Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/cVleXw_KuLuaDhGdjY-N1mVSrXs.roa
File: cVleXw_KuLuaDhGdjY-N1mVSrXs.roa (raw, json)
Hash identifier: jv4SyonNVwbGH51RRUiBte8e4K21XCEUTVYX4VN+qVg=
Subject key identifier: 71:59:5E:5F:0F:CA:B8:BB:9A:0E:11:9D:8D:8F:8D:D6:65:52:AD:7B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E60
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cVleXw_KuLuaDhGdjY-N1mVSrXs.roa
Signing time: Fri 29 Mar 2024 07:22:37 +0000
ROA not before: Fri 29 Mar 2024 07:22:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3680 (0xe60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 29 07:22:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=71595E5F0FCAB8BB9A0E119D8D8F8DD66552AD7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:f8:c4:21:38:e8:5d:bc:b2:1b:dc:04:fa:
7e:e4:e7:4f:80:b4:1d:d6:82:3b:41:01:5f:b7:f3:
12:42:63:e2:be:b4:83:30:eb:74:6e:02:15:8b:f2:
80:b4:dc:63:c3:c1:3c:29:81:3d:ea:11:29:ca:3b:
8c:8e:09:a6:60:18:d2:51:5b:b6:9b:62:cb:77:7b:
74:53:ca:8d:4e:59:27:50:a0:e5:75:fc:2e:fd:00:
16:16:d6:36:e7:af:cc:5f:88:ba:b3:81:10:ab:b8:
2c:a9:fd:44:96:c9:e4:24:89:cb:72:03:e3:cd:02:
ac:1f:c2:e8:f8:59:10:a6:46:85:3f:70:9d:9b:f6:
22:61:63:f7:c5:d0:a2:66:fd:46:97:92:1f:1b:b2:
c1:68:c2:42:b1:10:26:8f:d5:8b:bf:df:4a:44:a9:
b3:71:f7:87:76:95:c8:73:f6:88:2b:d7:e2:33:58:
9a:a4:4e:5a:37:00:13:4e:2d:93:a2:05:f3:1f:95:
62:a2:1d:d9:e0:ed:b2:2f:b7:3d:38:0b:c7:92:15:
de:df:9e:27:71:61:28:8b:52:fc:ff:95:2f:71:9b:
49:79:85:69:f0:e3:a1:01:c0:c3:46:9d:d7:56:af:
f3:29:6d:d8:0c:b7:ac:d5:d0:b0:90:51:f4:bd:79:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:59:5E:5F:0F:CA:B8:BB:9A:0E:11:9D:8D:8F:8D:D6:65:52:AD:7B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cVleXw_KuLuaDhGdjY-N1mVSrXs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:e7:d8:48:e8:5b:30:7d:bb:96:64:bf:27:74:17:2a:a0:84:
74:fc:ba:dc:7f:0c:c1:bf:b5:a3:ae:9b:8f:94:3f:5d:cc:9f:
d1:4f:94:3e:29:49:6a:fa:75:9f:0a:22:56:e0:58:06:01:0f:
3c:2f:91:84:d8:cd:79:8a:15:ba:df:bd:b3:c4:c1:cf:67:19:
0b:19:2b:a4:f7:9e:e7:01:0f:05:f7:43:3a:12:fd:34:8b:45:
d5:2f:6d:84:ea:f0:60:82:81:c3:5f:ad:05:dd:c4:0a:76:a1:
2a:d6:f2:44:8f:a5:6c:9a:7e:30:1f:f5:0e:da:17:a3:0d:f1:
2e:4e:8b:2d:5d:cf:f8:53:9a:1f:23:8d:e1:96:90:8b:b1:c5:
b5:bf:6f:f4:06:e5:11:90:92:5f:4b:62:0a:ca:cd:d0:c4:64:
74:bb:36:1f:13:6d:eb:b9:3b:e7:6a:0a:71:20:fa:29:c6:95:
ac:71:89:55:a3:81:5b:11:b8:f8:98:c5:b8:9c:bf:34:e4:50:
69:39:3b:95:a0:b7:81:4f:c4:d1:3c:07:76:d4:b4:18:53:1e:
fd:46:91:3a:e1:16:f5:a9:67:32:33:6c:be:a1:94:1f:21:38:
8b:67:45:fe:7b:72:93:7e:96:a3:fb:8c:b4:44:0f:bf:07:7a:
21:3e:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:48:12 2025 by rpki-client