Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/rG8jZhHmGgchqQkvyuHulaYFLGU.roa
File: rG8jZhHmGgchqQkvyuHulaYFLGU.roa (raw, json)
Hash identifier: azBeYDtjXLtQNZMnyoz6TbzqDgqsilZoUnaAjnl6Fm8=
Subject key identifier: AC:6F:23:66:11:E6:1A:07:21:A9:09:2F:CA:E1:EE:95:A6:05:2C:65
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 18B6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/rG8jZhHmGgchqQkvyuHulaYFLGU.roa
Signing time: Thu 25 Apr 2024 20:53:45 +0000
ROA not before: Thu 25 Apr 2024 20:53:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6326 (0x18b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 20:53:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AC6F236611E61A0721A9092FCAE1EE95A6052C65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:80:b6:d1:77:db:77:d9:f7:27:1b:c0:c4:
61:c1:e1:86:96:0a:5e:e3:68:1d:f7:47:85:03:a0:
de:25:b9:ed:f8:03:f0:69:b2:2e:6e:db:05:34:5a:
d8:85:df:03:8d:65:0d:0c:d5:70:29:1a:29:3c:cd:
3f:14:5a:39:33:9b:b8:d7:90:e0:db:d0:7f:43:6a:
78:81:29:02:cc:1d:69:0e:a6:68:3c:1e:d6:e9:85:
e3:a9:cc:8d:91:1c:34:80:35:9f:bc:7f:4c:42:71:
32:d2:20:cc:db:1e:9f:e0:5b:6b:ba:82:ee:fc:c6:
fb:32:55:10:33:c5:f2:99:8e:29:e5:62:19:4b:05:
1b:1a:71:b5:0e:9a:57:0f:de:d5:f1:5d:1b:71:d7:
e6:6e:66:d9:44:92:1f:37:f2:d6:c5:bb:7e:c7:c9:
6d:e2:cf:71:68:9b:27:cb:a5:f7:c0:99:dc:61:34:
be:56:8c:52:a5:00:e2:7e:bd:b4:2b:36:75:fa:1b:
a9:72:97:25:d6:b7:66:fe:86:00:9c:e5:d2:d2:d7:
8a:e5:90:90:2a:d1:bc:cc:1b:1b:ee:3c:f8:41:c1:
67:33:90:16:ab:94:b8:c5:10:24:0c:75:e9:88:99:
3d:74:78:d2:f0:6a:c3:28:2d:e0:b9:7f:57:86:f4:
af:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6F:23:66:11:E6:1A:07:21:A9:09:2F:CA:E1:EE:95:A6:05:2C:65
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/rG8jZhHmGgchqQkvyuHulaYFLGU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:dc:1e:1c:f5:dc:14:53:a3:bd:69:0e:01:f9:2e:fb:a4:89:
4f:c4:bb:f4:06:d7:0f:56:a0:fd:6b:d7:af:bc:8f:d6:b4:04:
8b:bf:55:90:8b:04:b1:7b:fa:43:1f:f8:a9:f4:cb:41:6e:f2:
f4:94:03:d0:54:b5:ac:34:0d:e9:86:af:57:0b:b3:2c:5e:c2:
4f:20:ac:98:7e:08:57:1a:80:99:a7:fd:a5:a5:88:30:2c:6c:
6c:d0:85:29:ad:3c:a7:85:d1:07:bf:4b:9e:18:71:9f:4b:37:
78:be:d4:f7:b9:74:25:6d:31:be:fd:83:6a:82:bd:67:df:b8:
9b:32:c1:69:2b:44:4e:22:07:1f:69:82:42:23:c9:d8:46:72:
e9:87:ff:75:a8:bb:13:f2:c5:15:5d:33:87:5b:e8:b4:52:34:
90:a9:5b:5f:c5:ba:e1:7d:1c:6a:54:49:03:ca:17:2a:f5:48:
cc:86:4d:99:20:88:27:5b:39:9c:5e:7a:98:f9:a0:16:4d:c6:
90:ea:45:d1:c7:69:47:19:79:a0:0e:54:b1:81:f1:7b:92:39:
81:b7:ba:54:a7:83:c8:c0:b3:2e:a6:2e:24:94:42:ce:70:e4:
5b:50:12:b3:e2:4a:51:75:3f:0b:e3:f5:f8:ed:35:27:a6:d1:
01:91:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:43:22 2025 by rpki-client