Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/GTOU1MDT_3huswAGml_wtFGE18A.roa
File: GTOU1MDT_3huswAGml_wtFGE18A.roa (raw, json)
Hash identifier: dBBdq2SVQvVgs6KZSdUq5SbNX/nJNR0JKt/M+28mGls=
Subject key identifier: 19:33:94:D4:C0:D3:FF:78:6E:B3:00:06:9A:5F:F0:B4:51:84:D7:C0
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 11A6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GTOU1MDT_3huswAGml_wtFGE18A.roa
Signing time: Sun 07 Apr 2024 00:52:54 +0000
ROA not before: Sun 07 Apr 2024 00:52:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4518 (0x11a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 7 00:52:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=193394D4C0D3FF786EB300069A5FF0B45184D7C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:d9:21:a4:ee:1a:72:af:92:aa:1f:e6:75:
a8:ff:ca:73:80:f3:4d:f1:5e:d1:ed:5d:4d:6b:22:
5b:2d:1a:cc:d5:12:3d:c4:92:11:7c:45:79:2b:5b:
6e:ac:b2:1e:9c:07:1b:c0:1e:78:70:dc:27:c6:6c:
8e:d8:80:c2:40:8c:0d:0a:7a:42:8c:18:f0:81:67:
10:ba:77:47:7a:42:0a:0c:b3:33:fe:33:7e:92:8b:
4a:dc:2d:98:30:fd:b9:cf:2d:6f:71:7b:84:e4:97:
35:48:b5:35:38:13:fa:28:98:8c:16:1c:eb:e7:58:
64:e9:11:3d:e4:a1:65:ca:43:5f:11:37:14:b4:55:
bd:a3:f9:09:35:89:c0:4f:62:1f:e3:b9:05:7b:dc:
ad:fe:1d:c2:68:09:5f:1f:dc:bc:8f:5e:c6:53:c4:
39:a2:c3:d2:d1:2e:13:b2:dc:34:a1:bb:39:59:f4:
c6:5b:bf:ed:57:d3:6b:44:11:1a:10:8e:7a:59:10:
04:ec:d8:83:44:4c:c8:cd:18:f7:23:08:5a:b1:f7:
e4:0d:46:b7:df:92:c5:49:7f:d6:10:e2:2e:64:63:
99:0b:b5:47:d0:a6:9e:30:ef:2d:47:4a:a8:8d:04:
7a:07:d3:7d:61:6f:ea:24:44:7e:1e:ab:28:a8:79:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:33:94:D4:C0:D3:FF:78:6E:B3:00:06:9A:5F:F0:B4:51:84:D7:C0
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GTOU1MDT_3huswAGml_wtFGE18A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:f6:ed:f0:0a:24:3a:7e:ee:40:03:1a:ac:0b:58:f9:2d:0a:
ce:6c:2d:96:2c:c0:57:68:5a:ce:75:36:50:45:1b:a7:77:29:
36:6d:da:be:aa:1c:71:30:f7:ed:14:04:82:12:82:5b:44:71:
1c:29:29:d4:25:82:12:78:4c:ba:8f:b7:13:e2:4a:3e:11:0b:
ab:da:9d:19:48:4b:2a:49:75:84:ce:05:f2:23:3c:50:09:1e:
60:25:b6:15:79:4c:89:1d:e5:5b:ec:49:1e:e9:0b:1d:43:2f:
88:0b:b6:83:a7:88:92:7e:c1:dd:2a:6e:81:b4:57:9b:85:8d:
ca:81:6f:2a:0e:b0:f8:5c:5b:e5:11:8e:35:58:9f:c8:2f:45:
70:cb:b1:82:e9:91:97:ea:1f:2a:3b:c6:9e:34:23:b9:f2:f6:
a8:a6:b2:47:4e:0a:f9:c6:54:bb:a6:72:a0:c2:b4:5a:cf:e5:
5c:89:7d:a2:0c:21:3f:ed:77:e3:c7:da:f2:35:93:24:9c:47:
c8:01:bc:21:51:08:d2:b5:e9:19:e9:83:6d:20:69:f7:08:a6:
84:71:08:91:38:55:87:8d:5c:50:d0:5d:d9:4f:38:af:44:6c:
13:7d:45:31:4d:92:47:14:a5:38:96:17:ff:55:58:85:fd:7c:
1b:20:c7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:34:30 2025 by rpki-client