Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/tgi4W38nRKGMkauMNvgw2HW3gD4.roa
File: tgi4W38nRKGMkauMNvgw2HW3gD4.roa (raw, json)
Hash identifier: BXesw7uVJHq6jKavvADJ4qxNh1w8T3ag3IY3KTzhvOk=
Subject key identifier: B6:08:B8:5B:7F:27:44:A1:8C:91:AB:8C:36:F8:30:D8:75:B7:80:3E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1476
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/tgi4W38nRKGMkauMNvgw2HW3gD4.roa
Signing time: Sun 14 Apr 2024 12:53:17 +0000
ROA not before: Sun 14 Apr 2024 12:53:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5238 (0x1476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 12:53:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B608B85B7F2744A18C91AB8C36F830D875B7803E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:cc:31:75:82:7f:84:f1:9f:c7:9f:c8:60:
05:04:9e:4d:9f:36:46:7b:44:c0:49:bf:df:0e:7d:
9e:28:d0:ea:8f:03:13:b3:ba:60:f6:5a:93:eb:46:
43:4b:00:53:ed:e2:98:a5:ce:f7:40:b7:da:65:24:
6b:14:ff:e2:2d:41:8e:b6:86:05:f2:15:f5:8c:78:
f8:48:91:24:d9:a1:36:72:9e:f3:ef:5f:8b:e5:6b:
ea:99:19:ab:7e:20:9c:1d:03:ec:ef:86:94:cc:25:
0d:64:91:62:cf:c7:23:4e:05:3a:97:56:f4:07:9c:
34:64:b2:9a:2a:7c:70:14:f9:c1:10:8c:dd:84:b4:
44:d1:ef:e0:6c:74:5b:2e:f1:d9:29:49:71:77:df:
08:a7:74:e0:e1:bf:53:97:70:3b:1e:be:2a:a0:57:
46:fe:66:3e:31:89:13:b7:3c:ec:d6:7d:7a:20:33:
6b:a1:ec:5b:ea:7e:11:b0:68:f6:55:8f:25:66:d2:
9b:c9:d3:ba:62:8d:b3:b1:c7:59:c6:f9:8c:67:8c:
cd:c7:f7:6a:fb:b8:b0:a1:83:b9:15:44:19:e6:d5:
d6:63:2e:fa:4f:e2:86:8a:d8:f2:6c:08:42:f4:d2:
20:57:53:e9:d7:66:df:6a:ee:07:82:ef:3d:fb:0d:
f8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:08:B8:5B:7F:27:44:A1:8C:91:AB:8C:36:F8:30:D8:75:B7:80:3E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/tgi4W38nRKGMkauMNvgw2HW3gD4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:37:70:0a:0d:2a:5a:31:24:8a:37:33:dd:70:92:da:6e:ed:
7c:7b:ad:c9:79:4a:1d:a9:96:33:8e:d5:90:0e:8e:16:6e:7b:
41:9d:78:2a:8b:2a:d7:6b:84:50:55:b1:b4:b2:11:e7:47:42:
7d:1b:59:2d:bf:ed:ae:de:8e:f1:dc:77:88:c3:f0:98:52:53:
83:27:4e:8b:7c:48:76:78:33:3c:fc:11:4b:42:a4:9e:ea:67:
8f:77:d0:66:16:fd:33:0c:37:60:f4:08:e2:51:f0:06:6f:9e:
57:67:3a:ae:15:21:a4:f9:52:1c:2c:ec:81:79:e7:00:26:f9:
5c:da:b8:3b:8b:a3:81:cc:6b:7b:de:15:08:41:d3:99:32:3f:
3d:2c:6f:f1:38:28:da:0b:9a:d7:b3:48:42:ea:f3:fd:51:6f:
f8:e4:2e:c1:95:69:ee:c5:4f:7b:70:cf:44:c6:8e:68:bf:01:
7c:37:c2:fa:22:7f:f8:da:64:5d:b6:7d:33:26:9b:49:52:f9:
ae:11:a6:95:93:80:b2:d9:37:36:5a:f9:e0:8c:50:52:09:65:
9d:e7:56:67:13:b3:a2:bc:2f:48:e0:5b:41:21:af:bc:ca:7b:
ff:57:e5:2c:37:09:9f:e7:15:0a:df:f6:e3:4a:e8:9d:85:11:
0d:b9:c9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:50:59 2025 by rpki-client