Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/RlvRObcHtcv-xfCZm4yD9diqRIY.roa
File: RlvRObcHtcv-xfCZm4yD9diqRIY.roa (raw, json)
Hash identifier: 39yIh8xkL41AYiLZ+PtGZXi7Q9c/k8WK7AwTWHvAi2g=
Subject key identifier: 46:5B:D1:39:B7:07:B5:CB:FE:C5:F0:99:9B:8C:83:F5:D8:AA:44:86
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1688
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RlvRObcHtcv-xfCZm4yD9diqRIY.roa
Signing time: Sat 20 Apr 2024 01:23:29 +0000
ROA not before: Sat 20 Apr 2024 01:23:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5768 (0x1688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 01:23:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=465BD139B707B5CBFEC5F0999B8C83F5D8AA4486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:2e:ca:9a:d3:53:62:a8:3c:e2:9f:79:30:
fb:c4:b7:2b:89:f4:e4:d0:5b:a0:78:c9:a7:d9:5b:
93:f6:e7:a1:f9:fe:b8:d7:90:c6:1a:e3:4f:f5:e3:
3a:13:c4:31:79:86:bb:5b:7a:a4:66:60:4f:fb:e6:
bd:aa:1c:01:4e:5a:00:22:5d:8a:ef:13:32:e9:84:
c9:d9:52:0d:7e:bc:d8:6d:aa:5c:16:99:c8:d6:82:
62:2b:fe:e9:f0:5c:23:c9:fb:3b:4d:d9:21:b9:c3:
91:be:66:f1:f7:20:4d:d9:cb:af:a1:8a:92:06:7f:
e7:28:77:fd:d7:68:59:f3:ee:bd:5a:18:1a:75:b1:
6c:74:68:0b:60:59:d3:e7:48:72:72:e4:d7:8f:8c:
c8:78:80:52:46:8a:6a:5f:2b:b9:e6:a8:76:81:51:
6e:7e:d3:b4:5b:21:04:15:bf:08:aa:dd:93:37:7e:
44:f3:76:1c:71:8b:77:e6:9a:25:82:62:22:84:e4:
bd:f2:fd:77:fd:23:a5:3d:18:5b:e0:ca:c8:f0:3e:
c6:7f:9e:c6:54:94:26:7a:1e:f4:27:22:a1:09:34:
1c:b2:4d:5e:af:82:b1:7a:3b:51:22:e2:92:37:29:
36:0e:73:1c:e4:8e:6b:5d:97:e6:08:84:2f:b5:37:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5B:D1:39:B7:07:B5:CB:FE:C5:F0:99:9B:8C:83:F5:D8:AA:44:86
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RlvRObcHtcv-xfCZm4yD9diqRIY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:d0:72:92:75:7f:4f:3f:40:fa:b9:9f:7e:ba:86:19:a5:45:
89:e9:2e:1c:f8:75:74:df:fb:6c:e3:b7:9f:e4:6a:96:a7:02:
df:82:23:16:ce:7e:ef:9e:8d:02:86:f9:bc:f1:f8:c0:55:69:
c0:ca:65:d4:d6:4e:2e:fc:b1:ef:fd:7c:e1:9f:9a:15:e5:d6:
16:20:fa:35:3a:17:02:ba:d5:88:7f:da:96:6f:6f:a6:0a:8b:
2f:db:e0:f1:60:69:1f:e9:9b:a0:4f:14:ea:d7:fb:39:a5:c7:
f1:1e:e4:7b:85:b4:5d:bb:0b:a4:9d:d6:a0:d8:e8:14:53:df:
4f:98:6c:59:a3:b5:14:a2:ec:59:86:16:9c:e2:01:30:91:7a:
23:f3:ae:31:ed:d6:3c:40:33:a7:be:89:03:1d:6e:3e:c9:40:
e1:02:90:81:0e:ae:f2:32:65:f0:62:3a:fa:10:b0:a1:37:05:
c7:f0:6e:a7:62:2c:20:f3:39:36:7b:aa:46:53:f1:0c:11:65:
fd:82:83:b1:b4:d9:e2:30:ac:d1:51:4b:8a:fc:52:ff:9c:cc:
84:b7:81:b0:86:7c:80:e0:a0:e9:73:9a:21:b0:b3:c6:84:60:
92:3d:a3:5d:4f:3f:73:eb:0c:85:1a:29:d5:ca:90:90:e5:7b:
2c:c1:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:55 2025 by rpki-client