Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/F7HmalkOrMIKUdi9pCAtA443JeY.roa
File: F7HmalkOrMIKUdi9pCAtA443JeY.roa (raw, json)
Hash identifier: AATOX5xFVvB2/W8yu02WGBbJ5EvLhG/QlugyFF92te0=
Subject key identifier: 17:B1:E6:6A:59:0E:AC:C2:0A:51:D8:BD:A4:20:2D:03:8E:37:25:E6
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1384
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/F7HmalkOrMIKUdi9pCAtA443JeY.roa
Signing time: Fri 12 Apr 2024 00:24:04 +0000
ROA not before: Fri 12 Apr 2024 00:24:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4996 (0x1384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 00:24:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=17B1E66A590EACC20A51D8BDA4202D038E3725E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:63:07:ec:22:cb:b6:17:f1:f8:ed:1b:96:
b6:5a:99:8c:dc:fe:2c:a2:30:56:ee:28:c6:72:61:
2c:e0:71:f7:dc:6a:a0:74:98:09:99:e4:03:e4:dc:
de:6f:f9:de:63:99:1d:25:4f:5e:1e:7e:e1:e3:17:
1d:36:38:4f:0f:dc:e9:65:97:ea:84:b9:9c:b6:86:
81:e2:fc:56:b8:2d:3e:23:0a:9c:29:5a:9d:2f:11:
6f:b7:2a:42:28:4e:b9:f7:23:89:93:74:8e:2f:1e:
96:2f:50:aa:4d:8b:52:86:40:09:9e:46:ec:90:c1:
a0:b2:64:8d:f2:fa:2d:fe:07:24:a3:fa:92:a1:50:
8b:30:0d:40:9e:17:0a:d0:fc:de:fb:28:9f:ac:ff:
dc:50:d9:cc:3c:59:25:b3:2f:d3:bd:eb:10:09:4a:
fc:dd:00:b6:44:14:cd:2f:c4:ac:e6:ad:fa:2c:8e:
f2:ef:59:b8:ec:d5:e3:75:56:7a:8b:70:a4:a9:2a:
7e:ac:a5:b1:4a:75:21:8a:99:3d:83:b8:f0:52:a2:
87:7d:c1:8a:f2:b4:5e:73:6d:39:35:7b:4b:39:c4:
c9:f4:49:d9:12:84:3a:d7:87:64:d7:f8:fb:cd:b0:
85:5a:5e:5d:89:fa:1d:1e:6c:1b:3e:68:74:fd:86:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B1:E6:6A:59:0E:AC:C2:0A:51:D8:BD:A4:20:2D:03:8E:37:25:E6
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/F7HmalkOrMIKUdi9pCAtA443JeY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:d8:d7:86:ff:6e:66:fc:d4:60:bd:84:e6:1d:72:ae:1f:2e:
40:b9:e2:00:cc:c6:2e:cd:30:c7:0d:88:9c:9f:89:ce:3d:45:
6e:89:13:14:1c:e6:15:b9:cd:f5:85:e7:e4:03:28:5f:c4:fe:
cc:24:b6:63:58:c3:65:f5:48:7d:e0:8f:d4:ae:f0:9d:ba:4f:
d0:12:a8:6a:77:08:fd:8f:19:28:6e:c3:89:ff:c0:4f:86:6b:
8c:4c:33:94:3a:3c:b0:bc:d0:c6:c0:10:71:9c:78:33:37:cd:
d9:49:23:c9:3b:f5:80:87:7f:ba:8f:ea:55:bd:f1:fe:fa:e2:
65:a9:e2:63:49:e7:b0:0a:8a:e1:64:80:80:2c:48:d2:e0:c1:
52:cf:db:4a:71:87:bf:f6:cf:aa:8f:a7:68:62:c0:3f:39:af:
51:80:bb:e9:b3:03:1c:71:af:33:20:5c:6c:06:56:66:a0:cf:
6b:d9:4f:59:fd:87:e7:97:af:80:23:b8:f4:0d:61:53:7f:f9:
6b:62:66:70:4c:3f:aa:57:10:4f:c9:e8:14:89:bf:2d:f3:4b:
55:47:35:9d:78:8f:f7:8f:f8:cd:a7:6d:7e:a1:ad:59:b9:8b:
c3:0a:07:79:7e:cc:4f:6f:87:da:53:d1:08:84:6b:48:35:5d:
33:dc:dc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:37:11 2025 by rpki-client