Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/CPduTHLTVQGwM0EFlE6Fg4WwPGU.roa
File: CPduTHLTVQGwM0EFlE6Fg4WwPGU.roa (raw, json)
Hash identifier: 0UrVWTd7P29plDjEiyqu9PcEgF1W+d1APb7sBqNXFlY=
Subject key identifier: 08:F7:6E:4C:72:D3:55:01:B0:33:41:05:94:4E:85:83:85:B0:3C:65
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1074
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CPduTHLTVQGwM0EFlE6Fg4WwPGU.roa
Signing time: Wed 03 Apr 2024 20:22:48 +0000
ROA not before: Wed 03 Apr 2024 20:22:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4212 (0x1074)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 20:22:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=08F76E4C72D35501B0334105944E858385B03C65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:06:70:52:76:cd:71:00:05:2a:4f:e4:41:
de:21:b1:39:6b:b5:80:15:d3:5c:e9:02:f4:f3:65:
1e:77:41:3d:0d:2f:d4:eb:ca:af:06:1e:83:42:7d:
cc:53:ad:0c:41:2c:03:97:02:6d:98:18:2d:19:a1:
e5:74:12:53:d5:06:88:d0:27:ec:9a:3a:83:fc:08:
e2:85:ea:2d:a0:83:3c:07:0b:bb:66:c9:bb:a0:b2:
03:a6:9d:38:01:f7:5f:4e:88:71:2e:f2:a9:8f:44:
c1:24:50:48:b1:24:30:6e:26:27:a2:01:9f:3a:95:
c5:eb:fe:41:8d:82:57:ad:6e:49:9b:b7:02:74:2b:
61:9d:84:36:49:97:2a:46:8b:08:c4:04:3f:5d:cf:
3c:b6:2e:5b:4a:1f:9f:91:26:c2:73:bb:40:cc:53:
30:bb:fe:d5:3a:6e:7e:78:25:74:6f:6a:c3:81:bc:
f3:6c:eb:99:be:d6:a1:6e:27:7b:5a:35:b4:dc:05:
20:9e:54:b6:ff:9f:7e:40:28:2a:7b:3d:f2:b4:28:
e0:2b:5e:4d:70:39:4e:e9:b1:21:fa:08:33:98:e9:
99:b4:86:51:2b:91:32:61:0f:fc:18:44:f4:45:cd:
a3:94:19:1a:63:4f:48:36:3a:07:66:6b:f8:62:a4:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F7:6E:4C:72:D3:55:01:B0:33:41:05:94:4E:85:83:85:B0:3C:65
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CPduTHLTVQGwM0EFlE6Fg4WwPGU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:3d:3b:3d:50:e1:4d:ac:6b:73:24:86:0c:9a:4a:a9:14:8c:
3d:f1:7c:3b:39:24:b4:e1:a1:4e:8a:a1:f2:2e:3f:72:5e:8e:
02:52:ad:59:44:ef:df:2f:02:7c:c1:52:cc:7a:3d:f2:13:52:
f1:0f:f6:ff:3d:b6:d5:d9:e0:3a:37:6a:c0:f6:8f:67:0d:71:
c8:d4:63:68:45:1f:b9:3e:f8:f2:42:ec:84:e5:4d:7b:c4:fc:
b9:1a:80:f3:fa:fe:24:fe:13:ee:9d:53:cc:b9:22:0e:4c:9f:
cc:23:75:e8:24:d3:60:6c:14:36:54:57:9c:88:15:99:d9:61:
9f:ea:7e:f2:a9:a6:f6:00:ef:b4:d2:b7:0c:15:61:6a:aa:3b:
c0:32:a6:df:4a:99:44:72:f4:d1:5f:4b:a3:3b:58:e3:46:91:
3b:95:4e:bc:2d:7b:bc:c4:5f:c3:7b:7f:c1:bb:e8:75:c5:75:
6f:eb:22:fd:21:13:5e:5f:0c:c8:be:68:e9:3c:d2:75:f2:99:
81:f7:57:da:2c:f0:57:e9:32:66:8c:53:62:51:7b:5e:32:02:
a5:a7:af:3f:18:48:df:7d:95:df:54:f6:ad:f2:b9:90:ef:4d:
7f:e5:f0:f9:09:a5:05:9e:e6:7f:9b:18:11:b3:9b:ea:cb:10:
5e:13:b4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:37:08 2025 by rpki-client