Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/lj6I4f3jwY6lJf_uzwVAOkGqmZo.roa
File: lj6I4f3jwY6lJf_uzwVAOkGqmZo.roa (raw, json)
Hash identifier: uoI+0wzDgpDNxF29M1lbOuTxwEFxajrM/n0SDFUV9x8=
Subject key identifier: 96:3E:88:E1:FD:E3:C1:8E:A5:25:FF:EE:CF:05:40:3A:41:AA:99:9A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 195C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/lj6I4f3jwY6lJf_uzwVAOkGqmZo.roa
Signing time: Sat 27 Apr 2024 14:23:59 +0000
ROA not before: Sat 27 Apr 2024 14:23:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6492 (0x195c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 27 14:23:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=963E88E1FDE3C18EA525FFEECF05403A41AA999A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:e5:1c:2f:a7:c5:37:f8:40:01:99:10:a4:
e9:16:d8:74:2e:8d:bb:a3:96:fe:6d:c1:de:32:0b:
f8:77:c3:76:e7:72:ea:90:f4:e6:ab:5e:f6:f9:76:
04:a3:91:ed:98:36:b0:1a:3b:33:67:61:f5:b8:f3:
3d:f3:77:a0:c5:f3:09:16:19:15:f0:1d:2b:07:81:
04:5b:46:f1:85:0a:dc:8f:dd:01:67:2b:59:e1:4f:
f1:40:4a:fc:f9:10:fd:18:cb:7b:e7:86:26:5d:b8:
7c:eb:aa:b8:27:b6:0e:e3:93:57:f8:bf:52:4f:36:
b1:0f:a3:7c:a5:4d:2c:89:f9:07:3f:b4:17:73:3b:
36:d4:69:3a:07:48:e8:ef:86:8a:8b:7a:05:02:df:
2b:35:be:43:4a:2b:af:6a:ad:38:e0:38:b4:3e:fd:
18:14:ae:68:25:21:3f:87:06:87:50:7f:b8:ec:e9:
43:c2:f4:64:bc:50:06:57:18:8c:d4:32:1e:7a:2d:
8e:b8:3d:8b:9f:2f:98:6c:f3:5a:24:83:33:45:1c:
cf:58:56:42:60:a4:86:43:7a:2e:c6:08:e1:17:6d:
d1:82:2f:6b:ab:f3:c1:e4:4f:1b:dc:5e:af:c3:58:
88:5e:2b:39:98:10:1f:63:a6:72:0b:04:9e:d1:47:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3E:88:E1:FD:E3:C1:8E:A5:25:FF:EE:CF:05:40:3A:41:AA:99:9A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/lj6I4f3jwY6lJf_uzwVAOkGqmZo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:cb:27:e3:7b:55:bd:43:40:f9:53:4d:3b:46:91:97:42:1a:
d8:67:9b:78:31:94:d1:1c:b4:ed:e4:b5:41:3d:7c:f0:4b:25:
53:21:82:1b:f7:a5:1a:4d:66:f2:23:41:9b:3f:b6:87:33:a6:
c8:d2:65:50:d5:5d:9d:05:fc:97:19:36:08:25:76:6a:b4:59:
4e:c6:52:8f:c1:23:a0:ce:a0:c2:d7:c2:6c:7f:6f:ad:ab:ea:
d1:ab:04:8c:19:38:fb:84:3f:a3:e5:0e:6d:88:2c:f3:3d:67:
14:6b:8c:6c:dc:3d:16:47:a8:8a:db:10:dd:3e:be:4f:6f:76:
26:c9:9b:13:9e:65:d9:9c:ed:41:88:f6:51:7e:69:40:3f:20:
04:36:da:3a:b9:08:55:cd:2c:9f:d9:40:35:01:da:da:c3:90:
f2:b0:e9:ad:aa:b1:f6:4e:22:90:aa:53:bb:6d:c3:56:a9:5a:
8a:a0:c9:68:bf:46:0a:2e:80:34:06:2d:56:e5:4c:5a:46:47:
dc:53:02:9a:dc:e7:61:8f:92:87:e7:b9:21:a5:8b:f0:7a:18:
7c:9d:05:cf:aa:76:46:2b:cc:25:7a:9f:f4:31:1a:74:83:a6:
33:57:74:76:38:ea:76:14:d2:ff:77:04:ae:3e:53:4d:2b:0f:
a1:0a:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:54:42 2025 by rpki-client