Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/OxNzdYpS8jOrUtzSQGuZVJHsHAc.roa
File: OxNzdYpS8jOrUtzSQGuZVJHsHAc.roa (raw, json)
Hash identifier: MYpibBbTRRqkqSa/cu+zKNafpdw0W+W22Ax/yt6K6jU=
Subject key identifier: 3B:13:73:75:8A:52:F2:33:AB:52:DC:D2:40:6B:99:54:91:EC:1C:07
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1882
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/OxNzdYpS8jOrUtzSQGuZVJHsHAc.roa
Signing time: Thu 25 Apr 2024 07:53:42 +0000
ROA not before: Thu 25 Apr 2024 07:53:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6274 (0x1882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 07:53:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3B1373758A52F233AB52DCD2406B995491EC1C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:0f:8e:01:29:20:2c:c9:5f:96:4e:b9:29:
c0:ae:e5:f9:08:5c:15:c9:35:98:ab:97:6a:e6:88:
7c:15:1c:64:38:6e:62:be:60:78:a1:44:e6:47:15:
83:47:53:48:f6:5c:62:c8:37:04:71:ee:9f:ed:d6:
a6:0c:3f:f6:42:60:bc:7d:f7:0f:65:83:c8:7b:95:
62:81:87:05:21:61:b4:58:7c:6a:2d:38:f8:e9:b4:
77:46:e3:7f:ed:bc:a3:1d:31:71:47:6f:31:dd:26:
1f:47:5c:ba:fc:04:84:df:c5:37:32:73:58:53:1e:
7b:ff:d8:92:5a:d1:cb:6a:8e:dd:7f:8c:c4:bf:ce:
79:e2:6c:f3:0e:ce:e9:9d:89:43:c3:6f:94:cb:4a:
fd:e9:74:f5:64:b5:cb:8c:b4:98:41:db:22:17:47:
75:59:9d:76:ba:32:0c:03:c9:73:bb:b8:75:43:9e:
d1:e2:3c:3f:4d:66:52:e4:38:9b:ea:fb:18:5b:4f:
09:5d:b9:2b:84:e8:6e:bc:1b:cd:e4:26:ba:ca:11:
1a:bb:5a:84:22:e5:36:11:6c:fe:17:d3:6a:d2:68:
b1:ac:7e:59:6c:13:c5:67:7e:d2:05:6b:e1:06:68:
d0:f1:97:bd:01:0c:0d:ca:fc:da:78:ef:a3:2b:ba:
38:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:13:73:75:8A:52:F2:33:AB:52:DC:D2:40:6B:99:54:91:EC:1C:07
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/OxNzdYpS8jOrUtzSQGuZVJHsHAc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:73:f2:00:19:bc:1d:b4:86:bb:6a:9e:99:e1:95:21:3a:81:
42:3e:7a:4d:a2:5a:a2:74:13:e0:d3:88:b6:39:80:cb:51:02:
f8:13:fb:85:f7:43:4d:c6:02:ec:81:19:a9:02:0d:ba:b3:32:
04:37:60:a6:7b:ae:9d:b8:ea:9c:35:bc:4c:cd:48:d4:5e:69:
42:08:79:65:45:28:26:30:14:4e:10:d4:ed:db:55:e4:28:73:
7b:61:38:f8:bf:fb:92:a6:c7:47:26:c1:39:7a:a8:e7:4d:a3:
70:20:f3:19:a5:5e:00:28:10:4b:57:70:d1:4d:e4:20:4c:d9:
db:94:6b:81:54:3d:b8:fd:e1:3e:9e:6f:b0:38:b6:b4:44:59:
2c:88:8b:56:22:59:3f:9c:2d:42:2d:16:58:d1:33:b0:24:f5:
ef:38:c1:26:76:4e:ce:40:c0:c6:07:0b:a9:f5:7b:b6:25:f8:
c5:d4:0a:6e:2d:6e:da:06:52:ec:b5:b7:c4:a6:84:a8:3d:5b:
6b:a5:91:24:f6:13:fc:2a:49:81:a2:8a:15:a2:60:64:39:93:
69:5d:05:2d:4f:aa:76:ec:b2:25:a4:3f:e4:6d:ce:a9:22:59:
26:3a:0a:57:ad:43:fe:46:0e:9b:d4:1e:0a:d4:eb:ff:7d:0a:
ab:cc:b0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:31:19 2025 by rpki-client