Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/o0BNTOOjPS3W7dcHbeTmXeRv72s.roa
File: o0BNTOOjPS3W7dcHbeTmXeRv72s.roa (raw, json)
Hash identifier: i6xBzBV1WqCI+rgjt+fYnNZVP+r/klcH9Sxgd+uZqfE=
Subject key identifier: A3:40:4D:4C:E3:A3:3D:2D:D6:ED:D7:07:6D:E4:E6:5D:E4:6F:EF:6B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1316
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/o0BNTOOjPS3W7dcHbeTmXeRv72s.roa
Signing time: Wed 10 Apr 2024 20:53:10 +0000
ROA not before: Wed 10 Apr 2024 20:53:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4886 (0x1316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 20:53:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A3404D4CE3A33D2DD6EDD7076DE4E65DE46FEF6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:b6:ec:75:11:78:24:d8:de:aa:af:42:02:
28:87:48:ea:47:34:82:74:98:40:48:36:00:c9:56:
14:c6:44:1f:b6:49:bf:6d:47:20:f0:b5:84:78:45:
a3:dc:80:bc:94:be:3e:06:16:b6:43:99:03:88:03:
ee:10:41:3a:c6:e8:e4:54:0b:c3:fa:44:c9:44:c1:
4d:9d:81:9e:e7:89:52:09:3b:b9:c4:2a:90:8b:2f:
a2:fe:a6:75:b7:c8:f9:fa:6e:b1:02:fd:d7:4e:13:
27:30:67:c7:bb:43:de:68:e1:b2:7f:2b:01:dd:4f:
6e:5f:c6:6c:a7:0e:ab:09:ac:03:76:83:82:98:b6:
30:7c:43:36:2f:aa:ec:b7:04:0a:9f:ec:3a:1b:14:
8a:a2:67:05:f6:27:b2:35:f5:9a:3d:eb:39:1a:9f:
f4:4d:d9:55:a5:9b:1b:3f:09:a8:b1:a2:31:17:b8:
7f:8c:f7:24:3a:33:43:22:20:33:38:62:18:8c:e3:
a8:04:67:cb:9f:87:66:51:4b:68:b3:a5:c3:e7:98:
52:92:c0:d4:df:48:c8:45:05:18:c5:05:fa:61:77:
38:65:b9:6b:a5:45:d0:d7:f4:d1:ea:8d:8c:68:4d:
dc:a2:1e:e7:e1:69:63:8f:be:d2:fd:73:1a:4c:93:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:40:4D:4C:E3:A3:3D:2D:D6:ED:D7:07:6D:E4:E6:5D:E4:6F:EF:6B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/o0BNTOOjPS3W7dcHbeTmXeRv72s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:4b:63:91:5d:95:6b:17:06:b4:04:18:50:2b:e3:fb:a7:39:
42:99:fb:6f:26:71:0d:19:d3:93:d6:b4:57:10:6e:7e:12:d8:
9b:36:07:52:64:f6:d2:6f:24:6c:66:20:03:60:bf:7e:63:91:
fb:68:f1:71:66:3e:4b:3b:f6:36:0e:37:40:0c:bc:ff:b5:30:
c4:f7:da:cd:6f:65:a6:7e:f5:a5:17:91:3d:46:77:9d:b6:4b:
fa:a7:9c:48:af:e0:54:57:67:33:58:cf:3a:35:c5:ee:ca:d8:
b5:03:94:fb:4d:2a:b9:da:3d:8e:1e:dd:12:23:6c:fd:25:08:
ad:f6:96:f0:e2:d6:3a:da:39:2c:2e:01:c0:0e:dd:81:9e:20:
6a:b5:73:af:55:e6:89:bf:8f:09:49:db:e4:de:da:fa:9b:41:
c1:41:96:ed:36:91:3a:6b:6c:a0:3d:68:1e:57:32:cc:48:8e:
6a:10:9b:ad:99:a0:aa:fc:ad:e5:01:6b:9d:6c:df:af:47:e6:
46:53:4b:bd:05:52:c2:cb:3c:f0:6b:8f:e6:f8:68:1a:26:75:
14:0e:49:04:f7:e0:74:23:e3:50:8c:ee:a4:91:f9:26:0c:ac:
87:f2:a3:3a:6c:7e:d8:16:71:31:d3:9b:01:19:dc:5f:db:27:
4b:ec:b3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:53:40 2025 by rpki-client