Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/GgffBsJPq33y_v4cdJgGO6ZZGRY.roa
File: GgffBsJPq33y_v4cdJgGO6ZZGRY.roa (raw, json)
Hash identifier: jrmT2lJizedpo9Oc/v8a0IsOXgfJ0AyhglxeTYCdn/U=
Subject key identifier: 1A:07:DF:06:C2:4F:AB:7D:F2:FE:FE:1C:74:98:06:3B:A6:59:19:16
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 13CC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GgffBsJPq33y_v4cdJgGO6ZZGRY.roa
Signing time: Fri 12 Apr 2024 18:23:13 +0000
ROA not before: Fri 12 Apr 2024 18:23:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5068 (0x13cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 18:23:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1A07DF06C24FAB7DF2FEFE1C7498063BA6591916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:ee:18:5b:1e:6c:5d:c8:85:74:e3:ea:f7:
2b:de:42:ca:c0:4d:7c:cf:f5:87:50:f6:e5:fa:29:
0f:5b:49:55:2d:56:f0:ad:42:59:7f:01:d8:42:3c:
89:2e:c3:b3:28:32:2b:96:18:76:16:f1:7c:6d:c4:
60:b9:0c:0c:d3:ef:41:a6:44:24:6f:d0:97:bc:ea:
93:b8:24:01:80:ab:5b:f1:fc:9b:29:0c:e8:04:d7:
b9:68:5c:bb:7f:21:e4:42:6f:ac:96:c4:f4:a6:a5:
b3:d3:87:45:77:f4:c1:bb:a8:e9:a2:41:2b:cf:d0:
ef:4c:9a:3e:d7:2f:96:33:81:9e:32:b9:de:c1:90:
b2:28:e8:69:c2:a4:51:8e:ba:dc:66:ac:b5:9b:45:
9f:35:f3:70:cf:7b:0c:52:33:bf:41:de:97:ea:8d:
c2:f2:83:37:34:99:28:d6:a1:a7:c1:6f:98:5b:26:
24:dd:65:91:8b:7d:2a:3c:a3:ff:be:2f:f4:87:2e:
5a:57:27:a1:89:aa:f9:6c:d5:63:13:94:f4:5c:66:
9f:25:3b:4c:63:aa:46:f4:fa:e7:8f:de:1c:69:2f:
67:53:02:13:9e:ac:c2:68:cc:a1:51:83:79:5e:c4:
8b:12:c2:f1:47:30:1f:e1:0c:a6:2d:b4:26:73:b6:
b0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:07:DF:06:C2:4F:AB:7D:F2:FE:FE:1C:74:98:06:3B:A6:59:19:16
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GgffBsJPq33y_v4cdJgGO6ZZGRY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:01:f2:d9:f7:57:a1:de:e2:88:34:2e:4e:57:cc:02:19:c8:
45:d4:66:63:43:31:70:22:a1:93:92:b3:95:b2:34:36:53:ec:
21:3c:88:38:b4:88:20:cd:00:1b:c6:f7:2e:8a:9c:85:7d:4f:
39:14:6c:63:ca:17:8d:98:8b:86:55:1b:ae:ca:4d:c3:23:20:
bf:51:d7:e3:1a:e3:c0:7c:40:db:a7:9c:8c:7b:75:dc:1d:47:
08:bf:66:9d:6d:e7:01:f8:c1:5a:7d:39:21:6a:2a:15:de:9d:
1e:a4:98:44:1b:5c:5b:3e:9a:01:40:2f:8c:76:32:cf:a0:ba:
2a:85:ef:e8:08:08:56:86:c2:ff:6f:91:dd:06:b9:67:64:5c:
e6:a3:0e:03:96:74:5e:9a:8f:9b:28:c3:3a:f3:5b:80:8d:81:
2f:74:33:43:01:5a:f5:e7:85:c2:2b:fa:3a:98:ee:0f:84:13:
7d:93:27:e6:81:61:16:e9:d9:9f:77:2a:f0:f8:3f:42:1c:3a:
90:e9:da:66:70:7c:2b:b9:e4:63:e5:dd:87:3d:e3:f8:83:2c:
4b:4c:9a:d4:e6:41:c2:6a:ac:90:60:6f:76:14:f2:ef:0b:47:
a8:e0:35:2a:18:26:17:64:82:78:56:b6:39:79:29:f9:db:68:
09:a8:e5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:21 2025 by rpki-client