Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/aF8weTrqTGE7aBkL7GXGr3gsDgU.roa
File: aF8weTrqTGE7aBkL7GXGr3gsDgU.roa (raw, json)
Hash identifier: e0T3JWtkR7EFvW7/3sm4Aixpqr6Y9TIUuHxVwEf0WU8=
Subject key identifier: 68:5F:30:79:3A:EA:4C:61:3B:68:19:0B:EC:65:C6:AF:78:2C:0E:05
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EEA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aF8weTrqTGE7aBkL7GXGr3gsDgU.roa
Signing time: Sat 30 Mar 2024 17:52:41 +0000
ROA not before: Sat 30 Mar 2024 17:52:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3818 (0xeea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 17:52:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=685F30793AEA4C613B68190BEC65C6AF782C0E05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:53:28:f7:1e:ad:94:12:4f:cd:b7:7c:8f:
38:ac:47:4e:81:3c:8f:e6:e7:1b:d9:5f:41:27:39:
b0:35:b6:67:ff:76:2d:00:cf:0f:82:e1:3b:2d:fa:
a1:b6:b1:6f:52:a4:85:7b:b0:63:1d:f8:49:c8:26:
83:ef:c7:95:78:d2:6c:c6:ff:77:39:10:4f:9d:87:
da:f3:c5:7e:84:c3:1a:03:1d:fe:d8:6d:6c:33:c9:
5d:35:c0:bb:a2:e7:bf:2d:c6:eb:8c:2c:a8:46:e3:
5b:4c:8c:ff:bd:52:6f:36:e1:22:02:f0:6c:4c:47:
d3:d8:5d:aa:89:51:ca:7d:ed:1d:26:fa:2b:fc:6c:
8b:c3:d7:c1:51:16:cd:e5:ba:ff:c8:61:2e:95:d6:
be:27:d4:a4:77:4d:17:32:06:f1:32:b6:38:ce:37:
cf:9e:5c:79:06:21:fd:d2:9c:43:f2:b3:7c:5f:03:
4f:5c:64:11:a5:4b:c4:e0:d7:3a:ce:c7:36:bf:04:
93:d9:ba:0e:2b:f5:c6:1f:3c:fb:78:f9:11:05:9d:
a8:fe:b3:9c:3e:87:c4:3f:62:99:44:ca:e0:4f:82:
f9:77:1b:f3:d3:2c:e0:d7:46:c2:ee:fd:ec:41:cb:
25:9c:ca:3d:f8:84:b7:5c:d4:c5:14:86:31:f7:e1:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5F:30:79:3A:EA:4C:61:3B:68:19:0B:EC:65:C6:AF:78:2C:0E:05
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aF8weTrqTGE7aBkL7GXGr3gsDgU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:f3:3a:82:dd:94:47:1a:be:6a:70:e8:5d:d4:fe:73:3b:07:
1b:ef:da:1f:a2:00:d2:78:fe:84:27:57:30:c9:af:63:9e:b6:
77:61:aa:1d:17:3f:0c:6a:f3:ec:7a:47:f2:0f:9c:62:45:b9:
fd:33:d2:69:4f:15:76:be:c2:35:66:f4:7b:f8:11:f4:cb:c2:
c3:04:f5:95:a4:47:32:1e:a8:a4:56:ad:30:da:09:54:fb:77:
7e:9e:7b:7d:aa:64:fc:7b:c6:93:4f:5f:70:24:39:58:bf:57:
4f:d7:f4:8a:d8:bc:86:ec:37:33:59:34:a6:f4:8c:93:52:01:
c9:dd:c9:4f:8e:34:69:91:2f:73:b1:f1:d6:30:1f:71:5e:6c:
29:29:0b:14:9a:b7:da:07:91:f8:07:6c:ab:d3:c6:57:6d:9a:
d2:e1:c3:ae:a0:7d:96:24:23:8e:ed:ed:13:88:10:0d:20:55:
ed:ca:f4:96:01:e6:95:14:0b:4a:2a:dc:fe:0f:4d:07:e7:16:
bf:82:d9:fe:cc:f8:11:05:1d:d4:2a:2b:de:11:e7:3f:00:67:
29:1d:a2:bc:ad:2c:d3:6c:c1:9d:31:f9:26:bc:dc:bd:f6:96:
dc:0b:10:2c:e8:e6:59:7a:be:23:54:8a:d6:99:5b:53:9b:f0:
1a:25:eb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:44:28 2025 by rpki-client