Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/9ktbJVEbVU6NzCmoGb_z8JsRwHw.roa
File: 9ktbJVEbVU6NzCmoGb_z8JsRwHw.roa (raw, json)
Hash identifier: j3ditV+6stDOkC0PLRmHxnHFEO/sEm2y43V2PssOdn4=
Subject key identifier: F6:4B:5B:25:51:1B:55:4E:8D:CC:29:A8:19:BF:F3:F0:9B:11:C0:7C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C12
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9ktbJVEbVU6NzCmoGb_z8JsRwHw.roa
Signing time: Sat 04 May 2024 19:54:27 +0000
ROA not before: Sat 04 May 2024 19:54:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7186 (0x1c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 4 19:54:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F64B5B25511B554E8DCC29A819BFF3F09B11C07C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:35:6f:d4:c9:9a:91:83:b1:5c:af:a1:4f:
5f:6c:6a:5b:11:b5:85:3b:aa:38:d3:28:66:02:41:
ee:5a:c1:66:68:81:45:38:b5:2c:ad:a8:db:7f:1e:
a7:99:9d:ac:f0:2e:43:c4:77:6a:4d:56:33:d3:21:
86:7a:5a:0a:a0:f0:38:ff:eb:e0:6c:9d:5d:46:bb:
13:b2:13:26:c4:d7:cb:03:95:47:5a:91:b2:8e:46:
34:c6:f5:38:a1:04:ff:f3:a1:4c:1a:54:91:69:b5:
f4:36:f2:87:8f:6a:ad:ce:da:48:77:d5:5a:b6:a7:
7e:b7:b8:de:80:d1:27:60:42:f6:28:5f:78:0d:6d:
73:39:4e:43:c8:19:3b:6b:21:98:7d:90:cc:a3:49:
81:8e:4c:91:ca:58:61:d3:f3:a7:8a:c6:f7:3f:a5:
fc:d2:ff:06:66:b4:78:d8:6c:f2:7c:ee:47:f5:dd:
44:00:20:03:27:ab:bf:ca:69:e3:36:ae:40:1c:0b:
e0:52:c2:09:d3:af:f8:fc:ab:72:fe:a7:8d:a5:39:
a3:94:e6:d8:d3:81:f1:17:72:0d:d0:79:7f:6b:dc:
58:82:55:7f:e2:ab:80:a1:e1:f7:39:5c:98:0e:a0:
ec:28:11:09:0d:c6:41:58:21:48:10:ec:df:ed:b4:
15:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4B:5B:25:51:1B:55:4E:8D:CC:29:A8:19:BF:F3:F0:9B:11:C0:7C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9ktbJVEbVU6NzCmoGb_z8JsRwHw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:bd:58:88:15:4a:73:b2:75:90:3c:18:40:4e:a8:68:21:e2:
c5:d6:63:bd:7d:e3:d8:94:bd:28:55:98:5d:43:8b:ef:57:0f:
a0:4b:f5:b3:ad:6e:a4:c2:32:7e:14:c6:40:c5:64:17:20:ab:
39:2f:26:a1:bb:75:9a:4d:a4:5b:ee:63:94:26:71:ac:c4:af:
3e:40:fa:a6:b6:b8:39:5d:9d:5f:80:a1:5a:81:65:e4:2a:03:
16:d4:56:0a:12:f3:c2:2e:ab:40:3d:c6:4e:77:82:4f:e4:c0:
c6:75:8a:c7:08:9d:31:0c:c9:a9:28:06:37:b1:d8:65:b9:71:
65:b1:81:c9:cf:86:10:7c:88:b7:69:3d:d7:66:bd:85:51:16:
e5:a7:23:ca:f3:91:f7:81:9e:50:ce:68:d1:e0:33:4b:48:a9:
51:8e:e1:e9:51:9a:0d:c5:fe:11:2e:50:41:79:4b:7f:ec:24:
4c:3d:cb:1f:2e:24:14:37:e8:31:b9:80:f3:02:c8:76:ad:4d:
50:2a:c0:5b:30:52:6a:0c:49:7e:8e:6b:e3:27:f9:c5:0f:72:
2d:cb:8b:04:cc:e8:c5:d6:96:7b:d7:bb:32:e6:72:3b:3b:05:
02:a4:b3:a5:75:9d:4c:ec:ca:83:03:2f:aa:f6:46:b5:56:11:
60:ca:22:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:24:28 2025 by rpki-client