Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/bHGdB62sRPEBfLyEBxrN6QTrL4o.roa
File: bHGdB62sRPEBfLyEBxrN6QTrL4o.roa (raw, json)
Hash identifier: u7XDTrFtw2DGLmTyOo0EDvn5BV2qxnb3rv4cTqlo/so=
Subject key identifier: 6C:71:9D:07:AD:AC:44:F1:01:7C:BC:84:07:1A:CD:E9:04:EB:2F:8A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CAA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bHGdB62sRPEBfLyEBxrN6QTrL4o.roa
Signing time: Mon 06 May 2024 09:54:17 +0000
ROA not before: Mon 06 May 2024 09:54:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7338 (0x1caa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 09:54:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6C719D07ADAC44F1017CBC84071ACDE904EB2F8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:50:40:a6:52:4b:96:08:23:59:3f:b0:02:
3a:6a:af:cc:10:70:ee:93:3e:fa:8c:69:19:f2:3b:
65:fb:31:36:e5:c0:ba:9a:51:a2:2f:2a:b9:1f:a7:
db:5a:2a:15:62:c4:7e:8e:bf:88:79:dc:28:cb:cb:
90:77:8c:40:48:ba:6d:77:00:e9:1e:cb:d2:f3:22:
80:ad:58:a8:3f:58:52:51:11:c2:c3:5a:5f:ce:77:
bb:56:05:69:0f:b9:7f:3f:85:40:8b:fd:82:84:3b:
98:b7:c7:07:2d:c9:f9:da:75:ea:8a:8a:24:b0:48:
f6:11:2f:9d:c5:89:1c:43:72:b9:a6:14:ba:d1:e0:
79:1d:b1:e0:47:2c:1f:4d:1d:79:f9:74:d3:2c:68:
4b:9c:78:b0:c5:7c:b9:7e:0f:1f:4e:2c:93:62:63:
02:7c:c8:f8:c8:39:e3:a2:47:9e:15:b1:52:c2:c2:
81:66:c4:09:16:c8:cc:77:c3:e7:de:35:86:f2:fc:
de:ca:25:40:34:2a:dc:0d:55:04:82:99:5d:9d:c2:
d6:7b:63:5c:65:bf:66:7a:d0:1e:a6:86:4a:78:a5:
19:ac:10:7d:15:30:3e:aa:8e:57:37:ad:43:7d:56:
b5:4f:26:a5:9e:69:d3:42:d9:9a:44:34:51:c8:2e:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:9D:07:AD:AC:44:F1:01:7C:BC:84:07:1A:CD:E9:04:EB:2F:8A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bHGdB62sRPEBfLyEBxrN6QTrL4o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:50:39:8f:4e:93:ba:c2:b5:13:75:21:1c:24:04:10:46:fd:
b4:5a:13:04:2f:38:bf:11:f4:a8:32:d9:e5:b8:7e:6d:40:db:
42:80:98:b7:a3:da:d3:07:dc:af:b9:47:76:e0:c6:2d:fc:a8:
05:c8:ce:36:f0:0c:e5:f2:11:07:19:47:fd:95:17:1a:4d:1b:
62:f9:78:26:8f:af:98:6d:ca:cd:d5:fe:52:cf:49:d9:8f:74:
65:75:8b:d9:3f:11:30:28:8a:65:5e:a5:45:be:db:fa:27:34:
4a:16:d3:e8:7e:fd:5d:04:14:e1:0a:7e:f9:c1:21:69:82:09:
32:78:e9:d4:ef:97:76:7f:ee:5d:02:37:e9:3a:88:72:ac:be:
7d:dc:ba:fb:0a:9c:92:d6:20:0e:35:23:76:d3:c3:a9:70:09:
14:07:7e:c6:81:17:78:78:83:6e:81:4d:42:85:7e:48:87:be:
ec:58:24:fa:07:76:be:08:ad:72:96:77:f5:d4:14:b9:99:86:
27:7c:80:24:96:67:eb:24:0b:05:41:9a:d6:09:fa:70:ad:f7:
f6:5c:63:aa:ae:96:c8:3a:f2:c8:d2:2d:eb:6a:f0:30:6a:13:
61:c8:5c:3e:81:7d:46:ea:3a:ce:66:37:a3:1d:32:e2:df:1a:
4a:18:e4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:42:17 2025 by rpki-client