Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/GBS_KqJrY1unY8vk-vF2zZe32mQ.roa
File: GBS_KqJrY1unY8vk-vF2zZe32mQ.roa (raw, json)
Hash identifier: sq05dMWTZ6omE+XHGPy60KDyEDtj/7Grx+f+JWYbROw=
Subject key identifier: 18:14:BF:2A:A2:6B:63:5B:A7:63:CB:E4:FA:F1:76:CD:97:B7:DA:64
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EAA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GBS_KqJrY1unY8vk-vF2zZe32mQ.roa
Signing time: Sat 30 Mar 2024 01:52:36 +0000
ROA not before: Sat 30 Mar 2024 01:52:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3754 (0xeaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 01:52:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1814BF2AA26B635BA763CBE4FAF176CD97B7DA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:e6:ef:b3:aa:7a:ec:71:57:e8:78:fa:b5:
35:ed:d1:51:d3:d0:f8:85:a8:66:99:30:28:9e:c0:
47:cf:bf:fd:c1:e2:fa:e8:97:f1:a9:72:a5:9e:f4:
44:a9:08:0a:09:e4:ab:99:fe:27:ef:95:4b:1f:59:
b7:c0:9c:c0:d1:69:5a:85:e5:3d:d0:00:98:f1:16:
e4:ce:95:d0:e1:d1:15:87:76:2a:c3:86:bb:e6:ab:
b9:7a:dc:5d:7e:9f:bf:31:68:27:06:49:4b:f5:21:
c8:cc:45:9c:25:8e:89:9f:fd:d1:08:66:f5:c3:c3:
70:4b:60:2a:43:43:e0:ad:3b:5c:18:01:b5:79:4e:
54:38:40:99:19:f8:b6:ec:43:2a:a4:8d:d3:6e:5e:
9e:0b:51:6c:3f:d5:90:73:4d:ff:4d:38:09:0b:14:
d2:b7:07:b0:65:0e:b3:6a:1a:a0:84:94:4f:a2:0d:
7d:6a:8f:6e:29:54:6a:a5:ad:32:f3:e0:3c:03:e7:
9b:72:82:f5:ca:4e:80:67:70:5f:be:17:31:5b:c9:
fc:33:90:b5:f1:37:99:a6:88:82:a7:b7:56:1b:ee:
67:1f:6b:0e:56:8a:92:f9:e3:09:c3:b5:73:ee:85:
8d:4f:cd:7b:98:7d:13:04:d2:e3:be:65:70:7c:01:
30:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:BF:2A:A2:6B:63:5B:A7:63:CB:E4:FA:F1:76:CD:97:B7:DA:64
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GBS_KqJrY1unY8vk-vF2zZe32mQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:d9:bb:9f:b7:6b:c3:28:d7:33:cd:cb:75:af:2f:75:1e:fd:
50:52:41:7b:85:66:8a:ea:19:ac:01:68:06:83:6c:f8:9e:23:
04:a8:a7:7c:e4:d5:1c:9b:02:36:4e:7c:87:8b:17:e8:46:41:
55:67:a5:f1:8a:73:33:97:b3:1c:47:68:6f:7f:ac:8f:10:f7:
ac:ea:57:79:96:23:1f:37:f1:73:1d:60:43:a5:dc:ea:03:a6:
e9:1e:66:bc:f1:8b:c7:18:9d:09:62:70:0f:35:86:d9:01:32:
f7:28:74:30:6a:31:43:ad:82:4d:31:df:fd:f0:4b:e8:bd:ee:
7d:76:40:be:82:37:dc:30:51:dc:d1:90:20:a5:0e:b7:46:a2:
f2:49:15:a9:ec:06:a5:86:59:cc:ab:6f:b1:9e:0e:96:1a:c9:
79:50:0f:81:6e:d7:1b:3f:7b:93:6f:d9:48:f1:cd:de:26:40:
60:9f:0a:59:4a:63:42:d5:8b:55:5d:87:2f:07:bb:10:62:b9:
05:c9:67:26:d4:c1:4b:11:ea:30:af:28:93:a8:39:d8:54:49:
30:28:b6:42:bd:55:6c:35:d7:7c:16:2e:5e:94:67:29:54:09:
e2:69:a5:5b:c3:d6:02:08:a5:62:b0:26:b9:11:d3:e6:8f:f4:
58:2d:f1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:15 2025 by rpki-client