Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/6arFBUyLc3KjdZ5R1nY2vv6ZHZo.roa
File: 6arFBUyLc3KjdZ5R1nY2vv6ZHZo.roa (raw, json)
Hash identifier: KFGbU5XKTevZfqK7cf9Xkk0PWiZb3N36+zgvUtcsKK0=
Subject key identifier: E9:AA:C5:05:4C:8B:73:72:A3:75:9E:51:D6:76:36:BE:FE:99:1D:9A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1264
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6arFBUyLc3KjdZ5R1nY2vv6ZHZo.roa
Signing time: Tue 09 Apr 2024 00:23:52 +0000
ROA not before: Tue 09 Apr 2024 00:23:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4708 (0x1264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 9 00:23:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E9AAC5054C8B7372A3759E51D67636BEFE991D9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:03:30:5f:a7:b6:6e:aa:94:05:58:5e:16:
dd:23:d5:6e:b9:26:04:a9:dc:f1:0a:24:d3:a3:04:
0f:36:3f:0c:a7:e5:3a:6f:fa:d2:d8:7a:40:59:4d:
34:0b:99:b9:dd:b2:e6:7f:10:bc:69:2e:44:de:b7:
c2:bd:fe:29:e8:25:ed:a6:84:47:8e:49:f5:f9:6f:
61:24:56:02:73:ef:37:9b:c0:34:49:50:8a:3b:10:
ae:b4:a1:c4:a3:9e:1c:0a:30:4d:51:ff:06:48:e4:
58:78:d0:f7:48:af:04:2f:af:67:01:7f:10:9f:a3:
7b:92:ea:28:5b:9a:46:7c:7d:43:58:07:4c:f5:e2:
ed:48:e4:e1:ab:e4:df:e1:12:e4:cd:c7:d2:f1:a1:
2e:c8:62:24:7e:3f:2c:1d:e7:2d:7b:d4:a2:7c:0d:
82:7f:43:cd:89:dc:8f:2b:3f:62:93:18:2d:bd:5f:
3f:23:4c:1a:23:37:e4:2b:69:5a:01:72:b2:86:57:
b9:70:ee:64:e8:40:aa:7f:26:3b:42:54:6e:c3:93:
e1:c0:cb:0f:05:af:8e:03:64:51:39:3e:5c:42:63:
35:85:d7:de:88:0e:a9:40:df:b4:0b:83:7d:3a:af:
b7:d0:df:bf:e5:31:79:b9:7f:04:39:dd:62:8f:dd:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AA:C5:05:4C:8B:73:72:A3:75:9E:51:D6:76:36:BE:FE:99:1D:9A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6arFBUyLc3KjdZ5R1nY2vv6ZHZo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:fe:b8:3e:d7:f1:52:ba:7d:fa:28:6c:cd:b4:31:69:d3:59:
57:43:3f:a7:a2:af:79:65:1d:b2:00:c1:c8:7c:62:e2:1a:fa:
e5:4f:64:d1:f6:95:1e:37:bd:80:38:2e:14:b2:c2:23:12:98:
6f:f7:5b:38:ff:2f:02:45:ec:7a:fa:29:b5:a6:f5:34:ae:51:
25:73:06:92:f5:43:e4:d3:4b:68:ed:a9:0e:fb:cc:a5:d1:94:
37:d1:a8:37:f1:32:df:04:b3:29:e0:fe:47:cb:2b:94:45:c7:
88:18:1d:3f:92:f2:b9:ab:ff:b7:51:be:7f:14:8f:63:71:28:
33:2f:68:c5:a2:0d:d9:5d:c6:e9:20:22:9e:99:62:4e:5e:4e:
ab:41:fb:a7:54:c8:4a:3b:22:28:a3:94:22:e3:6c:f0:33:af:
0a:a9:46:00:fb:96:39:44:7c:9a:0f:cb:60:b2:fd:dd:6d:31:
93:b6:a2:8d:fc:9d:f7:7f:2b:a9:0b:0f:05:08:6e:9a:b3:94:
70:c0:7a:db:b4:73:18:e9:26:e0:ba:0a:c8:fe:62:a9:8a:8e:
54:84:80:56:ab:56:ea:e1:ae:7f:d2:f1:15:68:03:26:d2:14:
a2:37:fe:81:25:5d:35:9e:25:37:57:f7:fc:40:80:f8:f3:26:
34:cd:3b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:34:29 2025 by rpki-client