Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/bHCk0BrF_01OdUMSQ4-PlcFgY_4.roa
File: bHCk0BrF_01OdUMSQ4-PlcFgY_4.roa (raw, json)
Hash identifier: tccH+EDnHY/7LzL1xaHIdZvadPED6UoxCJ+hmkvXrIU=
Subject key identifier: 6C:70:A4:D0:1A:C5:FF:4D:4E:75:43:12:43:8F:8F:95:C1:60:63:FE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E76
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bHCk0BrF_01OdUMSQ4-PlcFgY_4.roa
Signing time: Fri 29 Mar 2024 12:52:29 +0000
ROA not before: Fri 29 Mar 2024 12:52:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3702 (0xe76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 29 12:52:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6C70A4D01AC5FF4D4E754312438F8F95C16063FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:da:c8:ff:40:c9:ec:02:5a:cb:63:16:fb:de:
5d:f0:45:50:cf:63:55:39:2d:33:16:2b:c6:54:48:
30:e4:24:97:f4:e9:b5:08:fc:e3:fd:df:1b:e5:0d:
3e:c4:0a:24:8c:bd:94:4d:e3:5a:e4:32:a9:c1:ef:
a2:e6:52:3f:02:dd:2c:cf:04:48:ce:36:89:e0:d1:
6c:f7:75:96:3f:fe:46:00:58:5b:1d:f1:ea:c7:22:
45:08:d0:37:0d:4f:8b:49:6a:31:f5:68:7e:1e:73:
86:89:f1:25:7d:63:aa:b5:7c:e4:50:2c:e1:12:93:
86:85:4b:4d:11:ae:35:91:a6:be:a9:cf:14:f4:4f:
df:d5:05:66:36:ed:04:98:1b:77:32:37:06:8c:69:
eb:26:99:20:58:a2:d4:fa:92:d8:d4:ab:15:47:64:
73:62:ea:ee:ac:e1:63:b8:df:82:1b:e3:d3:00:8f:
d3:7d:d6:6a:78:27:9c:80:b3:57:7b:38:10:8a:f9:
cb:54:1c:29:b1:2e:ee:cc:f6:48:8c:33:50:9f:e6:
58:bc:8f:c9:5e:03:e5:7c:7e:de:28:6c:f0:93:bd:
08:fc:f8:0f:bb:ac:da:e9:5e:f3:d9:76:d0:a9:11:
23:1c:d6:df:f8:d5:74:70:9a:4f:a3:61:c4:53:ec:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:70:A4:D0:1A:C5:FF:4D:4E:75:43:12:43:8F:8F:95:C1:60:63:FE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bHCk0BrF_01OdUMSQ4-PlcFgY_4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:91:52:70:28:98:dd:11:a9:4e:fd:5c:ec:39:38:93:ec:a9:
41:ab:8c:b8:5b:6e:ba:0c:70:78:a6:36:ab:06:81:ae:3a:48:
b7:9a:b5:ff:dc:7a:3e:c7:66:4d:58:2b:b5:f2:4a:9e:3d:8f:
04:0a:9d:78:15:65:e1:8d:53:67:a2:10:09:61:fc:4e:4a:6a:
78:49:3c:3d:13:83:fa:7a:57:2b:3b:a3:2a:0c:54:ca:ac:8e:
e8:5f:f2:6b:b7:fa:b7:bf:71:15:7a:b4:05:a9:52:1c:24:57:
13:ca:d5:65:a7:76:e2:c8:70:5c:3b:61:8e:ac:5f:d2:81:98:
b9:74:3e:ee:8f:10:fc:d9:09:f5:39:22:1d:f1:bf:68:f2:f4:
9b:88:fe:67:32:19:f3:e9:fd:5a:ef:7c:22:60:37:a3:94:07:
c2:13:c8:f5:5f:ba:40:04:b3:81:9d:bd:2e:ac:b5:83:e8:9c:
5a:30:9b:4e:65:30:39:8f:01:4f:5c:11:94:b6:f5:7a:d0:b4:
45:6e:33:9a:13:7d:60:dc:e2:3a:86:b5:25:d7:44:5c:67:33:
88:10:8b:cb:fd:ac:7b:52:dd:eb:d4:2d:c0:51:4f:c7:8e:c9:
6e:10:d3:04:66:12:09:9b:23:4f:02:26:d9:b3:34:b7:1e:7f:
66:c2:48:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:47:58 2025 by rpki-client