Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/uW8kuTUYMg0SG8CcVz3Eac3-rbs.roa
File: uW8kuTUYMg0SG8CcVz3Eac3-rbs.roa (raw, json)
Hash identifier: b1Yu8tvblC/ea3+fxxgiQU2PvgamoCt0sIacpBJqniU=
Subject key identifier: B9:6F:24:B9:35:18:32:0D:12:1B:C0:9C:57:3D:C4:69:CD:FE:AD:BB
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1624
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uW8kuTUYMg0SG8CcVz3Eac3-rbs.roa
Signing time: Fri 19 Apr 2024 00:23:28 +0000
ROA not before: Fri 19 Apr 2024 00:23:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5668 (0x1624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 00:23:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B96F24B93518320D121BC09C573DC469CDFEADBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:33:d2:9d:fb:1b:7b:20:14:34:02:af:8c:
c8:f8:29:53:e1:a8:17:74:8b:fe:fe:d8:72:f8:e6:
f9:b1:a7:a8:8f:60:a6:9b:02:b9:b1:3f:40:01:42:
50:62:65:85:8d:4a:cb:9d:e0:5c:5d:96:af:73:da:
f2:f4:38:34:6d:0c:9c:b6:ae:86:40:35:03:84:3e:
fc:38:44:a9:c0:ba:8c:08:fe:0c:6e:5c:ff:99:43:
98:d5:a9:1d:16:12:7e:50:20:7d:14:18:ba:12:fb:
f5:ac:27:a4:97:f9:a4:69:e3:04:71:1f:b5:af:80:
20:58:07:81:7c:0c:0a:e6:47:cd:6b:36:35:cd:c4:
f0:9a:04:f7:24:0e:ab:64:49:e7:8a:30:43:3b:63:
8a:5b:f0:f6:d0:4c:03:ce:ed:e8:bc:5b:99:78:59:
82:da:c2:9f:05:5e:8a:c8:ba:7c:fb:cd:cb:fa:ae:
dc:eb:9c:02:4f:ac:ab:36:d9:d3:6c:33:f4:9c:cb:
17:ce:be:cd:f1:8d:b9:63:16:34:4d:5b:7c:bb:44:
d1:25:0b:c0:7f:4c:ea:56:34:f4:fb:59:51:ae:dc:
2c:27:00:4d:60:53:30:52:b5:98:e5:d0:10:ba:13:
d5:88:0e:e9:0a:cc:10:2d:7c:40:2e:c9:cc:72:3a:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6F:24:B9:35:18:32:0D:12:1B:C0:9C:57:3D:C4:69:CD:FE:AD:BB
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uW8kuTUYMg0SG8CcVz3Eac3-rbs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:ff:00:2c:3f:42:dd:b7:37:f5:7f:b4:04:78:e0:bf:16:ee:
07:b2:74:b4:bb:f4:cb:e3:56:89:d4:22:99:99:8b:24:1a:56:
e3:b6:2a:27:91:57:c5:3e:6e:95:22:9b:9f:27:3a:49:27:58:
d1:48:65:93:d5:f6:52:f5:cb:be:3f:bd:e7:48:6a:6f:00:09:
a8:ea:72:22:c5:88:6f:eb:da:c9:bf:cd:59:f4:ef:f4:5a:f6:
ad:8a:5c:e6:0e:0a:a8:b3:7d:b5:40:2f:3d:c1:ad:20:12:fb:
f3:82:1b:f2:78:9b:84:b2:1b:7a:77:ba:af:b0:c5:72:fa:60:
e9:2c:f0:f8:88:07:c3:50:f7:3d:8c:70:8c:0f:d0:d7:47:ce:
c5:d0:2d:41:cc:a1:c4:1c:e9:35:8f:13:a1:83:ff:62:42:00:
89:ad:48:e5:38:d8:78:17:e1:74:f7:8a:4d:2b:ed:87:e7:7b:
19:3d:74:9c:aa:11:23:9b:ac:b1:8a:a2:12:0f:5e:84:33:da:
98:b5:67:60:36:ea:73:09:90:6f:2e:30:32:fc:da:15:af:12:
85:69:af:2c:9e:01:d6:b9:81:b9:af:96:50:2b:71:c3:91:3d:
67:0a:a1:6b:40:4f:9d:2d:41:cb:b6:f3:0b:b8:64:7f:c7:ce:
c9:ae:cf:7e
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFiQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTkw
MDIzMjhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI5NkYyNEI5MzUxODMy
MEQxMjFCQzA5QzU3M0RDNDY5Q0RGRUFEQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDWjPSnfsbeyAUNAKvjMj4KVPhqBd0i/7+2HL45vmxp6iPYKab
ArmxP0ABQlBiZYWNSsud4Fxdlq9z2vL0ODRtDJy2roZANQOEPvw4RKnAuowI/gxu
XP+ZQ5jVqR0WEn5QIH0UGLoS+/WsJ6SX+aRp4wRxH7WvgCBYB4F8DArmR81rNjXN
xPCaBPckDqtkSeeKMEM7Y4pb8PbQTAPO7ei8W5l4WYLawp8FXorIunz7zcv6rtzr
nAJPrKs22dNsM/ScyxfOvs3xjbljFjRNW3y7RNElC8B/TOpWNPT7WVGu3CwnAE1g
UzBStZjl0BC6E9WIDukKzBAtfEAuycxyOk8bAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUuW8kuTUYMg0SG8CcVz3Eac3+rbswHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3VXOGt1VFVZTWcwU0c4
Q2NWejNFYWMzLXJicy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAJf8ALD9C3bc39X+0BHjgvxbuB7J0tLv0
y+NWidQimZmLJBpW47YqJ5FXxT5ulSKbnyc6SSdY0Uhlk9X2UvXLvj+950hqbwAJ
qOpyIsWIb+vayb/NWfTv9Fr2rYpc5g4KqLN9tUAvPcGtIBL784Ib8nibhLIbene6
r7DFcvpg6Szw+IgHw1D3PYxwjA/Q10fOxdAtQcyhxBzpNY8ToYP/YkIAia1I5TjY
eBfhdPeKTSvth+d7GT10nKoRI5ussYqiEg9ehDPamLVnYDbqcwmQby4wMvzaFa8S
hWmvLJ4B1rmBua+WUCtxw5E9Zwqha0BPnS1By7bzC7hkf8fOya7Pfg==
-----END CERTIFICATE-----
Generated at Sun May 18 04:44:27 2025 by rpki-client