Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/aujiIyZCCkn6Hj7QOoR38ooRmJ0.roa
File: aujiIyZCCkn6Hj7QOoR38ooRmJ0.roa (raw, json)
Hash identifier: FuIRhBO8IwP7LSzUoMfm5h1N9KTgWfqCih+P6ysRtSs=
Subject key identifier: 6A:E8:E2:23:26:42:0A:49:FA:1E:3E:D0:3A:84:77:F2:8A:11:98:9D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1AA6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aujiIyZCCkn6Hj7QOoR38ooRmJ0.roa
Signing time: Wed 01 May 2024 00:53:59 +0000
ROA not before: Wed 01 May 2024 00:53:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6822 (0x1aa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 1 00:53:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6AE8E22326420A49FA1E3ED03A8477F28A11989D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:3e:d7:c9:51:94:3c:7c:9f:d1:53:6a:84:
78:1e:57:ea:b1:25:af:24:bb:c6:08:66:ec:fc:05:
b1:c1:06:8e:de:23:54:17:c2:b7:77:f9:8e:83:06:
eb:b4:f9:5c:90:b0:df:b6:ca:22:42:e0:8d:df:82:
33:9a:45:3e:25:04:6a:f0:02:09:ae:07:60:3e:16:
b2:8a:fe:f1:3a:16:21:b3:7e:1e:c1:8b:c7:40:2c:
0c:14:e5:03:a2:27:16:5a:7b:d8:cf:89:dc:6f:8b:
cb:91:e5:61:6c:1a:22:a5:44:9b:60:4a:3b:a5:b4:
d6:e0:43:70:99:1e:bd:f6:cb:ce:d2:a3:d4:33:38:
53:59:ad:d3:08:d3:bc:85:58:85:a6:a4:51:e7:3b:
a0:19:a6:06:2c:a6:3f:94:8c:07:a9:28:b1:6a:6c:
33:d1:a8:d2:07:b9:8e:7b:8b:96:95:21:06:90:f3:
94:de:1c:f4:73:43:ab:50:d6:62:2d:2e:2f:05:b1:
d8:43:dc:5a:3f:72:86:b0:00:5c:31:c9:51:4e:d0:
65:47:5c:12:f9:9f:ce:89:21:c3:bc:81:2a:3b:9f:
22:ab:a1:9a:29:6e:69:14:a0:7a:7a:b8:66:82:48:
3e:6e:c7:40:8e:0c:7e:76:f5:8f:80:5e:00:f8:d6:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E8:E2:23:26:42:0A:49:FA:1E:3E:D0:3A:84:77:F2:8A:11:98:9D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aujiIyZCCkn6Hj7QOoR38ooRmJ0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:9d:cb:79:f7:35:91:2a:cb:64:33:c5:48:3b:a7:fb:4d:9b:
d5:a1:43:f5:a6:84:27:8f:e5:41:21:e6:56:8f:6d:e6:b4:3b:
63:c0:71:eb:1d:29:7e:5c:4a:ba:b0:5f:66:02:d9:9c:de:39:
c8:73:79:7d:57:00:29:b0:84:41:07:76:6e:f7:23:9f:fc:38:
a3:9f:f2:5e:d3:32:92:fd:74:65:4a:ff:e7:01:ed:fc:2b:db:
4a:52:2a:fd:57:b1:6b:fb:34:12:82:b5:98:b8:24:96:d3:90:
67:cf:02:1d:e4:76:48:54:03:44:21:6b:4a:be:1b:8d:b1:02:
1d:34:dd:ba:ee:c3:3e:a1:4b:cc:3b:45:ce:e7:cf:91:f0:1e:
e1:ef:82:be:dd:e6:99:c5:d0:e4:82:03:f1:47:1f:d0:aa:ce:
5c:ae:b3:b6:5f:76:ee:da:49:0c:6d:6c:db:63:47:dc:67:b4:
a0:09:69:93:b0:d1:30:09:26:e8:02:12:64:96:f3:5a:a0:86:
8b:62:ea:3d:42:f7:60:e0:5a:9b:7c:68:26:ab:c3:66:3c:30:
fb:9e:20:0e:f9:10:ce:a8:93:60:69:62:06:5c:f2:13:fd:25:
19:49:88:8c:98:0f:7c:4a:78:39:27:bb:a4:86:6d:7e:ad:01:
3d:30:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:49:18 2025 by rpki-client