Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/s0vC4HW-DVri1rQPP9oo5gEWx_k.roa
File: s0vC4HW-DVri1rQPP9oo5gEWx_k.roa (raw, json)
Hash identifier: o19AlJSneiJB7yVixZb1ZcvIiwrRCmfPadoZrUrt5xY=
Subject key identifier: B3:4B:C2:E0:75:BE:0D:5A:E2:D6:B4:0F:3F:DA:28:E6:01:16:C7:F9
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 127E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/s0vC4HW-DVri1rQPP9oo5gEWx_k.roa
Signing time: Tue 09 Apr 2024 06:53:01 +0000
ROA not before: Tue 09 Apr 2024 06:53:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4734 (0x127e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 9 06:53:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B34BC2E075BE0D5AE2D6B40F3FDA28E60116C7F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:a8:68:9f:30:4b:07:e6:02:54:0a:b7:75:
ed:66:64:ce:9e:94:f6:97:06:35:27:b3:45:55:e0:
15:f5:1b:2f:61:13:fd:74:29:27:b8:9e:34:d9:cc:
4b:d2:ba:bf:d5:98:f6:b0:d1:d8:2a:d2:e7:db:1c:
13:8d:22:2c:a8:f1:44:a0:e0:bd:fb:fd:b5:7f:70:
60:01:e4:6d:5d:42:d9:7a:55:27:d7:37:38:32:b0:
0d:87:af:83:75:d7:8e:f3:a4:5f:4d:e5:fe:2d:14:
c5:c6:31:fb:29:48:3c:6b:36:6c:6d:b1:75:39:ca:
d8:e6:df:df:a3:56:47:de:6c:08:8c:ea:8c:c5:36:
28:83:df:f9:4a:07:25:72:d8:7d:1a:e7:e6:4b:4d:
9e:8c:fd:3b:be:6e:a6:6f:93:60:46:e7:cb:c1:df:
0e:da:ac:61:48:67:82:3a:4c:f5:bd:5f:43:cd:b8:
10:3a:84:03:72:8b:26:9d:ba:51:14:2b:34:5f:f8:
66:3b:cc:31:68:7f:77:09:2d:93:cc:7c:f5:a7:1c:
7c:9d:a3:44:29:79:f2:6c:3d:c1:de:15:53:55:b3:
12:9f:5f:ea:b6:c5:0f:79:22:22:73:8b:a0:c2:23:
d9:ba:d2:99:42:50:0d:e9:88:cd:6a:ac:8f:89:7f:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4B:C2:E0:75:BE:0D:5A:E2:D6:B4:0F:3F:DA:28:E6:01:16:C7:F9
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/s0vC4HW-DVri1rQPP9oo5gEWx_k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:fd:f1:e1:34:63:ca:94:a7:d9:e4:b3:98:da:e4:19:d4:09:
87:2f:a9:a9:6e:0c:02:a6:09:04:92:00:d3:07:75:ee:91:cd:
db:f3:9d:09:30:af:a2:26:7c:6c:15:42:7a:21:36:cb:fd:c0:
01:16:af:4d:d3:3d:fb:66:42:a1:d9:84:93:58:a1:1e:1d:7e:
e1:7f:f2:b1:19:e7:49:db:e1:36:f7:e7:cf:61:d0:92:bf:ca:
81:e3:2f:d2:53:5f:fb:b8:d8:4f:c7:05:3f:e2:45:b6:b3:13:
80:30:e4:73:aa:f3:03:19:d9:c5:13:7d:54:ba:05:25:ac:47:
b0:50:34:2b:c2:a9:6a:c9:79:c9:fb:31:4c:5d:30:a9:6e:ca:
59:f9:1d:b9:43:9e:24:0b:a4:a0:1a:d7:5f:1d:bf:1f:23:53:
7e:2e:2c:f9:9e:75:d7:36:cb:9d:14:5a:cd:57:ad:d2:91:e8:
bb:fa:88:51:a8:55:05:af:73:84:ef:6c:d2:f7:62:b7:0e:62:
ef:7d:b1:f8:57:a7:8b:8a:7d:a9:8f:00:b5:89:a2:5d:a2:cc:
6d:57:83:53:c1:63:7a:d9:51:33:5a:e5:5f:bc:cf:3a:53:6a:
1a:fd:80:44:fa:bd:41:e9:bc:a2:e5:da:d5:ff:da:ae:bf:bc:
4e:17:5b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 11:01:57 2025 by rpki-client