Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/M8l96mFdlL3OAWYyQTEi2qbqWWc.roa
File: M8l96mFdlL3OAWYyQTEi2qbqWWc.roa (raw, json)
Hash identifier: k0MOMWRovp8bXExuzB+mqzdQK34/hkO9I23XQp6qlmo=
Subject key identifier: 33:C9:7D:EA:61:5D:94:BD:CE:01:66:32:41:31:22:DA:A6:EA:59:67
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 12C4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/M8l96mFdlL3OAWYyQTEi2qbqWWc.roa
Signing time: Wed 10 Apr 2024 00:23:03 +0000
ROA not before: Wed 10 Apr 2024 00:23:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4804 (0x12c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 00:23:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=33C97DEA615D94BDCE016632413122DAA6EA5967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:30:7c:b9:df:70:eb:3c:e3:3d:5b:f0:7e:
36:ed:1b:72:18:fa:6b:af:9e:e5:4c:b4:18:ea:88:
19:88:d0:d4:24:05:08:7f:b1:89:5a:19:65:e6:27:
c6:dd:4d:e8:5f:c6:bf:93:11:d4:91:25:8c:b8:63:
be:da:2d:4f:2f:a7:a2:f5:7e:da:9c:d4:d4:3b:74:
60:ea:4a:0d:61:05:b7:27:34:06:c2:89:ae:96:86:
aa:12:51:e7:3c:5d:0b:eb:f4:c6:f8:b1:0d:9e:58:
96:6a:14:cd:ec:85:09:7a:e4:7f:a3:be:2e:27:66:
fd:45:f9:3f:53:5a:00:e6:96:50:31:bb:4f:d5:4c:
a6:7a:2d:8e:9d:5c:7d:29:34:0a:ea:72:e8:d6:52:
4e:a2:df:87:43:71:28:51:53:8d:33:67:87:5a:6d:
e4:0b:81:a1:10:ff:3a:b9:dc:07:56:82:2f:fa:44:
78:d0:db:af:cb:35:7b:59:7a:aa:6b:c4:92:59:4e:
32:48:ac:b8:68:c2:fd:be:63:87:9c:ff:bd:41:99:
df:a5:30:1d:c3:e5:64:46:21:32:87:3d:07:e2:1c:
92:83:bb:3e:13:4b:4b:60:ef:f0:5b:64:e3:4d:0a:
29:ea:82:4d:59:07:5c:32:b9:3c:55:c7:e5:75:ba:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C9:7D:EA:61:5D:94:BD:CE:01:66:32:41:31:22:DA:A6:EA:59:67
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/M8l96mFdlL3OAWYyQTEi2qbqWWc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:71:a4:41:17:88:b4:84:7a:d4:68:c6:6b:e1:7f:18:a5:b9:
e2:aa:c0:e9:68:70:60:65:36:d3:e4:a1:86:f1:1d:d9:d1:74:
ba:e2:45:4c:cb:e1:d3:4e:0b:78:c5:96:48:01:94:aa:a1:5e:
6e:cc:35:4e:00:06:a3:86:5e:8c:12:ef:c7:1b:5e:09:a8:06:
52:1a:9f:09:eb:bc:5f:65:b8:94:35:19:fd:2d:07:2e:1f:1c:
9d:f8:8e:29:9f:e2:e4:e8:47:e9:34:bd:6d:8e:08:5f:82:3b:
14:14:3a:8e:58:ad:a9:d8:a2:34:5a:88:2b:29:03:95:33:89:
ad:7c:23:69:49:55:03:c9:c7:2d:e5:9f:73:32:e7:44:69:fc:
5b:2c:51:04:3b:be:a5:33:ce:d4:2c:f8:80:54:e4:c6:af:64:
08:1c:50:00:e9:0d:0f:79:4e:b2:1a:95:7d:8b:99:b2:bd:e7:
da:72:fc:42:bc:c6:3b:a8:59:a8:86:41:9f:c0:2a:30:e1:8d:
66:9b:8a:79:06:95:75:63:95:ac:50:ac:71:9b:a4:bb:9b:c6:
e6:63:19:5e:1d:69:47:59:ab:24:ff:eb:76:33:10:b0:12:82:
ac:b2:90:24:fb:a5:61:13:48:bb:d7:4c:a8:19:34:cd:87:13:
56:b6:8e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:24:36 2025 by rpki-client