Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/cuHxm92kZWRSSETwKhW-5B8XNhM.roa
File: cuHxm92kZWRSSETwKhW-5B8XNhM.roa (raw, json)
Hash identifier: 5zGPgbVgsrAmpfEblN82C5ZE5peVFAPYPqu8DoTKqXk=
Subject key identifier: 72:E1:F1:9B:DD:A4:65:64:52:48:44:F0:2A:15:BE:E4:1F:17:36:13
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 164A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cuHxm92kZWRSSETwKhW-5B8XNhM.roa
Signing time: Fri 19 Apr 2024 09:53:29 +0000
ROA not before: Fri 19 Apr 2024 09:53:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5706 (0x164a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 09:53:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=72E1F19BDDA46564524844F02A15BEE41F173613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:42:00:30:64:da:f7:55:1f:87:53:be:8e:03:
51:bd:ef:8d:32:ae:bd:d2:99:5e:ed:a8:29:a0:ce:
65:5e:7c:3a:d1:52:16:8d:06:63:8c:d5:60:ff:84:
c5:46:f4:fb:1f:31:3a:00:56:d9:ad:d7:3a:d3:cc:
d8:d2:e4:cd:d5:c9:fb:30:e0:fc:a8:68:6b:6d:6f:
99:0d:70:dc:f4:2d:76:df:12:20:9f:3c:ac:53:af:
f2:52:7a:8c:b0:8f:58:79:5c:b0:59:53:91:30:4b:
a9:b2:32:6c:25:54:b0:be:c8:38:21:82:7e:9d:c3:
48:e4:48:e5:64:73:30:8c:23:39:e6:1a:23:6d:64:
cc:40:57:6a:39:f2:01:55:86:45:21:32:b6:2d:2e:
19:84:60:fb:5c:ff:3d:2b:7a:c9:1b:49:9b:dc:47:
38:41:19:c7:fc:bb:bd:96:54:e2:a2:ee:7c:f8:22:
6c:87:53:51:37:27:eb:38:56:63:5c:fa:4f:e3:57:
e9:44:65:40:6d:69:5e:ea:0f:07:3b:f6:d2:96:a7:
f1:2f:d3:5c:33:ad:fa:a4:c6:07:27:3f:e6:62:41:
54:0c:5b:67:fc:0b:a0:4e:7a:bd:ed:6b:e4:fd:90:
60:00:5e:a3:c3:c8:7a:69:30:95:de:9b:b3:94:13:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E1:F1:9B:DD:A4:65:64:52:48:44:F0:2A:15:BE:E4:1F:17:36:13
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cuHxm92kZWRSSETwKhW-5B8XNhM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:07:b8:03:fb:80:1d:75:c4:e4:8d:25:77:bd:b5:cb:e7:7e:
84:2a:40:c1:d6:d6:e6:44:8d:61:87:19:3d:b0:1e:1b:3f:dc:
7f:fe:1e:e3:d6:5b:b3:4c:f5:47:f9:6b:fb:a7:aa:ca:9e:a3:
ab:f0:92:18:ea:d8:0f:b2:9d:b8:22:75:64:32:72:c4:07:72:
a6:ea:7e:a2:28:12:c9:0b:0e:44:fe:3e:24:03:2a:d0:a0:c8:
70:d0:ef:39:71:67:ae:00:03:a2:c1:03:cb:66:da:9a:83:4a:
7e:cc:79:1d:e2:af:6c:34:fc:84:1e:e3:ca:6d:c6:6b:5d:91:
14:ae:b9:76:13:c9:57:c4:5f:96:35:b7:9a:bf:5c:c8:88:b2:
5c:da:52:c7:29:0f:9a:d3:e4:d2:fc:a0:44:14:59:f9:65:b9:
bd:f6:62:40:b1:68:93:2c:10:33:a6:ac:39:74:12:09:1b:78:
99:99:fc:3f:f9:0c:bb:cb:e9:de:33:84:45:11:d9:17:28:eb:
f4:77:ce:5d:35:15:b5:4e:03:a9:36:d5:ce:01:ae:43:d3:a8:
b9:af:35:17:cc:31:5b:a5:9e:2e:a9:18:d5:a2:5f:61:db:77:
a1:cf:46:84:0d:d9:88:1c:3b:14:27:d7:8a:c0:54:c7:e4:16:
0a:9d:12:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 18:48:18 2025 by rpki-client