Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/rdLczraY7ly1hztKsGeIbBahcz4.roa
File: rdLczraY7ly1hztKsGeIbBahcz4.roa (raw, json)
Hash identifier: MdtEZeKYBkpFM8Fp3QuDUD2PxfL0QxpgfgfZqFGHVBA=
Subject key identifier: AD:D2:DC:CE:B6:98:EE:5C:B5:87:3B:4A:B0:67:88:6C:16:A1:73:3E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 142A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/rdLczraY7ly1hztKsGeIbBahcz4.roa
Signing time: Sat 13 Apr 2024 17:53:18 +0000
ROA not before: Sat 13 Apr 2024 17:53:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5162 (0x142a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 17:53:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=ADD2DCCEB698EE5CB5873B4AB067886C16A1733E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:5b:e4:f6:8b:66:93:91:3e:bd:c3:91:d5:
61:af:c6:9c:e8:ff:30:f5:10:94:28:13:f3:6d:67:
f6:a9:8b:2f:07:f6:35:6a:79:6b:b3:47:2d:e5:f9:
2f:b4:97:d3:44:a8:d5:07:23:a9:a1:df:ae:fb:06:
ee:22:59:a1:fa:8d:39:e8:95:9e:ce:46:38:f6:ad:
b9:51:5e:ba:2e:be:b6:c2:54:8f:49:d2:9d:be:f8:
2c:f5:fb:34:a8:7b:7b:9e:04:9f:ae:d1:d3:27:f5:
50:42:9d:c8:71:9f:9d:6c:9f:06:20:96:d6:79:c2:
7c:cd:49:ce:d3:f9:53:76:c2:b3:13:f4:e1:ab:1e:
fe:fa:ff:47:11:c5:02:69:ed:00:6b:94:51:6f:ca:
b1:87:15:fa:f6:8d:9d:15:19:a5:f8:b3:40:36:c8:
e0:88:c4:e0:f5:4c:d5:18:02:9a:e0:d4:88:2e:61:
e9:58:ab:6d:96:fa:eb:de:5e:c7:9f:24:a8:e5:51:
22:21:f7:56:00:a4:9b:f5:3b:22:5b:98:4f:62:36:
5f:40:90:60:9f:88:8f:7f:cd:f9:80:d2:d1:19:26:
16:0e:cd:41:94:32:66:59:12:1b:ab:86:83:4f:6c:
b2:4e:0f:10:74:4f:6c:af:dd:1a:90:8e:b7:33:d1:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:DC:CE:B6:98:EE:5C:B5:87:3B:4A:B0:67:88:6C:16:A1:73:3E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/rdLczraY7ly1hztKsGeIbBahcz4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:1f:1b:4d:12:58:1c:91:b8:0d:fd:d2:c7:ea:6e:81:0b:07:
7b:36:d1:ac:dd:dc:2c:46:5f:ba:b7:8e:4c:d3:c3:ae:9e:2f:
8f:d0:cf:ab:fe:62:05:4c:ac:cb:03:a1:b0:2f:60:83:1a:31:
cf:84:04:d6:64:43:2e:7f:22:cb:3c:73:4b:50:5d:ee:94:f0:
0c:3d:4f:4e:51:c8:1a:61:80:8f:02:50:2c:a6:44:40:eb:bf:
3b:66:c1:24:0f:9b:1c:49:c1:2b:f3:63:64:d2:66:7b:2d:20:
1f:47:85:3a:27:ca:b2:41:8e:ed:e8:8d:16:6f:12:15:85:14:
9d:76:93:78:9a:b6:5f:ce:a4:3b:2e:df:85:e1:a0:9e:3d:33:
a1:0c:db:04:94:15:f0:54:c9:4c:8d:5a:80:69:94:c8:6c:74:
3f:bc:af:73:bc:b4:a4:2c:a8:c3:81:31:60:f0:20:42:09:4c:
8d:b5:c7:ee:38:f2:a9:c7:ea:9f:36:a2:8d:b1:9f:19:30:17:
47:8c:9b:61:f6:9d:55:b5:c3:f6:b1:cb:ef:c1:1c:a8:30:7c:
13:d1:31:dd:fb:84:0d:25:d1:5e:33:63:f7:b2:6f:42:66:0d:
ba:6d:cf:52:db:9e:c7:06:03:9d:61:bd:e5:94:9a:37:10:bd:
9e:fe:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 08:11:17 2025 by rpki-client