Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/k2wDmsPdL-dZsvO6e5LBTMhQfno.roa
File: k2wDmsPdL-dZsvO6e5LBTMhQfno.roa (raw, json)
Hash identifier: eWhi89RJHwUmKfxmAHyRhrkNFkEttisrhxWu8WKQ/y8=
Subject key identifier: 93:6C:03:9A:C3:DD:2F:E7:59:B2:F3:BA:7B:92:C1:4C:C8:50:7E:7A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D22
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/k2wDmsPdL-dZsvO6e5LBTMhQfno.roa
Signing time: Tue 07 May 2024 15:54:37 +0000
ROA not before: Tue 07 May 2024 15:54:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7458 (0x1d22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 15:54:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=936C039AC3DD2FE759B2F3BA7B92C14CC8507E7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:73:1d:c6:bf:83:84:a0:cf:81:68:7c:fe:ca:
bf:9e:33:fc:4b:b5:9a:54:e5:43:d3:03:cd:c9:d7:
ef:4b:9f:a1:14:8e:f1:a9:9c:f4:70:7f:2f:ec:5c:
9f:74:56:29:3a:89:3d:fc:52:b0:2f:70:91:73:62:
7a:93:ae:aa:23:23:0d:dc:82:76:86:8a:5d:39:4a:
aa:c1:39:58:59:4a:f5:42:84:d5:cb:dd:29:e7:a0:
73:ea:c0:fe:da:28:c1:0e:99:75:66:2a:93:8e:74:
80:72:83:1a:af:e0:51:1a:99:83:8c:0d:c6:3f:47:
04:f9:f6:1e:2a:c0:22:37:55:50:63:9b:78:c7:e2:
12:8c:de:ee:43:88:01:3e:31:ab:67:5a:85:61:d6:
64:37:a5:38:69:f8:88:03:2a:72:bc:73:f2:d1:7c:
19:89:fa:c2:a2:48:6e:8d:a7:a2:c8:9d:c8:02:a6:
f7:a6:e4:4a:7b:b5:58:88:62:b1:51:ce:56:19:e3:
3d:14:c1:98:9f:e0:5c:12:3c:2a:9d:0b:1a:24:76:
ca:05:bc:60:a4:56:14:76:21:ff:e1:62:e7:73:49:
7a:2d:c4:ea:d2:04:01:9b:ef:98:cf:55:ea:f4:b5:
ae:d8:e2:2a:65:1a:3e:23:8c:69:96:d0:7e:39:51:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6C:03:9A:C3:DD:2F:E7:59:B2:F3:BA:7B:92:C1:4C:C8:50:7E:7A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/k2wDmsPdL-dZsvO6e5LBTMhQfno.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:b5:a1:0d:22:cd:65:82:82:1c:62:01:30:df:5d:17:e8:6d:
05:9a:8c:cb:4a:49:b9:e6:fe:2e:df:5f:ff:be:10:93:30:e7:
a9:3e:80:d1:20:42:d4:67:b5:6b:b2:b1:6d:d2:83:b6:cf:bf:
60:39:24:9b:37:db:93:a8:9b:4c:ba:30:20:9f:b6:96:22:f7:
ab:b7:c1:ed:48:60:20:13:9d:4a:71:94:cf:48:07:8c:f9:59:
34:3c:1f:fe:f1:a1:c8:00:36:c2:90:02:2a:5c:e1:94:34:23:
e0:ae:92:d4:b0:1f:bc:ae:4e:49:07:f7:9a:d1:c4:a5:77:ce:
18:e5:2d:77:dd:94:3d:69:e8:15:df:a2:f4:20:26:a9:70:88:
91:41:51:74:eb:d2:f8:66:e8:62:ac:39:0b:d1:15:b8:de:e9:
85:3d:c6:b7:d2:e0:35:7d:e3:7c:7d:86:19:b2:d1:42:88:c1:
b3:0d:ee:d3:c7:ac:b5:15:a2:84:a4:28:75:e0:b7:a5:ed:42:
dd:c8:31:f4:de:e1:c8:b6:c7:49:a1:83:85:24:de:64:69:28:
28:0d:24:69:5e:95:ba:5d:92:83:19:c7:75:10:0c:58:fd:6d:
fa:04:d0:b7:b3:6a:aa:78:52:3a:9c:7e:41:48:51:1c:77:e7:
8a:01:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:50:59 2025 by rpki-client