Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/KpYZOV2TDoNlB-BEMgGP4U9M3JA.roa
File: KpYZOV2TDoNlB-BEMgGP4U9M3JA.roa (raw, json)
Hash identifier: NmDTRMlYYMbmJvrDnd2m+fP0z2e0CJgXXm6c7eQPWQc=
Subject key identifier: 2A:96:19:39:5D:93:0E:83:65:07:E0:44:32:01:8F:E1:4F:4C:DC:90
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 12B8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/KpYZOV2TDoNlB-BEMgGP4U9M3JA.roa
Signing time: Tue 09 Apr 2024 21:23:05 +0000
ROA not before: Tue 09 Apr 2024 21:23:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4792 (0x12b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 9 21:23:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2A9619395D930E836507E04432018FE14F4CDC90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:b3:57:67:e1:b8:11:b1:9a:a2:4d:20:9f:
39:66:f3:51:bc:78:2f:e6:b1:84:ba:b1:7d:d7:4c:
9a:29:41:2b:13:77:22:af:d5:b7:91:38:17:62:92:
30:8d:10:6c:68:7b:e0:09:e6:d0:f3:52:a1:a4:9d:
0f:d5:d6:e0:7d:56:47:af:d0:0c:72:0a:b4:c9:33:
35:04:ef:2b:6e:5d:f9:c4:e8:ad:d9:98:25:1a:3b:
a2:1e:d3:e6:cc:01:85:c2:bb:41:cf:6e:78:19:f5:
d1:5d:80:5e:00:11:43:21:1f:4f:48:84:f1:3d:5a:
1e:22:19:ee:3d:17:e4:b9:85:f2:ce:7d:61:00:25:
d9:f9:88:bf:1f:cb:c1:9a:3f:4a:05:d0:ee:39:2d:
e6:97:14:87:9c:49:b4:77:05:17:e5:6f:2a:04:10:
bc:20:b6:29:2d:51:2f:df:e6:03:0e:11:4c:ff:3f:
d4:12:2d:00:04:a8:2e:5d:2c:a1:97:ae:5b:1a:0b:
35:bc:69:50:7b:40:52:62:d2:29:83:4a:2a:50:83:
fa:77:d2:78:e2:1c:76:85:13:c8:49:00:c8:72:54:
4e:c4:da:d7:e1:84:04:0c:47:7e:93:80:3d:34:9e:
d1:0d:3e:0f:21:8b:14:be:0e:54:78:31:0d:fa:aa:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:96:19:39:5D:93:0E:83:65:07:E0:44:32:01:8F:E1:4F:4C:DC:90
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/KpYZOV2TDoNlB-BEMgGP4U9M3JA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:55:29:7f:10:4e:f6:72:fb:44:7f:22:33:88:98:d9:fb:58:
b4:d0:a6:a5:1c:54:b3:e0:bc:24:cd:87:08:05:2b:d5:04:b3:
2f:7b:3b:1d:04:42:09:60:a6:d7:07:e8:5c:f5:d5:0b:d0:f4:
37:c3:49:2c:2d:c6:c1:a2:39:d3:56:36:b1:bc:0e:2b:32:88:
e1:d2:64:8b:40:21:84:82:a2:24:fe:bd:1d:57:fd:73:b2:aa:
8c:66:9a:fc:ae:05:06:ff:4d:23:2b:bc:1c:b9:94:7f:9a:15:
dc:98:09:28:93:f2:16:d4:ad:61:89:82:cd:af:87:55:e9:61:
3b:95:48:a1:a3:6f:74:36:80:d0:af:ab:41:55:c2:d0:0b:1e:
95:9b:8f:0f:8c:ee:75:97:72:92:1b:9c:7b:9c:da:e5:95:f3:
e0:fa:f8:87:9b:3c:8d:79:af:d2:1b:3a:63:e1:d7:29:3a:40:
37:fa:06:c3:7c:06:d7:1f:d0:82:bc:ed:80:a3:96:00:54:15:
f6:94:6b:52:d7:f3:ae:fd:72:9d:74:67:b3:6c:c2:41:75:15:
bb:c2:8c:8f:1f:16:26:97:90:59:da:04:4e:e8:e0:d0:b2:fa:
20:f6:dd:5d:6d:44:fd:eb:ca:5c:8a:9f:9e:f6:9a:ca:06:c4:
fe:c2:6c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:03 2025 by rpki-client