Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/NStB6SP_vZoZ32AGxftPdwYSdys.roa
File: NStB6SP_vZoZ32AGxftPdwYSdys.roa (raw, json)
Hash identifier: f1fCr2zXOfOdDMjvl7jR5GBFFfD5ZllWdhKU6ZOnabQ=
Subject key identifier: 35:2B:41:E9:23:FF:BD:9A:19:DF:60:06:C5:FB:4F:77:06:12:77:2B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 167A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/NStB6SP_vZoZ32AGxftPdwYSdys.roa
Signing time: Fri 19 Apr 2024 21:53:39 +0000
ROA not before: Fri 19 Apr 2024 21:53:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5754 (0x167a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 21:53:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=352B41E923FFBD9A19DF6006C5FB4F770612772B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:32:71:31:9e:f6:48:36:8e:8a:26:ae:ca:
b5:57:33:82:e4:01:f0:f2:6c:21:98:aa:ed:61:70:
7f:80:42:13:bb:53:dc:80:5a:b6:dc:02:14:10:85:
76:5e:db:f8:40:d8:6c:3c:fb:c1:45:c3:59:d8:83:
c4:9b:bf:6a:d6:7b:70:c5:45:6b:2b:20:83:c7:18:
26:6a:50:5c:5c:23:8a:8d:f2:39:d2:25:6b:94:47:
df:ad:6d:2d:f0:6f:8b:5d:d3:81:a3:16:97:47:06:
75:3d:9e:1a:8d:b5:d2:eb:1b:99:29:62:0f:46:10:
c4:39:d4:a7:35:d1:cc:79:d7:38:3a:7f:4f:98:fa:
00:8e:eb:49:3a:ac:9e:42:1c:43:c4:c8:3b:10:61:
5a:17:d6:5e:ee:de:1b:e4:03:18:2e:80:5b:60:7b:
bf:6d:7d:62:4e:22:fc:e5:25:f3:e6:6e:8d:b8:24:
f0:5d:fd:14:c1:28:f9:f0:6a:65:b8:d0:30:dd:d5:
11:c1:bf:cd:01:10:d0:e7:2d:01:3e:8f:63:1f:ee:
85:22:df:94:64:1e:40:5d:c8:94:e4:94:97:91:21:
e9:02:11:59:d8:5e:82:05:3e:c5:8d:0f:6f:87:c1:
84:c0:2d:0e:01:73:dd:3f:42:46:74:03:a9:47:9a:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2B:41:E9:23:FF:BD:9A:19:DF:60:06:C5:FB:4F:77:06:12:77:2B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/NStB6SP_vZoZ32AGxftPdwYSdys.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:ca:ea:42:d3:3b:68:7b:c8:70:ae:d4:62:56:b0:fb:ed:2e:
02:d1:4c:3d:09:7f:01:7b:10:70:f5:f5:03:55:3a:68:4e:c8:
cf:4d:04:70:6c:46:5c:8f:94:8c:b1:dd:01:df:3c:01:1a:2f:
b4:af:73:85:a0:34:6e:b0:86:77:4e:f7:e6:18:93:ab:0c:4b:
34:a0:d0:bf:ca:b0:0a:e5:6b:74:fb:5c:03:20:d2:86:ca:2c:
bc:32:98:0c:24:4f:11:5e:fc:64:be:6f:e7:0d:2b:fc:24:4f:
84:05:32:33:d0:cd:8a:d8:c2:cb:5d:68:05:63:2e:41:55:71:
64:ad:ea:88:c7:78:bb:18:46:80:a8:3a:1f:b1:ca:2d:b6:a4:
3b:f4:e2:9c:31:db:c9:d4:da:8d:7e:07:4b:25:fb:38:28:f9:
01:d2:64:da:64:70:94:af:b2:54:05:8e:65:00:a0:2a:b3:bc:
df:73:81:f8:e2:12:1c:70:20:68:f3:9c:1f:b9:22:7f:ce:69:
46:7b:61:a6:f8:a8:a2:d3:20:3f:24:ba:94:cc:2c:f8:47:4e:
51:8d:8a:03:f4:98:6f:c8:4d:23:48:5a:5d:d4:77:e7:29:c5:
b5:a5:c1:17:33:ae:c8:df:a7:6c:9c:cd:b1:1d:ce:25:e5:ec:
8b:3b:c8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:31:53 2025 by rpki-client