Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vSsR8ZjmNFD33zeaSUXp8ypy6G8.roa
File: vSsR8ZjmNFD33zeaSUXp8ypy6G8.roa (raw, json)
Hash identifier: wQipQnVidAVhFLQWfLOnpeqib0q5HiVVWogCG9OyArI=
Subject key identifier: BD:2B:11:F1:98:E6:34:50:F7:DF:37:9A:49:45:E9:F3:2A:72:E8:6F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B5E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vSsR8ZjmNFD33zeaSUXp8ypy6G8.roa
Signing time: Thu 02 May 2024 22:54:08 +0000
ROA not before: Thu 02 May 2024 22:54:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7006 (0x1b5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 22:54:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BD2B11F198E63450F7DF379A4945E9F32A72E86F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:96:9a:ef:d1:34:74:65:c5:09:af:f1:0b:30:
d6:4f:a5:56:3b:1f:84:ec:74:a7:25:5d:55:bc:cc:
36:91:1d:f9:82:37:11:91:a4:35:09:3b:43:2d:f7:
6d:b7:d0:ba:8d:f3:74:bb:45:68:b1:e2:91:19:09:
e2:5c:08:61:93:a6:a6:e5:a2:89:cb:fa:0a:7e:e2:
ec:f9:31:f9:a8:61:0a:7c:e2:6b:59:32:51:69:ca:
37:55:cd:6f:0a:df:9e:81:11:fd:e7:7c:f4:2d:bf:
09:ae:aa:a6:a2:89:e9:b3:82:ed:23:66:c7:89:47:
1c:42:76:86:c8:13:4f:90:7b:99:88:77:07:b9:46:
ff:3e:4a:4b:60:42:0f:09:91:08:ca:a9:53:dd:4c:
af:2f:c1:b1:a8:e2:32:8f:c7:32:f7:4e:13:a7:63:
2a:46:f2:ff:0a:36:89:51:8b:11:48:0b:ae:a0:aa:
56:a3:c5:82:07:9b:4f:a6:1d:ad:94:ba:70:05:ea:
c6:65:c4:59:bc:bf:9e:27:64:c4:ca:11:65:f2:84:
bb:7a:59:c8:3f:13:64:a5:02:73:0e:bb:9f:19:00:
ae:37:50:e6:ec:96:c4:6e:36:1e:f8:ff:a4:b3:3f:
b5:81:db:70:47:2d:01:4c:0e:25:5a:52:3f:e5:eb:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2B:11:F1:98:E6:34:50:F7:DF:37:9A:49:45:E9:F3:2A:72:E8:6F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vSsR8ZjmNFD33zeaSUXp8ypy6G8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:fe:0b:21:f1:3d:a7:6b:82:c7:25:dc:11:7d:44:6f:be:95:
17:ae:b3:aa:37:11:d7:69:f6:a9:71:89:76:64:5b:9b:ef:7c:
e1:95:08:a5:f0:1d:af:f4:45:e5:e4:86:8b:e8:b1:cf:a2:69:
c2:32:64:3e:d0:01:fa:c4:85:de:b3:fc:bd:97:17:49:20:cf:
56:d6:86:1e:c7:77:01:c6:a5:aa:85:04:f2:04:80:9d:e4:e8:
c8:60:85:3f:b4:79:aa:e4:cd:1b:e7:35:02:92:44:b3:61:02:
ee:85:45:1e:d7:d8:96:29:93:26:01:4b:22:62:59:1f:2a:9a:
66:e3:f8:41:d3:ac:3e:51:f5:fe:0a:50:de:de:6d:85:f3:82:
4d:5a:fa:d6:8d:4b:6f:b0:1e:08:3b:e8:4d:22:f7:45:7a:ab:
62:df:15:2d:bd:81:4a:4a:aa:c3:11:21:dd:58:7e:66:60:74:
02:eb:b8:02:92:82:a1:e0:51:dc:0f:16:e7:2a:3e:3c:b7:41:
ca:b1:fa:3d:5c:c5:5b:37:de:7c:d6:c3:27:74:54:c9:04:f4:
e2:a0:13:b1:bc:f5:2b:0f:72:a7:1f:ed:24:1b:4e:17:d8:ed:
ea:23:6a:f8:4d:35:5c:d8:b5:11:f0:fa:86:69:97:6a:4f:dc:
cd:e6:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:59:01 2025 by rpki-client