:6a:34:e5:8d:55:ee:a5:c1:e1:ab:
be:72:66:d7:86:dd:f2:0e:e9:8e:68:3b:9c:83:41:
8a:dd:47:a4:46:ce:95:94:78:2a:6b:26:d6:b1:3b:
c3:67:15:d8:9f:46:35:f8:b6:d1:44:bf:f6:e0:ca:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A7:B7:1C:03:20:B4:6A:76:C0:AA:C8:BA:C3:7C:EB:BE:FF:60:15
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_qe3HAMgtGp2wKrIusN8677_YBU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:04:86:1d:30:77:94:6b:6a:36:95:25:41:32:b8:1d:b6:45:
eb:fe:d5:47:73:56:39:0e:16:e6:3c:1c:f3:84:f6:3c:83:66:
83:71:09:71:e7:ba:c9:25:8e:10:52:8a:64:a0:35:95:48:13:
67:a9:74:14:a5:de:d5:ce:38:a3:52:c5:35:28:3f:b6:58:28:
c1:09:42:a9:a0:5d:3e:c5:3a:9b:0a:18:d2:0e:61:ad:73:d1:
f9:9c:dc:f4:37:ac:73:44:08:d9:57:46:14:95:1f:19:4f:f3:
5b:de:93:74:7b:ea:0f:fe:80:4b:c3:e8:b9:6d:9e:df:b2:e1:
d3:2b:d9:41:f8:79:37:3e:a6:81:97:70:fb:53:f5:0a:6d:bf:
37:de:c0:9f:a5:98:25:75:4d:9b:84:c4:da:b7:3c:87:74:a6:
77:a7:97:ed:6c:27:ea:5c:e3:a9:4d:5c:43:5f:d2:95:a8:40:
c1:29:0d:6e:8d:d9:9e:00:34:cb:1d:ff:ce:2e:53:bd:a1:0b:
17:39:0d:88:a5:7e:0c:65:63:9f:38:4e:5b:06:c2:e1:68:c8:
68:8a:31:b9:6c:c0:b0:2f:a3:23:08:aa:a3:91:43:e9:25:98:
07:71:1d:b7:3a:37:ad:75:a6:5d:2c:73:61:ca:58:19:4c:e7:
62:1d:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:57:47 2025 by rpki-client