Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/khGBqAvBifz0l2J4K7hSOn6rQ0Y.roa
File: khGBqAvBifz0l2J4K7hSOn6rQ0Y.roa (raw, json)
Hash identifier: P1n0QCjmf2DAEsPc59CvJY0lcI0RiiQCjz6XBo55COk=
Subject key identifier: 92:11:81:A8:0B:C1:89:FC:F4:97:62:78:2B:B8:52:3A:7E:AB:43:46
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BF0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/khGBqAvBifz0l2J4K7hSOn6rQ0Y.roa
Signing time: Sat 04 May 2024 11:24:13 +0000
ROA not before: Sat 04 May 2024 11:24:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7152 (0x1bf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 4 11:24:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=921181A80BC189FCF49762782BB8523A7EAB4346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:cb:02:18:17:32:c7:33:7c:c4:2c:da:6e:
c6:87:1b:c7:f0:fc:3e:b9:2b:6f:16:69:fb:e5:f7:
bd:1c:72:9a:3e:a6:20:d0:35:25:46:03:77:38:01:
42:39:78:76:36:0e:c0:68:64:7e:e7:d0:60:fd:d6:
39:73:c1:3b:1d:4e:5e:8d:e6:ca:cc:56:43:ed:80:
9a:2d:7d:08:70:2d:6c:8a:3e:3d:48:a7:74:92:17:
65:ba:c2:90:2c:50:f2:61:9b:22:2d:3c:03:49:af:
c1:9a:c5:38:be:7c:45:0a:2e:36:68:db:74:81:6a:
3b:af:ab:37:a3:8f:df:57:b3:64:29:28:df:20:bd:
79:65:bd:63:63:49:a6:a7:27:9f:9e:8f:da:82:3a:
92:34:93:2d:d7:0f:7b:df:3a:71:6b:d1:bf:a3:8a:
67:62:ed:09:e0:4a:40:a1:ee:e3:f7:96:cf:3c:fc:
bb:80:c1:64:e1:fa:d8:03:ce:36:6b:eb:78:44:85:
27:6e:d8:47:7a:9d:9b:a1:32:c3:30:9b:d9:90:cf:
08:a5:5c:31:d9:9b:8d:d1:5d:0e:df:58:e8:eb:3a:
f1:a6:ff:a0:6f:06:2c:ac:89:c5:7e:ef:b9:fd:e9:
b1:3b:c7:6b:18:83:62:85:aa:a1:87:b3:3b:db:de:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:11:81:A8:0B:C1:89:FC:F4:97:62:78:2B:B8:52:3A:7E:AB:43:46
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/khGBqAvBifz0l2J4K7hSOn6rQ0Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:66:e7:02:e2:75:cf:9e:da:4a:d0:ff:a5:f9:22:39:30:bb:
6c:2a:07:4e:f1:6f:75:2f:e0:41:a5:24:00:0c:23:98:c7:4b:
42:dd:bb:e3:44:75:c8:ed:d8:8b:d1:d4:99:42:53:fe:79:1c:
71:1e:52:69:55:01:63:15:e0:f1:9e:e6:2d:66:7e:39:30:28:
26:de:b7:14:aa:b7:b5:6f:34:b0:88:83:0d:f8:ed:ba:e7:90:
a5:37:9f:36:7e:61:33:ad:58:9a:23:9a:18:b4:a3:ec:89:4f:
7d:8d:53:ba:0d:d5:14:b0:a0:80:50:a4:f4:bb:69:c8:bd:13:
e1:6e:9a:87:7d:88:73:b7:9c:ef:6a:0c:a5:ab:4d:2a:31:f6:
9c:ff:8b:0a:31:52:a8:53:54:54:12:b4:af:19:5d:ed:2d:a7:
51:c7:74:8f:23:d0:24:f6:c9:bc:a2:e9:cd:c6:80:85:76:8e:
62:63:59:59:8c:12:7e:66:ec:e7:ff:ae:e5:c4:28:ea:17:bb:
84:01:53:8d:0f:cf:2e:50:4a:fb:c5:29:c5:6e:23:be:08:ec:
98:2c:c6:23:a3:55:5b:e1:8b:ec:b7:16:ea:3c:67:76:43:f3:
24:5d:8c:c9:c4:9e:14:66:1f:b5:eb:b7:7f:56:5d:fb:de:8f:
21:ad:fa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 23:10:40 2025 by rpki-client