Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/wltQyDLb3PW_d9xNpYRMTEjp0e4.roa
File: wltQyDLb3PW_d9xNpYRMTEjp0e4.roa (raw, json)
Hash identifier: iTZ7GSyrKVsIA6dW5BiaRIjNoMXQiGUB/1qpR8J/gsg=
Subject key identifier: C2:5B:50:C8:32:DB:DC:F5:BF:77:DC:4D:A5:84:4C:4C:48:E9:D1:EE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 11AC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/wltQyDLb3PW_d9xNpYRMTEjp0e4.roa
Signing time: Sun 07 Apr 2024 02:23:00 +0000
ROA not before: Sun 07 Apr 2024 02:23:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4524 (0x11ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 7 02:23:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C25B50C832DBDCF5BF77DC4DA5844C4C48E9D1EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b8:de:0b:45:06:6f:c9:69:10:89:a2:c0:67:
b6:c7:c3:40:3c:5b:67:98:36:1e:1a:8e:d2:9c:ea:
b0:80:8c:ac:8e:88:03:20:1e:05:11:18:0e:13:01:
b5:44:da:ec:53:3e:e8:65:dc:2a:bd:a2:79:fb:b2:
46:1a:53:15:66:c2:8e:4e:8c:78:b4:b1:b2:d9:4e:
d4:64:75:0d:75:c6:1b:11:c5:9a:08:9d:ca:ea:37:
84:d2:56:a0:7c:78:21:7c:eb:4c:8c:ff:f6:dd:62:
79:22:24:b7:62:77:19:7b:d1:ad:31:ee:e4:88:17:
aa:2a:5a:d0:15:07:6b:74:77:e1:7d:9b:03:1e:5f:
85:24:dc:db:77:0a:44:d4:4d:74:22:a5:ad:7f:f2:
b0:31:25:a2:3d:b1:52:0d:cd:d7:e2:55:0a:09:2b:
00:55:bd:0e:70:9e:9f:83:8b:19:85:16:4b:54:85:
ea:b2:97:a4:77:c6:1d:23:65:27:1f:e4:a5:a8:9b:
29:34:fc:96:a1:84:50:84:70:c6:67:be:aa:92:00:
0c:c1:d6:71:98:cc:b2:d1:d7:85:28:f2:ca:1a:15:
02:7e:d2:9e:a8:54:c1:25:50:51:d4:77:c2:7c:36:
ee:a4:76:a9:a4:63:d8:a9:4f:5a:72:41:3b:23:85:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5B:50:C8:32:DB:DC:F5:BF:77:DC:4D:A5:84:4C:4C:48:E9:D1:EE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/wltQyDLb3PW_d9xNpYRMTEjp0e4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:69:09:e8:87:fd:47:94:61:3e:eb:c9:99:96:48:69:c7:cb:
35:ed:49:e6:a7:d3:3a:28:ab:a6:38:84:62:66:36:e9:a6:05:
55:2e:56:f0:a9:47:48:d4:f1:9d:f9:4b:d2:74:c3:d6:3d:9b:
12:ea:fe:a7:3c:d9:ff:86:ef:ca:4f:88:f5:a7:97:8b:69:a0:
a9:52:ba:d0:0a:42:75:c4:56:6f:7e:fa:1d:32:a7:cc:29:0f:
84:27:e5:ef:c8:e9:b3:de:dd:cc:64:e9:03:f4:78:47:d5:bf:
03:8d:0f:10:b6:57:ca:7e:fc:cb:74:f9:5c:34:41:28:6b:7d:
6c:58:e0:2c:d7:98:3c:94:2f:15:36:76:f6:e7:6f:21:ff:f3:
79:c4:2f:2e:49:ed:3e:eb:0e:39:54:1f:70:54:a3:a6:9a:54:
39:b1:78:88:13:9b:36:52:e9:9d:ab:75:32:ab:16:db:04:49:
46:71:4a:e5:eb:cc:40:ab:a6:7b:ad:f1:1d:af:95:f7:c0:53:
9a:46:1a:77:6b:d5:c6:7c:77:41:bb:cd:ee:d1:ce:c6:12:36:
fc:3b:2d:73:c5:c5:e1:4b:3f:22:3d:93:c1:0d:22:9e:8d:f9:
7b:7d:6b:08:38:dc:0b:7a:b0:08:cc:f2:c4:c3:c0:10:18:27:
77:36:f5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 11:00:52 2025 by rpki-client