Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/BV_1HAeA-UoK2NyKCquico_iMWs.roa
File: BV_1HAeA-UoK2NyKCquico_iMWs.roa (raw, json)
Hash identifier: 9/2CoHrH2diOT8DEllKN1fVP1imd5sfaopqZIibddo4=
Subject key identifier: 05:5F:F5:1C:07:80:F9:4A:0A:D8:DC:8A:0A:AB:A2:72:8F:E2:31:6B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15D0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/BV_1HAeA-UoK2NyKCquico_iMWs.roa
Signing time: Thu 18 Apr 2024 03:23:24 +0000
ROA not before: Thu 18 Apr 2024 03:23:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5584 (0x15d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 03:23:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=055FF51C0780F94A0AD8DC8A0AABA2728FE2316B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:e1:66:ee:28:77:c9:78:ca:d2:4c:26:1f:
fe:c4:ad:f1:3c:cf:4f:88:87:c8:a6:db:5a:eb:54:
f6:5a:08:58:48:e3:d7:ec:76:3c:cc:d8:64:f4:49:
d8:02:6b:5b:7f:8b:38:41:0e:d8:b4:9a:39:ef:fb:
a8:86:05:94:5f:41:31:a2:dc:db:c5:ab:34:24:d9:
f8:a0:af:1b:b6:19:07:69:50:22:f6:08:1a:5d:c0:
19:99:b5:9a:bd:f3:4f:c2:c2:b8:3a:24:28:07:f7:
79:17:69:d3:db:34:0c:e0:6f:a3:b3:f0:0c:ba:8c:
ca:e7:0b:2c:3c:97:e5:53:36:14:9e:0a:f7:22:8f:
80:10:33:4c:21:fb:76:e1:ef:cf:4e:11:2a:fb:2d:
93:be:68:df:2f:6f:59:7c:2d:44:f7:67:68:2e:63:
15:39:e4:16:4b:62:ed:5e:4b:df:01:2c:b3:f0:27:
d7:23:e4:76:6d:b2:8e:09:ad:24:b0:77:8e:1c:69:
c0:19:9c:7a:1e:d9:58:82:00:ac:6f:ea:76:48:82:
2a:5f:c0:68:5f:c5:14:3d:de:46:fd:1f:d2:f9:6b:
08:16:e7:5a:8f:f1:16:b9:d6:48:b1:67:9a:88:80:
93:9a:35:ee:73:df:a8:20:43:ba:e1:e3:f5:6a:c4:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5F:F5:1C:07:80:F9:4A:0A:D8:DC:8A:0A:AB:A2:72:8F:E2:31:6B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/BV_1HAeA-UoK2NyKCquico_iMWs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:08:6b:c6:81:58:d8:a9:07:15:1c:24:05:a5:91:3d:37:7f:
21:eb:6a:b5:b0:53:4c:f8:68:6a:a8:e8:05:6d:22:62:12:65:
5e:3d:57:80:00:94:ca:82:ae:13:73:51:cf:62:94:58:e8:ae:
8e:48:0e:75:6b:11:fe:78:0d:86:b3:98:80:1e:4e:72:dd:11:
c1:ca:e4:dc:32:7c:36:12:f1:ac:dc:8c:95:e8:d0:5f:81:3e:
a9:e7:ec:b7:9a:a7:86:67:dd:20:29:63:f7:5e:47:b7:4a:df:
e0:fe:42:0d:31:c1:c9:bf:1b:a8:a2:3e:c5:d9:9f:4b:f9:6f:
57:e7:30:28:36:bb:fd:6f:89:5b:eb:4b:cf:9b:2a:77:91:23:
d0:71:ae:a8:69:69:3b:2f:3d:72:f9:97:f2:75:fc:e0:b5:ab:
f7:38:dd:81:b1:46:ef:ac:2f:8d:4f:6b:12:83:91:51:21:34:
df:c4:12:99:b1:e3:33:fb:54:5e:56:06:ac:ab:84:d5:91:81:
f9:1f:f8:f6:eb:89:83:0a:92:45:b4:79:3e:7f:22:e7:08:e9:
58:da:59:a7:6c:75:ed:4d:63:f5:49:dd:97:89:23:69:d7:4f:
0e:0b:d0:51:50:0a:92:00:36:9c:c9:17:23:17:97:88:43:03:
4d:94:91:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:19 2025 by rpki-client