Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/4hu3TKBCFFY9u1IVxHwZJWMfmQw.roa
File: 4hu3TKBCFFY9u1IVxHwZJWMfmQw.roa (raw, json)
Hash identifier: owqM/HGy3Zw5JN7a5saaaZntTXJYSL17ng20MsrOgtQ=
Subject key identifier: E2:1B:B7:4C:A0:42:14:56:3D:BB:52:15:C4:7C:19:25:63:1F:99:0C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 17FA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4hu3TKBCFFY9u1IVxHwZJWMfmQw.roa
Signing time: Tue 23 Apr 2024 21:53:40 +0000
ROA not before: Tue 23 Apr 2024 21:53:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6138 (0x17fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 23 21:53:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E21BB74CA04214563DBB5215C47C1925631F990C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:af:3d:c1:2e:02:c3:cb:5a:09:1c:c2:4a:
46:a9:ff:fb:74:43:09:ab:a6:47:45:13:6d:cf:eb:
d8:43:30:51:26:62:86:99:50:9a:44:6d:a3:bc:aa:
af:ab:23:13:39:fb:eb:e8:2b:60:d0:22:d0:33:aa:
c6:de:cd:0f:4e:6b:77:5b:3f:6c:c0:73:91:90:37:
48:76:ff:0d:05:da:e7:d7:0c:60:62:25:b6:51:59:
cb:bd:1d:ef:21:9e:fc:04:63:90:6e:5e:6b:d8:0c:
df:eb:86:e9:86:28:e4:43:aa:d9:09:9e:11:ce:69:
04:25:a4:52:32:63:b5:a1:66:7c:6e:1a:bf:08:49:
56:fd:7f:b0:a0:1f:f5:25:7e:f9:59:0c:5c:57:33:
d3:7e:87:fe:47:2c:68:c7:fe:d0:73:39:0f:63:c9:
83:e5:28:a8:23:f6:d6:cc:62:1a:4c:60:12:78:52:
4a:25:a3:31:ee:15:d4:7f:1e:38:60:e6:05:58:30:
3f:ad:40:4d:27:9d:c6:fa:47:c3:e1:06:de:f6:85:
c7:d2:79:ff:eb:0e:ce:73:e0:3f:72:89:1a:ed:4a:
75:8a:77:b9:33:02:57:fb:07:6e:1b:a8:12:fa:a2:
7f:e5:d2:35:c9:00:8d:35:f0:5d:73:de:9d:04:28:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1B:B7:4C:A0:42:14:56:3D:BB:52:15:C4:7C:19:25:63:1F:99:0C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4hu3TKBCFFY9u1IVxHwZJWMfmQw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:21:0c:52:2f:ae:f9:60:c0:1b:6f:68:de:17:6e:f5:0b:b6:
d0:20:38:13:3a:f0:d6:8d:3f:41:c6:ea:6f:08:18:79:6a:98:
bb:36:73:e6:ab:2f:29:f3:ff:44:5e:81:fa:a8:2c:84:ab:03:
6a:b8:dd:83:e9:70:db:7e:a2:83:06:df:26:ae:e7:9b:b0:b8:
c4:7e:dc:41:49:94:b2:5d:28:0a:61:58:90:ba:7b:7a:91:70:
be:0e:4e:00:2d:2e:2a:95:e2:c4:b0:c4:e2:ab:96:4c:d4:72:
ea:7e:6f:b7:16:63:3c:ae:5a:61:62:31:c4:1d:56:48:72:50:
70:6a:a5:43:69:ef:e3:35:d5:be:ff:ba:d3:0f:b1:5b:60:69:
d6:0e:0d:fe:3b:72:f0:13:82:19:1c:e8:8c:3a:c3:8d:d1:23:
0e:9c:f7:9f:c6:00:80:a9:d9:31:46:e3:70:8c:5c:bf:4f:e3:
a0:2d:d0:f8:c9:12:6e:3b:a2:fd:e2:22:54:ad:10:9f:0e:90:
04:ec:46:ea:f4:45:e3:35:fd:64:de:e4:35:0e:fb:8b:f4:50:
ac:e8:20:96:0a:4d:96:50:11:d5:a6:4e:e2:71:9a:20:5a:28:
f3:18:50:64:fd:65:35:35:d4:39:bf:90:59:61:b4:e2:78:64:
5b:44:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:34:48 2025 by rpki-client