Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/oPstbaZlaxIHX2vpEP7QCGM23tA.roa
File: oPstbaZlaxIHX2vpEP7QCGM23tA.roa (raw, json)
Hash identifier: DHmYMPuUCHts9BwfPqW43MFnQrhGq2PIz0ArtJkE42I=
Subject key identifier: A0:FB:2D:6D:A6:65:6B:12:07:5F:6B:E9:10:FE:D0:08:63:36:DE:D0
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C86
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/oPstbaZlaxIHX2vpEP7QCGM23tA.roa
Signing time: Mon 06 May 2024 00:54:33 +0000
ROA not before: Mon 06 May 2024 00:54:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7302 (0x1c86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 00:54:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A0FB2D6DA6656B12075F6BE910FED0086336DED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:a9:73:a3:db:98:2a:1d:41:21:1b:87:29:
d3:f3:59:71:67:5c:8e:f2:c9:34:24:4c:70:ea:df:
56:83:09:88:02:73:99:4b:f7:7a:2c:39:15:2c:6b:
fe:b4:ae:4e:c2:f6:8c:ae:c5:3c:2a:b4:ca:16:96:
5b:bb:7a:80:63:07:4c:d6:27:fc:60:43:db:ce:99:
0a:24:c4:84:00:55:6a:b3:46:03:94:db:99:61:63:
66:96:26:20:1a:8f:ca:9f:a7:98:4e:3b:9c:b8:4b:
98:e0:69:3e:cc:49:05:5c:c1:bd:f2:2e:77:de:ab:
9a:d3:07:51:ad:f9:ca:a4:c4:fd:9b:c4:31:98:75:
e6:cc:9c:90:0a:e4:be:9f:3b:3e:47:ce:9a:4b:b5:
68:8b:9d:d6:e0:90:eb:91:ae:fd:78:94:3c:d2:a7:
76:b4:bf:bf:5e:fa:27:a3:18:28:38:cc:fa:d6:3f:
b3:88:6f:f6:87:9f:7f:82:8c:93:9d:f6:f9:ec:bf:
67:df:e5:fc:3c:42:17:ac:a5:ec:e2:7b:63:1c:8d:
f6:d2:52:09:e5:02:51:67:9b:9a:eb:69:5b:8c:e5:
f5:83:cd:0b:18:59:d7:e9:9f:72:a2:b7:51:1d:24:
ca:fe:e8:7d:ba:60:1b:4c:00:fa:27:bd:85:04:e4:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FB:2D:6D:A6:65:6B:12:07:5F:6B:E9:10:FE:D0:08:63:36:DE:D0
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/oPstbaZlaxIHX2vpEP7QCGM23tA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:f0:90:9b:b1:be:9f:75:5e:5c:08:04:93:4e:12:c1:4d:60:
55:f6:ec:e6:8b:e7:ed:c5:c6:1e:84:95:8a:ba:d3:7a:42:45:
79:e9:dd:ce:58:bd:4f:78:a5:f4:81:63:70:c7:61:15:8a:2e:
54:51:97:c7:48:65:83:1b:52:2f:8f:41:57:57:fa:ac:f7:8c:
56:5f:e5:32:e8:74:fa:7d:12:f3:ce:17:f5:9d:a4:45:7e:38:
57:d2:1d:c6:0b:31:6a:8d:65:5a:f8:25:a7:07:80:98:f1:e6:
a6:ec:1c:ba:a1:86:21:39:57:01:44:42:de:4e:9c:9a:c2:f0:
6a:b6:66:2a:e8:5a:fb:7f:a6:6d:d9:be:d7:d9:92:74:70:ae:
f9:fe:dd:1b:88:ce:84:89:86:a1:92:cc:11:8e:e1:10:78:3e:
2e:4a:2b:f8:41:72:e5:51:0d:6c:7e:de:81:61:9a:a2:e9:bd:
05:d5:36:36:db:63:35:dd:da:5c:b5:8b:a9:a8:52:a9:67:58:
5a:9c:0b:7c:c9:e4:81:7f:1b:5a:59:e4:c3:ef:65:2f:3e:57:
fc:d5:c8:fb:e4:3c:ac:0a:11:6c:55:ea:a9:ab:93:9f:0f:51:
f0:63:b9:85:94:99:40:65:f7:be:d4:67:65:5f:3a:4c:c8:22:
4b:d1:de:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:16:14 2025 by rpki-client