Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/xX8Jw8ih07GXz3PqwdvhcxNQyL8.roa
File: xX8Jw8ih07GXz3PqwdvhcxNQyL8.roa (raw, json)
Hash identifier: cUQlLeUHwhep+pBdaX+lWk5BRPV/ZwnceZBAqzmlbxI=
Subject key identifier: C5:7F:09:C3:C8:A1:D3:B1:97:CF:73:EA:C1:DB:E1:73:13:50:C8:BF
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1AC8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xX8Jw8ih07GXz3PqwdvhcxNQyL8.roa
Signing time: Wed 01 May 2024 09:24:29 +0000
ROA not before: Wed 01 May 2024 09:24:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6856 (0x1ac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 1 09:24:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C57F09C3C8A1D3B197CF73EAC1DBE1731350C8BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:cc:25:54:37:e4:e1:18:4c:e6:2e:e6:76:
4d:d1:3a:50:75:68:2b:42:8b:bc:53:56:9d:85:dd:
1f:67:f3:ff:44:a2:07:83:c9:c8:49:fb:bf:9a:12:
f0:14:c7:80:34:40:3c:52:41:f1:38:66:d6:d6:48:
f9:3b:6a:2b:a5:d2:cd:22:fe:1a:da:15:49:39:8e:
3b:15:75:aa:03:3d:e8:35:7b:c0:e9:03:73:15:8d:
a2:51:8b:77:c2:5c:c7:60:97:8d:fd:cd:19:91:79:
5d:83:6f:4a:a2:4a:b8:11:92:d4:0c:35:3c:1a:70:
24:62:ea:87:97:f5:c9:96:81:6b:8d:c8:4e:75:21:
85:4c:c7:71:74:a3:6a:01:77:fa:7c:cf:8c:9b:fa:
d7:dd:86:30:80:f9:de:22:20:6d:b8:13:73:0f:8e:
6a:65:cc:e5:63:38:18:c4:77:c9:60:9b:c7:92:31:
bd:4d:7c:0c:c3:91:ec:7f:2c:02:85:59:4d:81:6d:
82:ed:a2:46:ee:4a:fe:fb:10:81:73:62:ee:2b:7c:
c8:ec:7d:38:c6:0a:d8:39:24:12:90:db:93:5f:76:
ee:74:c1:6e:ea:cc:08:07:36:94:15:df:9c:1f:61:
fc:3d:3d:4e:dc:2b:42:f1:5c:1e:64:6b:bc:09:90:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:09:C3:C8:A1:D3:B1:97:CF:73:EA:C1:DB:E1:73:13:50:C8:BF
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xX8Jw8ih07GXz3PqwdvhcxNQyL8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d0:94:f6:fb:26:2e:40:1e:fc:a9:c8:3d:b1:72:43:7b:9d:88:
ec:72:57:c3:fc:bb:d5:7f:f1:a1:66:b8:e6:f8:ed:07:4f:70:
e7:ce:2e:f1:7d:b9:8a:fd:2f:06:40:f2:ab:06:66:97:4a:2c:
7a:8b:55:89:6c:3f:c0:db:f3:1c:b1:e7:d6:8d:d9:bd:dd:8d:
8c:aa:97:1f:6c:34:bf:9c:42:99:c7:26:75:e3:24:bc:ed:b7:
ec:3d:6a:b3:b2:7c:f5:3a:c6:fb:95:79:ec:aa:a1:81:3d:40:
f9:60:44:c1:8e:12:99:b9:0d:7f:f8:84:e9:c6:b5:d7:8b:82:
6a:a4:21:19:10:6d:00:38:2d:29:32:2f:4e:16:98:de:88:9d:
ec:8e:17:de:4d:79:c8:7c:4a:5e:7c:f8:7e:c0:7a:e2:0f:eb:
14:d6:98:76:69:89:0a:9c:3b:0b:f3:bd:8d:d1:a0:18:b6:f4:
0d:18:e8:8c:c5:30:b5:e0:68:d4:b1:a0:1c:8e:49:18:c2:86:
2c:40:9d:62:1c:af:50:cc:29:be:c9:cd:32:db:33:0b:53:84:
50:4d:b7:58:10:61:22:50:2d:90:14:2d:01:9a:05:37:88:42:
b0:77:9c:b8:62:6a:50:56:2f:90:4a:e6:6e:d8:9c:ad:b3:f2:
6b:20:dd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 09:13:31 2025 by rpki-client