Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/jCLKhp_VyTt009bXUap3PaecFmA.roa
File: jCLKhp_VyTt009bXUap3PaecFmA.roa (raw, json)
Hash identifier: 6AKy5whsH/WK7B0RG5KwsjtFEX9/mJMgPfdHciT/OIU=
Subject key identifier: 8C:22:CA:86:9F:D5:C9:3B:74:D3:D6:D7:51:AA:77:3D:A7:9C:16:60
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1498
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jCLKhp_VyTt009bXUap3PaecFmA.roa
Signing time: Sun 14 Apr 2024 21:23:17 +0000
ROA not before: Sun 14 Apr 2024 21:23:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5272 (0x1498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 21:23:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8C22CA869FD5C93B74D3D6D751AA773DA79C1660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:f9:c8:ea:4c:6f:87:16:d3:90:73:74:30:
98:93:21:92:b9:0d:a1:8e:d4:63:c3:37:d2:bb:2b:
a9:a1:0c:e1:ba:0a:fd:1f:54:21:b6:98:f9:13:a7:
9c:8c:95:d7:e4:7c:5e:6b:ee:b4:03:93:f8:d2:f2:
08:78:6c:3f:c1:c7:61:2f:04:73:10:1c:99:3c:12:
ff:ab:3e:6c:c3:3a:7c:2b:a1:83:c5:b7:6c:c2:ab:
fa:34:66:1d:f3:ee:d8:2f:fa:90:ec:19:b3:7b:cc:
fb:06:2a:43:4e:62:b2:5e:52:1c:09:f2:12:75:f1:
5e:53:5d:c9:48:78:5c:7c:80:c0:38:c3:70:84:f3:
0e:92:c2:c9:dc:7f:d2:67:0b:fc:6e:ee:87:ae:9f:
eb:4b:88:46:4d:62:1c:a1:84:96:18:44:c7:8f:55:
f4:83:e3:72:78:a1:7e:31:2b:c5:13:e4:bb:02:6c:
b9:20:28:2b:d5:18:0c:5c:c2:14:37:69:46:b1:47:
9b:9e:6e:c6:b8:5f:6a:be:2d:8d:9e:83:5f:cb:90:
39:ab:24:ac:40:2c:d8:1d:47:2a:ec:8e:7d:b4:d5:
f4:6d:a5:3e:ee:f3:0e:09:56:33:a5:e9:06:34:0e:
bd:38:7a:06:72:e7:e3:f8:45:85:40:6b:b4:52:f7:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:22:CA:86:9F:D5:C9:3B:74:D3:D6:D7:51:AA:77:3D:A7:9C:16:60
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jCLKhp_VyTt009bXUap3PaecFmA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c2:7e:5e:ae:90:6c:95:29:d1:24:e9:d5:bc:97:ff:59:db:9b:
e8:ea:03:82:f8:3a:61:07:7d:05:0c:9e:a8:b5:2c:ef:71:e2:
9b:27:28:16:8d:7e:4a:a6:5d:0d:60:89:80:14:9a:21:9d:96:
4f:26:31:44:5b:09:06:33:88:0e:6e:d8:f5:47:0c:53:be:80:
8b:41:9f:a8:e2:2c:15:93:39:68:89:63:ae:2b:9a:57:c9:79:
89:13:3d:4a:24:2e:86:2f:bf:2b:2f:80:d4:53:98:81:21:82:
55:4c:5a:c8:22:58:46:9a:72:2d:f8:7f:bb:71:cf:f0:08:66:
7a:d4:e7:e3:d4:b6:cb:6b:6e:f4:aa:25:f0:00:da:a1:f6:65:
5e:88:10:b3:bd:7f:a9:6f:c4:d5:43:b0:1f:b6:39:41:81:6c:
da:e8:f0:8b:2a:0f:cf:be:f2:db:4a:43:f6:30:54:3a:4d:22:
3f:77:13:08:59:36:6d:58:e8:dc:61:64:b8:ed:c8:d7:5f:9d:
83:1c:cb:f6:34:58:d0:c2:9d:14:cd:c9:1b:3b:0c:0b:69:26:
01:76:9c:4c:87:95:38:23:83:50:6b:d7:c9:51:21:e8:42:5b:
4c:3c:90:ef:ac:ae:0d:db:1e:fe:4f:de:5f:d7:53:7d:2b:d4:
53:5e:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:50:03 2025 by rpki-client