Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/t_XVqpf5gWa5XTNHWIQS07G8x3Q.roa
File: t_XVqpf5gWa5XTNHWIQS07G8x3Q.roa (raw, json)
Hash identifier: u/9QKdqE6+FVsCd1oTL3FDKtQnLZA6mMQhae9C7QMfg=
Subject key identifier: B7:F5:D5:AA:97:F9:81:66:B9:5D:33:47:58:84:12:D3:B1:BC:C7:74
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 12DC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/t_XVqpf5gWa5XTNHWIQS07G8x3Q.roa
Signing time: Wed 10 Apr 2024 06:23:03 +0000
ROA not before: Wed 10 Apr 2024 06:23:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4828 (0x12dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 06:23:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B7F5D5AA97F98166B95D3347588412D3B1BCC774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7f:ee:a7:33:94:a2:3b:9e:0c:31:67:96:55:
c4:a0:21:5e:ce:6d:87:d5:fd:95:36:88:4c:24:cc:
6a:c1:de:e2:e6:00:f4:03:94:bb:aa:ce:68:d6:a6:
0d:e7:ad:39:fb:bc:1f:14:32:69:dd:3c:bb:ab:76:
a9:47:7b:3c:e0:f9:e8:69:b9:c9:76:7b:86:19:7e:
6d:04:03:11:9a:11:63:d9:ea:e9:d8:3d:0f:e1:37:
12:df:8c:8b:65:31:06:ed:63:ff:fb:33:d8:9d:f7:
c6:59:6b:cd:36:09:e9:06:b7:f8:55:97:28:29:e1:
16:bb:f6:35:39:26:88:7d:c5:43:85:61:45:0e:04:
01:61:01:bd:1d:0b:23:fc:5e:e4:c3:41:fd:16:84:
aa:e9:b8:f5:b5:95:92:e3:4d:0e:8a:d5:b8:c9:7c:
20:3f:2a:a9:bd:88:64:a4:f0:04:86:2b:b9:ae:a7:
74:4f:d7:7b:32:88:11:7e:4f:9d:69:79:92:d2:5b:
d4:dd:a5:c4:54:41:f4:cc:88:75:f7:37:ee:53:fe:
97:47:78:9f:e2:10:18:67:63:99:79:e8:fb:95:de:
e7:2e:48:08:0c:6c:b2:3e:70:3d:97:23:9f:b9:97:
2e:a6:26:ef:12:89:aa:85:a6:e6:60:e7:c6:d6:b2:
5e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F5:D5:AA:97:F9:81:66:B9:5D:33:47:58:84:12:D3:B1:BC:C7:74
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/t_XVqpf5gWa5XTNHWIQS07G8x3Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:4f:c6:28:58:ed:7e:e4:1f:88:67:c9:39:13:07:19:9e:79:
82:be:55:a5:c8:7e:e4:6d:5b:db:c1:ab:09:84:9c:65:13:ea:
4d:90:78:cf:59:24:6e:d8:5e:2a:c2:83:e5:20:fa:73:2c:c2:
25:01:65:29:f8:5c:96:f4:ec:8a:dd:46:15:7a:92:25:10:f5:
9a:43:22:a3:3d:96:94:2c:70:86:5f:92:27:17:5c:7e:df:f3:
ea:56:1a:d4:64:97:14:0f:fa:d8:2e:41:bd:2c:34:99:cd:b6:
9b:8f:70:f1:9d:2d:c5:bd:29:70:ca:51:fd:00:27:d8:35:cc:
8a:5b:4d:67:d6:85:98:3d:48:4b:2f:ee:82:37:f2:2f:36:e4:
88:08:76:c8:c9:48:18:d8:c4:8f:29:11:b4:a4:65:72:73:43:
ba:af:06:1e:bf:ea:0b:cb:97:e4:e1:b3:09:65:9e:e3:f6:53:
46:18:0b:15:6d:fb:33:be:67:db:c8:fb:33:f1:6d:80:c2:dd:
4f:50:00:0f:11:90:ea:f1:df:08:16:c9:94:6c:81:e8:d3:0c:
eb:78:4c:bd:6b:5c:95:e5:81:2e:cc:fc:1c:44:48:75:d1:61:
76:f4:22:c8:de:da:e6:1f:f8:ce:8a:8d:5e:d7:40:c2:f0:53:
44:27:98:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:43:25 2025 by rpki-client