Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/kdAEPmKTfeAmgxZ52UivG_i3OMA.roa
File: kdAEPmKTfeAmgxZ52UivG_i3OMA.roa (raw, json)
Hash identifier: DG0SLUCvcdP1LN9ofPsMTIw9oArDN1IlwgCYqvsXmHM=
Subject key identifier: 91:D0:04:3E:62:93:7D:E0:26:83:16:79:D9:48:AF:1B:F8:B7:38:C0
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 107C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kdAEPmKTfeAmgxZ52UivG_i3OMA.roa
Signing time: Wed 03 Apr 2024 22:22:45 +0000
ROA not before: Wed 03 Apr 2024 22:22:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4220 (0x107c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 22:22:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=91D0043E62937DE026831679D948AF1BF8B738C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:9e:0f:19:f5:d1:76:d7:f3:09:ab:26:4d:
62:2a:3a:dd:1a:e4:a1:b7:f4:28:b8:23:d0:ef:28:
2e:a2:46:37:36:48:da:4b:85:a4:a9:bc:12:15:f1:
39:32:07:fb:b6:f7:a6:60:1c:98:2b:ec:7f:40:3b:
eb:e2:cb:0f:37:1c:94:a0:60:47:cd:cd:61:5d:90:
d3:d4:53:f4:9d:6d:cb:c8:91:a4:d1:36:c3:a2:92:
4c:05:8c:5a:74:fe:9c:5c:f2:b1:a5:18:4e:d3:a3:
5e:b7:55:68:b4:aa:a3:0c:96:0a:ae:36:64:e7:90:
b0:ad:ff:fb:7e:74:d5:d4:e7:08:40:2e:ab:35:c0:
02:2a:1f:c9:e7:9f:11:27:b8:35:49:d5:46:d8:74:
ec:67:fd:0b:41:a9:2c:69:00:ac:a9:a7:2b:4b:8c:
3d:9f:f0:25:00:f0:ea:67:eb:50:53:99:7a:ed:6e:
1a:fe:22:ed:54:fe:81:0f:8c:d0:bf:33:9d:5c:86:
35:9c:e4:14:8f:76:12:25:05:9d:e5:7e:4c:bf:03:
e6:c9:a6:24:8e:ab:99:22:0d:2e:35:52:6c:d1:e5:
27:4a:06:94:7e:08:c9:35:6d:fe:ff:1b:22:81:05:
8e:68:f7:87:9e:2a:9b:86:1d:0d:8a:d4:b0:be:0d:
bd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D0:04:3E:62:93:7D:E0:26:83:16:79:D9:48:AF:1B:F8:B7:38:C0
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kdAEPmKTfeAmgxZ52UivG_i3OMA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:b0:15:d4:d6:16:8a:17:8f:c1:db:46:22:eb:a8:e1:6b:33:
bb:09:de:c5:90:0a:72:18:30:0e:17:fe:d1:ec:04:08:75:fc:
35:0d:96:77:89:d1:bd:ea:af:35:bf:6f:40:32:30:04:5a:90:
d3:80:8f:2a:fd:bb:44:ff:65:10:8c:6e:03:e7:cd:58:f7:05:
31:5f:3c:17:cc:7d:ba:a3:d3:59:98:c7:2a:49:c7:a1:26:f9:
5b:4b:ab:6e:d9:70:20:68:60:8f:7a:24:85:4e:9e:a3:ef:af:
3a:0e:a2:1f:6f:c8:b1:8b:f0:27:d5:eb:24:d7:d0:c4:a2:97:
c2:7a:9d:4e:b0:e3:de:5e:13:da:d6:60:3a:44:ca:95:a3:a8:
98:8e:77:aa:f4:13:78:f9:65:f4:99:1d:5f:f0:a9:b3:e9:da:
24:97:aa:50:6a:d0:0d:cc:88:1a:50:6d:34:f1:ab:0f:0d:d5:
c3:03:28:a9:6f:78:56:75:16:5e:f7:24:94:ea:79:f4:e8:65:
f2:72:6c:d7:7c:54:aa:a8:13:9b:18:06:d3:8e:be:d6:b5:00:
96:80:a6:ef:d6:2d:db:91:e0:06:4e:3e:d9:7a:e5:85:c4:ab:
95:bd:ac:10:44:14:e6:b8:ec:0e:9f:85:08:88:8f:6d:07:a1:
4f:f1:61:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:44:32 2025 by rpki-client