Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/zKeC41B1g1gcXDTqh2JeddxLYqQ.roa
File: zKeC41B1g1gcXDTqh2JeddxLYqQ.roa (raw, json)
Hash identifier: a/4ESioSlzvH5u+CSF/smQ9FCdBrZrlVTink4hqh/Qo=
Subject key identifier: CC:A7:82:E3:50:75:83:58:1C:5C:34:EA:87:62:5E:75:DC:4B:62:A4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D0E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zKeC41B1g1gcXDTqh2JeddxLYqQ.roa
Signing time: Tue 07 May 2024 10:54:20 +0000
ROA not before: Tue 07 May 2024 10:54:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7438 (0x1d0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 10:54:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CCA782E3507583581C5C34EA87625E75DC4B62A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:76:6a:2c:c1:bd:07:ed:a3:29:93:06:6e:
7f:73:c3:bd:a3:1d:47:69:17:e9:fe:1c:e8:a8:d2:
fe:af:13:06:fb:75:eb:e6:16:47:44:a8:07:d8:95:
3d:57:16:44:80:5a:33:ba:fc:73:f8:d0:ea:5a:4f:
72:4a:92:0e:3b:bc:f4:07:64:31:04:0d:4e:25:6c:
ff:9b:cb:98:e0:ce:57:92:83:7f:98:18:23:7f:e6:
7d:ac:64:58:d9:1b:a8:ee:82:03:bb:4e:5d:79:56:
07:fa:7d:d4:a1:ff:4d:6d:80:d0:30:a0:bc:88:a5:
5d:9e:c3:05:d0:2c:e8:d4:e4:21:60:ba:a2:47:a0:
c3:2f:a2:85:ea:c3:0c:a1:0a:3d:62:cb:8d:60:a3:
5a:64:bf:0c:55:be:5f:7a:08:97:c7:d3:bc:32:31:
41:ef:d7:83:3a:80:e3:7b:38:89:92:0f:b8:21:fb:
88:1a:a9:73:e4:7b:88:e4:ba:f6:fd:b4:32:fd:f2:
43:54:e6:60:ff:ee:f2:58:25:4c:4f:17:d6:8e:30:
09:2a:91:38:5d:30:85:8f:71:db:fa:ee:84:79:3d:
72:45:80:ad:a1:09:da:a1:8d:56:3a:03:d8:9c:57:
eb:c4:af:07:48:2c:26:f3:d4:21:2d:7f:20:61:dc:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A7:82:E3:50:75:83:58:1C:5C:34:EA:87:62:5E:75:DC:4B:62:A4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zKeC41B1g1gcXDTqh2JeddxLYqQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:d6:ea:7e:af:a2:88:fa:5d:1b:41:1d:44:f3:b9:f5:e9:a4:
4a:9b:a1:a5:3c:de:39:94:40:bf:99:7a:da:43:bb:52:8b:5d:
0c:4d:7a:e5:1e:f8:f1:98:6c:75:4c:bd:dd:83:78:95:6a:6c:
2d:98:39:be:2d:8c:7e:b3:89:c2:86:cc:eb:38:5f:1d:3b:98:
d4:88:91:d4:c4:cb:a9:3c:b1:28:6a:a8:a7:50:bd:70:a8:75:
b9:b1:4a:41:db:d4:c1:86:23:b3:91:f4:a7:ca:fa:bc:5d:81:
8b:8c:ed:33:85:e5:4b:79:d8:42:9c:8a:cd:12:5a:7c:e0:7e:
4a:5c:ab:39:ae:ab:b2:d0:c6:f1:45:7e:97:58:c5:b7:0e:f0:
30:c1:7a:67:e7:00:28:35:0b:5c:8e:ca:7a:83:d1:d0:1e:f5:
8a:3e:b6:1b:4a:cd:41:53:27:83:08:0e:58:6c:35:fb:d6:4e:
7f:cd:dc:90:38:2e:f1:5c:44:30:16:d1:cc:98:cd:ea:20:e6:
be:2b:c6:d7:d6:a3:0f:f1:7d:b2:22:f7:8a:42:91:35:d1:fd:
f6:d2:ea:a7:6a:3d:b1:5c:a3:46:91:a2:f2:f8:49:94:13:8b:
db:47:7f:33:9c:eb:67:1e:67:be:a5:8f:f8:0f:02:b1:10:d3:
56:8f:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 05:59:06 2025 by rpki-client