Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Iv6d4H0OkJL0uTCo-3tP1JKrzfE.roa
File: Iv6d4H0OkJL0uTCo-3tP1JKrzfE.roa (raw, json)
Hash identifier: g3q1A0xoZRzHf/Czxuj05jPypowqDtd1bjPLQbmx5xA=
Subject key identifier: 22:FE:9D:E0:7D:0E:90:92:F4:B9:30:A8:FB:7B:4F:D4:92:AB:CD:F1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CB0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Iv6d4H0OkJL0uTCo-3tP1JKrzfE.roa
Signing time: Mon 06 May 2024 11:24:18 +0000
ROA not before: Mon 06 May 2024 11:24:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7344 (0x1cb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 11:24:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=22FE9DE07D0E9092F4B930A8FB7B4FD492ABCDF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:37:89:de:85:55:db:55:b6:d4:09:9e:87:
51:82:c0:90:af:69:49:fa:8a:20:bd:de:26:70:8e:
95:dc:5e:f6:ac:ac:4d:d5:97:ce:b0:f0:81:08:4e:
2a:bb:37:ac:37:4e:24:68:e0:29:c5:0b:c2:f9:3c:
3b:c0:cd:0f:d2:a5:56:36:d0:02:e5:9a:5c:f3:bb:
d3:93:8f:8d:97:eb:54:37:bb:91:f1:20:09:63:a3:
31:42:27:b9:de:25:a9:25:83:0d:e5:a0:04:9c:18:
4e:f1:48:67:1d:13:52:2f:3e:10:ea:3d:32:53:52:
b6:82:2b:99:8d:96:fb:18:08:ea:00:37:c1:02:b3:
c8:b0:ed:81:22:36:80:18:c8:7c:90:86:6f:cd:5b:
ec:25:a1:79:32:7e:93:86:66:82:76:eb:37:17:f9:
68:b2:28:44:f6:0b:70:0b:fc:a7:68:29:8f:4c:4e:
15:7e:2c:2a:20:91:0a:af:83:f8:5f:12:f1:c4:cf:
cd:3e:ec:ad:b7:d2:c4:61:0c:c8:69:7d:20:58:55:
42:a5:2d:ed:2c:13:8f:b9:ad:9b:ef:9b:48:a8:ea:
4f:16:19:65:c6:2e:8f:da:79:78:1c:ae:a6:9b:4a:
1d:2d:b0:36:d1:cc:c0:40:ab:5f:95:55:21:83:3f:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FE:9D:E0:7D:0E:90:92:F4:B9:30:A8:FB:7B:4F:D4:92:AB:CD:F1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Iv6d4H0OkJL0uTCo-3tP1JKrzfE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:fa:4f:96:ba:29:01:0a:1a:5d:6e:91:fe:b7:e9:6c:2f:65:
26:9a:08:9c:df:55:89:bb:e4:31:3f:eb:2b:5a:bd:76:44:d2:
eb:d5:a2:77:92:12:0a:16:f0:7e:fa:da:fc:dc:b4:f7:f5:b9:
10:ed:61:64:0b:26:ba:3b:cf:19:99:c8:ed:89:e7:17:ee:0b:
8a:66:da:45:1e:18:4b:7b:c2:8a:83:2a:eb:e1:20:8c:7a:41:
e0:fd:80:0a:86:3c:8d:71:2a:78:91:d3:0f:66:da:ec:ab:53:
0d:bd:38:ea:96:eb:7d:fd:f9:e0:f8:27:44:5f:4c:ad:6d:63:
3e:0c:ec:9b:41:f3:59:bc:a0:29:4f:f5:ea:a8:b2:24:97:d0:
c5:94:43:e8:d1:30:c6:26:ce:dd:2b:fd:63:17:64:c4:d2:c2:
54:93:6d:30:44:dc:a2:12:fc:1e:51:32:35:27:52:e0:75:a5:
79:bd:b5:42:51:c5:e8:a9:ff:07:68:e9:18:47:98:14:55:1f:
96:61:6e:ef:84:7e:20:c0:4b:01:0d:d0:88:16:ca:99:d5:1c:
fe:96:51:b5:f1:ba:f2:b8:dc:7d:5a:3e:52:7e:6b:25:33:65:
34:94:47:c6:8d:8f:03:49:34:ff:97:02:b7:83:57:dd:69:9e:
9d:63:a6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:48 2025 by rpki-client