Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/l3E7vtq9Om2wlfGpEVsMYlSvRM8.roa
File: l3E7vtq9Om2wlfGpEVsMYlSvRM8.roa (raw, json)
Hash identifier: yqR07uEE4vUsXQh6+3hsplR+tLFZzEGGQDKTUwvmTB4=
Subject key identifier: 97:71:3B:BE:DA:BD:3A:6D:B0:95:F1:A9:11:5B:0C:62:54:AF:44:CF
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 12CA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/l3E7vtq9Om2wlfGpEVsMYlSvRM8.roa
Signing time: Wed 10 Apr 2024 01:53:07 +0000
ROA not before: Wed 10 Apr 2024 01:53:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4810 (0x12ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 01:53:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=97713BBEDABD3A6DB095F1A9115B0C6254AF44CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:86:4e:fb:9f:d1:81:6b:6f:99:b8:3d:12:
10:f8:3f:27:90:07:a6:32:6d:2b:e4:52:84:5f:5a:
2e:25:e6:e2:57:be:77:28:19:bd:f9:81:35:2e:43:
c3:14:90:80:89:80:9b:73:a1:a8:81:c1:80:13:10:
a0:0d:55:7a:00:b9:1d:42:97:8b:89:3a:9e:c4:63:
5a:60:39:0e:c2:3e:01:a6:34:18:57:57:ad:3a:89:
04:37:22:84:9d:d7:ea:0e:89:aa:13:d2:1d:2f:27:
58:1b:4b:7f:47:06:fb:31:75:d6:72:e6:6d:f8:67:
f5:14:94:32:7c:bf:fc:ae:a2:47:3c:14:88:f2:8d:
18:18:f7:d2:7e:12:bb:4d:5e:ef:d4:72:1a:da:b2:
51:51:e4:8e:58:23:53:c1:21:86:14:9c:e7:b0:91:
27:be:6f:c4:11:a8:03:d4:90:3a:8d:3f:d8:ae:24:
8b:5c:7c:37:c8:66:f4:88:d6:bb:c0:82:34:c6:8e:
fe:92:c7:e7:9e:f1:36:15:2d:23:92:cd:56:a6:1c:
ce:0d:3c:5f:3b:a3:ca:63:4e:ce:b0:53:69:e2:67:
72:9f:55:1f:5d:c1:30:3c:e1:06:5b:0a:2e:d2:ad:
2a:42:e2:2c:2f:57:56:44:25:82:61:91:60:49:01:
b5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:71:3B:BE:DA:BD:3A:6D:B0:95:F1:A9:11:5B:0C:62:54:AF:44:CF
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/l3E7vtq9Om2wlfGpEVsMYlSvRM8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:52:47:1f:c8:17:79:9c:4d:78:e9:e3:01:eb:f8:06:51:75:
c0:a6:2e:b9:a4:6e:d4:49:7b:4b:99:cb:10:9b:72:ef:81:c6:
ba:86:61:af:b3:51:a3:89:a4:77:79:0d:f0:ff:18:1b:fe:99:
d1:63:48:63:50:86:9e:b1:f4:c4:5c:39:c2:b1:1a:52:07:75:
0b:97:06:3e:e5:10:2f:b3:4b:a1:73:9d:53:a2:6f:05:56:79:
af:6e:8c:44:78:ff:47:79:9e:36:12:ab:63:2e:25:28:de:fe:
d7:ed:63:f5:d2:2e:f7:b8:f9:7f:59:81:7e:6d:26:f7:d1:d5:
c4:2c:b8:db:8a:58:50:76:f9:25:83:0a:f2:47:db:b6:90:53:
6c:bc:2c:ec:ba:1a:b2:03:d8:b2:fc:e5:72:c1:a5:46:f9:0f:
3b:47:c8:0a:76:63:fa:75:e6:74:dc:04:e0:a4:74:a1:cd:ef:
e9:6c:9a:5c:1e:20:ab:73:c9:30:3e:6d:cb:85:f5:d2:04:e9:
7d:dc:55:de:04:54:5e:a7:18:83:06:ab:47:ef:be:64:58:e3:
ce:d3:9c:1d:c6:95:8b:44:2b:84:87:5a:57:82:e6:4f:b2:0f:
25:00:11:fd:2e:4d:41:ba:9f:fa:d6:d6:9d:51:93:04:ae:b5:
aa:0d:33:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:56:02 2025 by rpki-client