Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/eGvQGBXsnH2JNN8OC-YMg-uuGJg.roa
File: eGvQGBXsnH2JNN8OC-YMg-uuGJg.roa (raw, json)
Hash identifier: 8RdbqNX/HCFFXE9g+FcDmdJqLOF3UwOCWPk4PONwcTY=
Subject key identifier: 78:6B:D0:18:15:EC:9C:7D:89:34:DF:0E:0B:E6:0C:83:EB:AE:18:98
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D68
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/eGvQGBXsnH2JNN8OC-YMg-uuGJg.roa
Signing time: Wed 08 May 2024 09:24:22 +0000
ROA not before: Wed 08 May 2024 09:24:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7528 (0x1d68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 8 09:24:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=786BD01815EC9C7D8934DF0E0BE60C83EBAE1898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9a:cb:d1:e5:50:f7:b6:5b:4c:53:f7:31:71:
9a:7b:51:7f:de:f4:6b:f0:55:3f:96:56:85:93:e6:
23:f8:b5:1b:e9:43:4c:33:ba:4b:ac:99:d4:14:2c:
58:28:12:78:4f:50:0d:a0:15:6f:7f:a6:ce:85:c9:
89:42:53:03:f4:ff:3c:69:cb:0e:f3:89:05:51:95:
bf:91:0f:b8:31:2d:6b:9d:44:a3:3d:b9:17:49:85:
86:dd:56:1a:8d:17:5f:97:21:78:89:8f:ac:88:dd:
15:3d:88:b6:17:62:5f:30:d1:81:10:12:77:4c:dc:
ab:79:81:1f:1c:74:4f:86:0b:00:99:67:89:99:87:
f1:dd:fe:80:51:3f:0a:8c:e0:22:45:da:15:a5:02:
d7:e8:a0:55:bf:50:93:e6:2a:79:4d:e6:3a:ae:bc:
ce:df:81:1d:f4:66:a7:61:81:db:aa:77:ff:88:02:
4e:c3:09:3d:49:59:35:54:b8:6e:a3:1c:12:7b:e4:
e5:66:87:4b:50:a0:29:2a:2e:78:bf:ad:9a:a3:7d:
0c:3c:22:7b:8d:b3:e3:75:05:6d:07:65:db:a7:1d:
db:5c:99:01:8d:a8:40:14:90:f0:0b:1b:82:80:4e:
54:c6:32:0b:92:1a:03:ba:c0:d4:15:dd:81:7b:ba:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6B:D0:18:15:EC:9C:7D:89:34:DF:0E:0B:E6:0C:83:EB:AE:18:98
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/eGvQGBXsnH2JNN8OC-YMg-uuGJg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:14:83:68:69:e1:27:12:73:a2:4d:75:5d:e2:03:f1:98:db:
d1:7a:d5:29:5f:8e:41:73:82:90:5a:ef:57:28:17:1e:8f:94:
02:cc:7c:e3:4d:af:fb:86:16:af:86:55:af:3c:c0:10:c9:fb:
a5:0a:89:e9:4f:17:a1:11:36:6d:ce:d5:23:1e:fc:1d:de:f5:
d7:f6:cd:5b:30:fb:b4:9c:1c:e0:6a:ff:32:d7:32:5d:aa:8a:
c1:6e:9e:e0:11:89:e3:26:ea:37:de:81:6b:09:47:22:8a:f5:
5b:a8:06:ca:fd:ee:be:f2:8c:70:c6:0e:37:19:27:dd:e9:a7:
6c:a1:1e:aa:0e:72:56:eb:46:84:36:09:8f:ad:cf:c1:68:80:
68:85:33:88:01:4f:3b:a2:bc:5f:db:73:da:be:fb:c4:41:d6:
e8:0b:35:18:96:31:c4:2b:49:2a:d5:49:aa:f2:31:e2:ff:cc:
72:8f:ee:b2:63:e3:42:37:89:3b:7b:eb:8a:49:89:b9:74:01:
74:b4:9c:34:20:09:11:b0:3d:b7:6a:be:53:41:93:7e:4b:c5:
eb:7a:23:d1:06:81:a2:9f:09:b1:6a:16:21:c6:5c:57:31:6b:
0d:e4:af:e3:44:36:1c:66:44:89:45:0e:54:67:ac:e2:c6:a2:
14:3c:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 05:57:54 2025 by rpki-client