Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Djv1M3xCpQf_HNnSXaioCIDdNQA.roa
File: Djv1M3xCpQf_HNnSXaioCIDdNQA.roa (raw, json)
Hash identifier: v/ofGhpqBQmlr+LwXIBliLSPEFGJ5dbOVGrMWb9kGKQ=
Subject key identifier: 0E:3B:F5:33:7C:42:A5:07:FF:1C:D9:D2:5D:A8:A8:08:80:DD:35:00
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 12DA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Djv1M3xCpQf_HNnSXaioCIDdNQA.roa
Signing time: Wed 10 Apr 2024 05:53:08 +0000
ROA not before: Wed 10 Apr 2024 05:53:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4826 (0x12da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 05:53:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0E3BF5337C42A507FF1CD9D25DA8A80880DD3500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:1b:a1:9b:79:be:42:7a:96:96:8c:ab:da:
59:5f:02:0c:50:51:33:4b:1c:f1:67:c4:a3:7c:43:
63:7d:48:58:a2:e7:15:b4:3c:49:bf:5c:e1:f8:47:
44:37:b4:20:73:15:b9:56:16:62:a8:96:6d:e5:d5:
58:0c:2e:c3:4c:fc:3f:3b:30:4b:f1:0f:f2:ce:76:
73:02:07:0f:2b:b2:93:e7:8b:74:83:26:04:b8:32:
a3:75:2b:e6:41:98:40:83:c4:bf:80:55:3f:4d:6d:
f0:6e:4c:7e:da:20:ee:64:8e:5d:d8:a6:93:7e:4f:
3b:aa:58:5e:47:67:e5:19:ca:86:5a:5f:f7:42:59:
c9:ca:c5:e4:e4:d9:bd:1f:0b:98:2d:17:17:8a:5b:
80:ff:fa:f4:6d:16:fa:eb:19:3d:ac:39:93:d3:fe:
06:ee:05:38:23:c1:67:c4:86:8b:f8:ef:9c:72:b0:
5b:5a:4f:e7:8b:3d:58:64:97:66:4c:e4:69:23:1d:
de:86:cb:0c:33:27:f9:aa:ba:4a:1d:38:30:6d:ca:
05:ad:81:06:a7:ad:a9:0a:cc:20:62:5a:08:c2:66:
9f:a9:5d:3e:6d:06:d8:2f:4b:37:28:eb:db:dc:6f:
9b:cb:fd:ab:25:7d:74:b0:99:23:28:bc:a9:77:af:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3B:F5:33:7C:42:A5:07:FF:1C:D9:D2:5D:A8:A8:08:80:DD:35:00
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Djv1M3xCpQf_HNnSXaioCIDdNQA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:e3:cd:d4:a1:a5:90:30:58:c7:aa:d9:60:92:52:8c:9a:c1:
02:52:fc:c1:72:65:d0:70:3e:a6:15:95:cf:1c:1d:39:15:d7:
76:9a:7a:9f:37:d6:e5:02:69:31:e7:f2:c0:5c:8f:b7:20:c3:
2f:d6:3a:8b:28:80:5c:53:e0:32:dc:3d:bf:fc:3f:93:a2:44:
2e:47:96:3c:1b:c8:82:bc:18:de:a1:0d:73:24:fd:17:d7:f4:
e8:87:47:97:9c:4b:3f:91:3a:49:e4:d9:3a:33:f8:05:2a:b0:
d1:43:a1:02:a1:e7:ef:89:50:ca:69:5d:07:24:9b:d7:36:ac:
22:27:4b:bd:5b:d7:77:ec:69:f4:6d:73:b5:c0:73:ef:01:f3:
15:0a:d3:cb:59:c0:db:db:34:23:a6:54:31:f9:50:a2:d2:e1:
fe:f6:f7:e7:1f:79:71:b1:ce:e5:09:a6:fa:5a:28:b5:cc:cd:
6f:c2:c3:05:84:1b:c0:ff:97:7e:7c:1a:b3:59:53:f4:de:42:
f5:b3:1b:a3:69:3a:8b:bf:65:ea:69:96:82:f4:17:e0:a4:2a:
83:fa:b7:c0:ac:44:f9:b0:50:ee:3a:bc:03:c1:8c:c6:62:c1:
7f:e0:9d:98:09:2b:b4:02:b8:e6:03:4d:37:1f:29:84:23:03:
4a:04:38:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:28:48 2025 by rpki-client