Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/RZkC_tDneRYq_OaUD7PgOmHkgAA.roa
File: RZkC_tDneRYq_OaUD7PgOmHkgAA.roa (raw, json)
Hash identifier: x4hc5GfJv/k5ubsZQNsfYHSrEk+Ps2jIA9D10le59XM=
Subject key identifier: 45:99:02:FE:D0:E7:79:16:2A:FC:E6:94:0F:B3:E0:3A:61:E4:80:00
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 121E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RZkC_tDneRYq_OaUD7PgOmHkgAA.roa
Signing time: Mon 08 Apr 2024 06:52:57 +0000
ROA not before: Mon 08 Apr 2024 06:52:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4638 (0x121e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 8 06:52:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=459902FED0E779162AFCE6940FB3E03A61E48000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:28:37:23:e9:d2:e2:62:3c:86:dd:6b:3b:
03:ec:44:2a:80:bb:e2:b2:ef:e7:73:83:80:24:98:
68:9c:b2:e3:f4:e9:45:53:5a:7d:a3:2b:2d:3f:80:
68:9c:87:af:0f:8f:ee:c6:23:96:a3:80:dc:43:4c:
13:12:b0:7f:cd:8e:02:9b:84:de:25:94:95:63:87:
bf:c2:ca:d6:19:1f:c9:44:6d:31:37:3d:f4:6c:e2:
88:59:d1:26:4a:2b:a3:c1:1d:72:84:d2:62:6c:99:
c1:91:1f:a7:4a:56:b1:4a:54:6f:9d:1d:68:9f:e9:
98:69:26:46:e6:a3:29:59:63:b0:a8:7d:11:e5:56:
18:1a:e1:d3:f6:62:13:a7:4a:b2:a0:96:2c:ce:83:
b1:1e:bd:0b:f5:46:8c:a5:66:94:0a:81:ad:f5:f2:
16:a2:83:51:86:ff:dd:57:d4:54:89:fc:0f:e9:c4:
1c:77:43:f8:52:85:5b:7a:b4:9b:0d:46:20:55:7a:
00:4c:b1:bb:27:43:39:2f:e6:88:3c:01:00:ec:6a:
d6:b8:8c:fc:16:08:25:0c:1c:b6:00:87:0d:3d:85:
8a:fa:00:dc:3e:cf:6a:17:ea:76:48:16:59:84:01:
bb:80:01:0c:e9:a6:cc:09:6c:24:08:df:00:40:71:
ca:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:99:02:FE:D0:E7:79:16:2A:FC:E6:94:0F:B3:E0:3A:61:E4:80:00
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RZkC_tDneRYq_OaUD7PgOmHkgAA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:2b:9d:27:1f:41:5a:9b:09:2d:d8:a6:d8:c0:91:d4:0e:53:
ac:d8:8a:c9:74:51:e8:4c:50:36:e3:59:bf:61:6c:cc:4f:df:
04:ae:eb:2e:6c:aa:bf:5d:db:c0:7f:99:0d:1b:3b:ef:c5:14:
6b:a5:a9:31:57:f1:8d:73:09:6a:f9:79:7f:3b:8c:39:ef:99:
a3:66:55:3e:82:58:d0:1b:8a:6f:f9:31:46:cd:b7:c0:9c:cc:
60:d8:8f:94:03:67:8d:51:70:69:61:19:0b:b9:d3:b5:37:bc:
62:43:02:3b:45:86:6b:68:52:89:ab:ba:09:2a:b1:5f:c2:2a:
67:c9:18:fb:98:51:a2:bc:19:94:07:0c:4f:d9:a6:7a:e7:37:
79:07:65:76:2c:b1:e1:e3:d6:21:33:6f:23:a7:52:b6:b7:8a:
5e:2f:d2:df:f5:a6:13:35:22:f0:57:00:96:94:e7:e6:ff:97:
a3:7d:58:bf:ea:83:9e:ca:4e:bb:34:31:2d:6d:a5:b9:7a:54:
82:ee:eb:6f:7d:93:06:13:83:6f:64:52:db:ad:d2:05:50:5d:
8d:cb:94:91:7f:b1:ce:13:11:f7:5e:05:66:93:19:db:83:dd:
b7:9a:af:b3:4f:0c:e2:7c:52:ae:fd:ab:fe:b6:ce:b5:ed:bf:
b1:ab:dc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:24:30 2025 by rpki-client