Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/9Xf2QtjwJzXy_myAjqxuQmjFQJQ.roa
File: 9Xf2QtjwJzXy_myAjqxuQmjFQJQ.roa (raw, json)
Hash identifier: wRL+Xl3hW8SwFLgmheVChJ5kaOTSpqoWZZA6i1dO4wo=
Subject key identifier: F5:77:F6:42:D8:F0:27:35:F2:FE:6C:80:8E:AC:6E:42:68:C5:40:94
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0DD6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9Xf2QtjwJzXy_myAjqxuQmjFQJQ.roa
Signing time: Wed 27 Mar 2024 20:52:26 +0000
ROA not before: Wed 27 Mar 2024 20:52:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3542 (0xdd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 27 20:52:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F577F642D8F02735F2FE6C808EAC6E4268C54094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:1e:36:43:38:b1:0a:30:9e:2c:27:02:87:
be:fd:04:52:59:1c:85:b4:a4:cf:fe:90:35:96:a7:
8f:b9:d7:aa:da:b8:d0:27:e6:e0:77:e8:8d:f9:b5:
35:a5:aa:ab:df:d5:78:fa:21:3a:45:ef:5b:de:5a:
07:c6:81:b6:a2:91:2b:f6:69:89:87:6d:08:9f:53:
30:b3:bc:6d:45:32:d3:e4:43:da:6c:31:fe:ec:91:
e3:69:61:53:81:88:13:6e:a0:2b:f7:96:e4:a4:04:
f7:a2:a1:c8:4a:b3:35:f9:60:71:fd:d1:ab:26:08:
45:4b:6c:31:db:a2:89:10:18:cd:59:84:3e:bd:cc:
78:a7:ae:68:73:37:76:b2:30:2a:37:f4:4c:27:75:
7f:da:89:5e:2e:11:09:9b:bd:25:77:cc:d7:b3:65:
36:6c:d8:8b:1b:cf:5d:fe:f5:39:ea:2c:c9:43:19:
30:e1:10:69:87:cc:31:87:7e:38:32:aa:98:21:7f:
d0:0c:9f:ff:1b:db:d5:0f:f8:ee:31:64:97:d7:99:
b3:93:42:53:ad:e1:93:07:ab:3e:75:14:dc:be:ae:
ef:f3:10:0a:b7:8a:0d:d4:ac:95:79:e5:1d:56:66:
a6:50:f1:af:95:91:ea:ec:85:d8:92:79:f4:ed:4d:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:77:F6:42:D8:F0:27:35:F2:FE:6C:80:8E:AC:6E:42:68:C5:40:94
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9Xf2QtjwJzXy_myAjqxuQmjFQJQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:7b:99:5c:4d:88:90:60:64:cb:24:99:8a:3d:3f:d4:33:6d:
de:d9:60:f5:29:88:7f:1c:f8:72:f5:83:10:cb:26:a9:ab:a3:
c0:a7:ca:c8:37:1e:af:21:d5:a7:49:43:8d:c4:92:65:d0:c1:
61:58:23:29:f2:16:92:bc:b5:37:8a:c3:6e:4e:47:dd:b7:75:
83:9d:06:1f:f6:74:b9:69:1f:ff:41:9e:b7:bc:b7:c4:84:37:
ce:88:03:a9:19:c4:e7:ac:47:0f:77:fb:51:86:ce:62:2a:81:
46:b3:d9:2b:56:32:b8:40:66:2e:e3:05:d9:c2:5a:ef:38:4b:
1d:00:e7:c4:b4:a3:bf:38:99:79:7b:70:62:19:d8:63:31:15:
8d:36:41:59:cb:c8:e8:26:85:c5:27:ce:8b:48:dc:ba:43:43:
bc:36:36:7b:cb:46:d8:3e:b2:ac:b0:2d:e5:0b:73:ea:3f:2f:
a5:b0:16:62:98:b9:57:97:f5:b4:eb:c0:38:50:ef:5e:67:8d:
6d:32:99:41:18:d6:0b:1d:34:b5:2c:7f:82:66:16:18:9c:34:
02:e7:b9:d9:f7:a8:d0:c4:b5:af:79:6d:5e:b3:56:5b:fc:be:
63:aa:8b:96:6b:16:4d:c5:7a:60:1c:21:ef:fd:93:d1:93:b8:
1a:06:5d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:31:38 2025 by rpki-client