Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/jSpiXcnui9Coej8NPqaFsW0ErT8.roa
File: jSpiXcnui9Coej8NPqaFsW0ErT8.roa (raw, json)
Hash identifier: cbElGW46ayHSoFfxAIZXy6EHdlye8XHE7K2/3qfHRgE=
Subject key identifier: 8D:2A:62:5D:C9:EE:8B:D0:A8:7A:3F:0D:3E:A6:85:B1:6D:04:AD:3F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BE4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jSpiXcnui9Coej8NPqaFsW0ErT8.roa
Signing time: Sat 04 May 2024 08:24:22 +0000
ROA not before: Sat 04 May 2024 08:24:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7140 (0x1be4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 4 08:24:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8D2A625DC9EE8BD0A87A3F0D3EA685B16D04AD3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:9d:48:6d:59:ac:03:31:88:f4:06:1f:06:
0c:7e:27:2a:b6:29:3b:f3:06:35:c4:dc:92:9e:4a:
f0:7d:2f:8a:52:c1:53:d0:0e:7a:63:87:9b:d6:44:
2f:f4:56:45:33:fa:ed:13:33:dc:50:00:09:27:0a:
26:9d:6e:f4:74:aa:e8:48:ac:92:77:ca:fb:af:74:
d0:d4:6f:69:69:1f:19:08:c4:7c:e0:73:29:5c:0b:
7a:d8:93:be:7c:3e:72:23:ba:2d:17:1f:83:0b:c9:
d9:4a:e5:1c:cc:f9:29:b0:04:f6:e6:ff:9a:42:51:
db:e3:5e:d7:66:90:df:5e:f5:f7:21:f7:1f:07:a8:
b6:a6:3d:8b:48:ef:70:13:44:dc:2f:48:c8:e4:b0:
25:9c:60:c0:af:45:50:68:3e:df:7f:6a:f2:7c:0d:
08:1c:45:e9:4b:e2:f6:30:37:67:d7:8d:5e:f8:e1:
48:f4:22:94:26:20:1c:1b:39:97:88:32:e7:61:72:
81:d8:92:dc:53:0f:55:ae:de:f7:df:d8:02:70:ae:
6d:43:df:d2:56:6c:c1:d7:d3:f8:b1:0a:41:06:19:
5d:1f:45:92:e9:a5:73:ce:8d:1e:36:9a:0d:4f:61:
36:20:11:8b:e6:13:27:2f:60:ef:dd:18:ea:69:4f:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2A:62:5D:C9:EE:8B:D0:A8:7A:3F:0D:3E:A6:85:B1:6D:04:AD:3F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jSpiXcnui9Coej8NPqaFsW0ErT8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:a7:d3:ba:f2:ff:62:84:13:f3:a6:67:40:b7:50:6d:b3:40:
1b:bb:dc:08:f4:20:74:7a:e9:cd:6e:e5:78:76:37:fd:ca:4e:
1f:ec:7c:6e:f1:40:b3:8d:05:6a:a9:7b:d4:ee:07:f3:96:46:
4d:77:9f:a7:b5:f6:35:4a:84:5c:45:ba:e3:59:a6:6e:9c:80:
0d:78:b8:42:b9:13:1b:4b:f8:55:9c:d6:d6:d6:e8:63:40:24:
91:22:13:a7:c7:2a:49:c3:84:c5:f7:aa:bf:eb:62:45:35:cc:
57:c2:ce:97:c9:a5:19:78:5a:52:2f:55:fe:57:8c:64:61:ad:
80:a1:97:48:15:9f:65:41:6e:85:88:48:78:ef:3f:49:a4:af:
73:bb:98:77:35:b9:2c:23:0f:5b:b1:16:ef:74:6f:cc:84:87:
1d:0e:ce:c2:db:5b:f1:0a:86:aa:f0:ab:03:20:56:06:f8:65:
c1:bc:3f:c7:e6:43:e1:30:7e:79:49:b1:82:24:f8:c4:4b:b3:
30:54:04:59:72:d2:9a:d7:3d:53:97:61:d2:61:8e:0d:7e:f1:
e8:9e:62:1a:d0:5a:3d:aa:cd:05:87:8f:dd:fa:30:0f:d2:c3:
b2:1d:01:09:a0:21:37:ac:6a:d4:d1:07:78:22:c5:7f:ee:e7:
51:95:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:46:18 2025 by rpki-client