Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/B_l392ssLvb59xkR6hJL9WIhcZY.roa
File: B_l392ssLvb59xkR6hJL9WIhcZY.roa (raw, json)
Hash identifier: bgDu9jtuXOXsd5LuE/09p2XzPri8LbSImeQ7sRtocsQ=
Subject key identifier: 07:F9:77:F7:6B:2C:2E:F6:F9:F7:19:11:EA:12:4B:F5:62:21:71:96
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EA6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/B_l392ssLvb59xkR6hJL9WIhcZY.roa
Signing time: Sat 30 Mar 2024 00:52:36 +0000
ROA not before: Sat 30 Mar 2024 00:52:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3750 (0xea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 00:52:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=07F977F76B2C2EF6F9F71911EA124BF562217196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:25:43:0d:2d:29:15:17:ff:5f:56:74:f1:
37:b8:1a:4b:20:e7:b2:08:8a:13:65:9a:5e:ae:80:
e9:c9:db:19:7e:57:4e:d0:43:d4:d7:5a:0c:a8:77:
0b:f6:8b:49:eb:9d:2f:58:4c:d7:95:49:4f:9e:bb:
93:44:79:83:c0:7b:81:72:23:b2:c0:87:47:77:6b:
fb:56:a2:19:46:57:60:29:56:e1:20:ee:17:8f:ea:
f1:23:39:cf:aa:10:fd:1d:ba:87:72:c3:9d:b0:44:
ea:64:b3:11:26:08:24:df:8d:0d:46:d1:d5:36:02:
e7:b8:70:95:af:49:cb:10:fb:82:b2:35:cb:a9:16:
4e:57:a9:01:c4:38:6a:c7:92:f5:eb:e6:fc:dd:a7:
20:53:0d:f2:27:bb:4d:bb:0e:ce:f2:f2:62:d7:59:
e0:aa:f3:c3:d9:09:13:09:91:db:6a:d9:4e:a7:b3:
3a:c9:88:e1:1e:d7:f8:bf:6d:f6:58:1f:44:0f:85:
c4:6f:03:87:71:e2:80:86:4b:45:e1:1d:8c:fc:20:
af:a2:53:36:9f:d1:16:26:3c:5c:c3:6a:a3:49:94:
08:e4:17:9f:52:f0:da:5c:79:66:aa:77:e9:7f:34:
b2:86:7c:d0:24:b3:55:bd:09:42:dd:bc:9c:be:95:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:77:F7:6B:2C:2E:F6:F9:F7:19:11:EA:12:4B:F5:62:21:71:96
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/B_l392ssLvb59xkR6hJL9WIhcZY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:74:e8:81:4d:91:03:7e:2c:d2:06:5f:f8:2c:06:f8:08:a9:
c6:d2:11:16:29:da:ad:b2:09:41:eb:3f:a8:9d:5b:e9:ea:0f:
b5:0e:ff:15:62:c9:ed:b3:07:4e:6a:2f:f2:5f:7b:95:08:1d:
90:ba:a6:52:38:fc:f7:e1:c7:f9:f8:f0:a1:e4:c5:1e:09:07:
d3:bf:c3:e6:3f:c0:a0:14:11:ca:8e:3f:70:a4:58:61:b0:bb:
c7:9c:ee:d2:20:58:16:81:e0:49:d0:ef:66:64:c9:17:e0:92:
47:85:48:f0:28:d4:fa:1d:c2:48:a3:ef:d1:13:4b:7e:0f:5c:
75:ff:fc:db:2e:a6:10:27:77:ac:e7:e7:e8:22:27:f0:ad:b5:
ce:62:72:6f:9b:d0:43:5e:ff:f1:d6:f8:69:81:45:ff:65:71:
7b:81:ad:df:b0:e8:f5:31:aa:c6:44:13:3a:2c:ed:b9:f7:f0:
3e:29:e6:70:ef:33:a9:75:82:f9:55:3f:46:77:e1:35:b3:ae:
aa:db:0a:9b:66:1e:f0:d1:51:98:77:39:2c:2a:b4:af:ef:f2:
ee:02:33:ef:df:a3:5d:90:58:e5:87:bc:46:8c:10:3e:f1:ce:
71:c8:64:6e:92:e5:f1:b9:d5:40:d6:53:93:29:91:1f:8c:b4:
13:ab:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:37:10 2025 by rpki-client