Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/gm_tfIo7rK48mjOfCtQuWnzsMIE.roa
File: gm_tfIo7rK48mjOfCtQuWnzsMIE.roa (raw, json)
Hash identifier: aqSI6U1Nbf6cOkYUXSrTysBI++aKhol6wyLWZffkNPI=
Subject key identifier: 82:6F:ED:7C:8A:3B:AC:AE:3C:9A:33:9F:0A:D4:2E:5A:7C:EC:30:81
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F80
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/gm_tfIo7rK48mjOfCtQuWnzsMIE.roa
Signing time: Mon 01 Apr 2024 07:26:40 +0000
ROA not before: Mon 01 Apr 2024 07:26:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3968 (0xf80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 1 07:26:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=826FED7C8A3BACAE3C9A339F0AD42E5A7CEC3081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:d0:cd:62:03:ec:12:4e:94:1a:43:dd:29:
9b:3d:9c:f1:65:62:31:e8:e0:8c:b2:36:4d:af:99:
e1:a5:24:d2:67:28:df:1f:f3:6e:9d:ac:40:9e:30:
8f:5d:d7:9b:3c:8c:20:f1:73:3c:df:f1:53:aa:9b:
ab:0d:da:ad:a3:44:50:01:90:c8:7f:39:1d:39:77:
e6:a9:b1:57:e0:82:4e:15:4b:c7:0b:f2:3a:c5:44:
9b:96:95:7c:f6:99:7c:ba:a6:8e:1e:a0:75:28:90:
95:55:79:3b:8b:f0:84:23:08:a0:a3:09:04:ed:a4:
9d:ab:23:e4:b6:62:57:75:60:b1:1f:55:0e:a9:93:
0b:c3:54:a4:03:44:a2:c8:63:26:68:4a:cb:b1:bf:
94:9f:cd:d7:5e:b7:04:ae:1c:6a:e1:09:99:72:a1:
f4:90:e0:bc:2d:15:c4:cf:c9:6c:f2:1b:a5:90:52:
b6:20:0e:cf:05:02:6e:ac:2a:19:70:34:4a:f6:51:
55:e9:70:28:41:17:14:d5:e9:bd:bf:98:f9:18:15:
58:cb:25:51:2a:8a:56:eb:36:05:6d:1b:7e:d6:0f:
0d:c7:0d:5a:1a:6b:a1:fc:50:22:31:50:51:7d:b5:
f4:57:f1:a3:5e:78:3a:c4:e4:ac:57:c8:9e:f6:a9:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6F:ED:7C:8A:3B:AC:AE:3C:9A:33:9F:0A:D4:2E:5A:7C:EC:30:81
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/gm_tfIo7rK48mjOfCtQuWnzsMIE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:52:28:2d:58:42:9e:4a:38:e5:89:90:7d:04:da:e9:91:c7:
6b:7f:0f:22:a0:f3:0a:c5:29:89:7d:47:c8:ca:74:19:a2:a5:
6f:f2:cc:a4:5d:fb:4f:23:79:86:49:35:6a:25:f1:1b:2d:37:
ec:da:ae:c9:86:45:4c:92:ef:f7:34:79:21:6c:e5:4c:12:41:
b5:21:f6:b5:53:f1:f4:2e:ac:3e:e9:05:23:95:86:47:94:ed:
82:7d:f8:f9:5e:27:7c:25:aa:14:ac:60:45:bc:1e:3d:ee:d3:
64:c1:e8:40:46:c1:d0:5d:b1:09:d0:06:5c:38:3f:f7:73:b4:
4d:ad:f3:8f:a5:46:bd:9f:92:61:10:f1:a3:ff:4b:99:08:94:
d8:ec:98:d1:38:f9:46:11:10:4d:b2:14:b9:a1:83:e9:01:95:
49:4e:2c:8e:a7:2e:07:38:24:b6:7b:02:91:4a:bc:99:71:5c:
da:21:d9:ce:73:d9:75:ba:b3:16:d7:f5:3e:23:a5:67:ea:93:
0d:91:39:a4:d3:25:0f:49:d9:26:68:0d:85:4b:5b:e7:3a:18:
26:f9:a5:d8:7e:ba:2a:d9:50:62:34:8a:ae:aa:65:f8:89:24:
a0:5f:32:2b:e7:4d:ac:e4:4b:0d:69:48:7c:03:24:9e:46:80:
38:b4:40:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:45:02 2025 by rpki-client