Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/xl-ix2hNa3wvbgpBsxFhDjZEeGM.roa
File: xl-ix2hNa3wvbgpBsxFhDjZEeGM.roa (raw, json)
Hash identifier: sur1nJVNnKRdemmXUsb0RqcK8eCpm0ItH1YeP4ypRI4=
Subject key identifier: C6:5F:A2:C7:68:4D:6B:7C:2F:6E:0A:41:B3:11:61:0E:36:44:78:63
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1AAA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xl-ix2hNa3wvbgpBsxFhDjZEeGM.roa
Signing time: Wed 01 May 2024 01:54:00 +0000
ROA not before: Wed 01 May 2024 01:54:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6826 (0x1aaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 1 01:54:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C65FA2C7684D6B7C2F6E0A41B311610E36447863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:bf:36:c2:8d:29:5a:c1:84:09:79:91:28:
71:20:4b:dd:bc:49:3b:c3:ec:4c:75:93:42:f4:09:
27:79:3f:b3:97:3d:a8:5f:cb:17:2c:6c:1f:52:da:
7d:c3:74:8a:3c:23:2e:75:4c:28:90:50:6d:45:01:
f3:29:78:c9:1e:5c:4e:bc:21:f3:57:73:5d:f1:9e:
88:50:de:83:06:d5:bd:44:46:5a:bc:37:8d:55:80:
7b:94:aa:e6:b9:36:dd:64:05:0e:4c:a9:4d:73:c8:
c8:72:e6:d2:2d:d4:2b:ff:b4:e8:c7:58:ad:0f:6b:
d2:03:b0:31:31:0d:22:cd:2a:19:c3:b9:6a:2a:59:
b5:37:e5:9c:4b:ca:9b:43:51:84:bb:6b:b8:5f:26:
94:c6:d0:72:77:ea:bd:93:74:e2:73:8a:eb:ce:41:
62:9e:c2:02:eb:ea:4c:cd:b1:fb:8f:13:52:53:19:
55:6c:42:34:5f:46:31:f7:2b:6e:25:ac:e3:c6:05:
7e:8d:65:15:c1:1a:6d:b6:00:65:86:ef:e8:a5:0a:
c7:6a:c7:0d:d5:98:d3:66:5f:e8:9a:dc:78:ac:7d:
72:c4:e7:23:01:d6:83:48:52:4e:5b:ce:9d:26:03:
9f:0d:1a:81:70:29:c6:b6:23:4c:c3:fe:e5:6b:7a:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5F:A2:C7:68:4D:6B:7C:2F:6E:0A:41:B3:11:61:0E:36:44:78:63
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xl-ix2hNa3wvbgpBsxFhDjZEeGM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:30:06:99:b2:54:bc:6d:ac:b3:c7:32:b0:d2:2b:1b:56:8b:
7f:cb:07:01:b5:4c:72:8c:81:87:3f:e8:2b:8b:e4:a5:26:13:
83:19:33:9c:e2:48:68:69:58:aa:bf:fc:b5:3d:7d:44:c5:1f:
0d:ac:9d:db:f4:f1:0b:7f:5b:61:62:5f:88:ca:cf:8f:1d:af:
e1:8b:59:38:19:7e:79:bd:ea:3b:09:bc:5c:c8:7f:4c:5e:94:
d6:60:29:46:59:67:27:4f:be:a0:50:31:cd:87:4b:f7:84:db:
f1:88:c5:c0:55:38:ec:ec:6b:ff:20:cb:22:f7:96:a7:9f:53:
6e:48:de:50:dc:94:1b:d5:f2:81:99:8a:2f:2f:67:0c:44:05:
be:ff:72:40:88:b4:4b:f8:ea:1d:9f:3a:02:cc:18:81:ea:f8:
9a:b9:05:78:f8:67:59:f3:50:00:31:11:6b:63:dd:98:4c:a7:
10:75:5b:27:dd:05:ac:a1:6e:3b:ec:47:63:8f:af:c5:cc:fe:
c7:1f:35:9c:92:d3:14:cc:38:2a:0b:e0:cc:cd:e5:7c:bc:54:
cf:4b:1c:83:37:25:a4:6c:5b:58:79:fb:2d:56:82:67:e5:d3:
05:10:ca:b7:f9:01:8e:6e:56:97:2e:ed:f0:bd:64:33:00:a7:
46:8e:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:47:02 2025 by rpki-client