Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/zI4ESW5W1qFM4_ABZqgYOJ82mxI.roa
File: zI4ESW5W1qFM4_ABZqgYOJ82mxI.roa (raw, json)
Hash identifier: VQvdKjdPvIvZ/PbBjdYVaiwD3u5pxohmnkTbPf+f6/w=
Subject key identifier: CC:8E:04:49:6E:56:D6:A1:4C:E3:F0:01:66:A8:18:38:9F:36:9B:12
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19A4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zI4ESW5W1qFM4_ABZqgYOJ82mxI.roa
Signing time: Sun 28 Apr 2024 08:23:52 +0000
ROA not before: Sun 28 Apr 2024 08:23:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6564 (0x19a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 08:23:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CC8E04496E56D6A14CE3F00166A818389F369B12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:af:40:89:61:5e:74:0d:71:82:0e:3c:61:5f:
ad:70:e9:a6:0c:6e:ba:8d:c3:02:d7:23:d5:c2:1d:
ad:91:cf:94:61:c2:b3:f2:b6:16:3c:7c:9a:a0:26:
fa:c2:ef:c7:b8:22:6f:f1:8e:f0:23:22:48:1e:7d:
d7:32:2d:e7:f1:98:0e:12:d9:d1:ba:e4:fd:8a:3d:
4c:bf:56:54:0b:cc:72:7e:f8:2c:71:1d:59:33:d3:
51:49:61:fd:00:2e:d1:67:35:8d:05:5f:02:3d:ee:
88:3d:a9:05:c1:66:27:b0:a7:d1:9a:3b:df:3a:ca:
72:c3:ac:50:6b:3f:16:b7:91:b7:71:df:bb:fa:91:
be:76:7a:a8:df:7e:85:5c:80:fe:56:09:dc:b9:1f:
0a:ff:24:3b:32:7c:cc:32:74:8d:f0:f7:a7:cc:58:
dc:03:40:25:9f:d9:a3:bc:93:54:37:c6:0f:2c:81:
ee:5c:94:7a:d0:11:58:65:53:dc:3d:94:6e:40:e0:
70:51:fa:61:52:aa:b2:44:06:2f:3f:f4:3b:fd:1c:
2a:04:95:b5:47:f1:6e:2d:b5:6d:4e:72:94:7e:6c:
ed:4f:fd:ca:92:f8:24:d3:08:05:76:89:b6:9b:2f:
c3:53:09:a5:8e:4e:9c:1e:e7:bc:5f:a0:9a:1d:8d:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8E:04:49:6E:56:D6:A1:4C:E3:F0:01:66:A8:18:38:9F:36:9B:12
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zI4ESW5W1qFM4_ABZqgYOJ82mxI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:f7:f0:dc:dd:85:29:e6:11:ff:1d:e1:83:aa:c3:d5:4b:c1:
94:18:1e:23:16:98:64:25:ec:23:c4:ba:7f:a3:29:48:f5:20:
f2:b0:e7:4c:e9:9e:8a:55:1e:c2:fe:c5:20:64:bc:67:17:be:
c4:13:b7:ce:b5:8e:a6:41:3f:58:62:e1:94:c4:63:89:2f:8b:
77:e1:c0:a6:fa:8e:dc:4b:af:36:39:e5:92:e5:2b:e7:3c:f6:
39:bf:42:42:9c:f2:70:db:5c:47:91:97:cf:5e:71:b0:6d:66:
55:03:36:83:6a:c2:a2:5f:b9:94:d7:2b:62:de:3c:03:3d:d3:
60:dc:60:20:9d:dc:25:a5:6d:8e:45:74:69:c8:f8:78:e3:f8:
30:bd:52:e1:27:a0:99:92:74:bd:e5:08:71:05:54:7a:4b:c1:
d6:7f:06:fe:7f:56:ce:ae:fe:08:b8:f8:03:cf:2c:e7:4f:9c:
96:28:70:58:7c:4a:6e:1e:e3:97:74:da:05:1b:d9:6c:0d:c0:
c0:84:60:d9:ff:4c:d4:cd:a8:e4:15:93:83:c7:14:76:80:02:
27:9e:96:e7:b0:ea:31:53:a3:60:dd:8d:fb:94:f7:56:02:cc:
4c:a0:a4:33:96:91:29:2f:37:fd:b6:2e:fd:ae:98:cf:11:69:
42:e6:05:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:48:47 2025 by rpki-client