Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/SXdG_eS0Xa024y6M8hkDO73DwK0.roa
File: SXdG_eS0Xa024y6M8hkDO73DwK0.roa (raw, json)
Hash identifier: dr1yJhXMtMtCMKahP9frpShHltXhgdhz3rofPf+V2A0=
Subject key identifier: 49:77:46:FD:E4:B4:5D:AD:36:E3:2E:8C:F2:19:03:3B:BD:C3:C0:AD
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CA4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/SXdG_eS0Xa024y6M8hkDO73DwK0.roa
Signing time: Mon 06 May 2024 08:24:23 +0000
ROA not before: Mon 06 May 2024 08:24:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7332 (0x1ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 08:24:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=497746FDE4B45DAD36E32E8CF219033BBDC3C0AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:6c:47:e8:18:62:12:05:0c:98:87:84:24:
0d:03:2c:eb:29:a6:dc:aa:c4:a2:2a:ef:76:f2:ea:
13:1a:50:6f:6f:d8:c5:ca:92:6a:08:41:9c:11:5f:
a5:aa:e3:f3:66:c2:87:4a:e8:bb:be:73:2c:7e:05:
da:ed:29:16:1c:c5:95:2b:1f:26:24:07:7b:47:2f:
23:e2:ec:89:60:c7:ad:9a:bf:b0:21:54:32:60:6d:
ca:58:b8:3a:7d:0b:64:2a:31:22:e9:17:41:9c:bd:
b5:ba:b9:46:f6:68:74:21:2b:47:1c:5f:9c:f1:d4:
27:87:74:10:21:90:e8:e3:ef:5f:f8:45:43:e0:f8:
e2:1d:75:4e:01:c9:8d:0d:61:38:99:27:5a:25:1e:
60:c7:c1:88:68:7f:67:84:c8:28:b0:e8:30:f0:f9:
5c:3c:86:1c:87:02:ff:bb:4c:13:8a:ef:db:0e:e1:
34:8d:6b:6b:7b:c3:ea:8c:7d:3c:1b:e7:65:89:49:
bd:2f:db:5e:6d:fd:fd:3d:11:1e:f9:0f:8b:36:e4:
0f:5d:1a:9c:6d:e6:5a:8d:d4:78:44:f4:2e:43:78:
6f:f3:e2:6d:40:10:60:41:2a:1a:ca:02:6e:52:2c:
df:8a:a6:96:e7:54:80:d0:e0:e8:48:9a:4e:c3:3c:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:77:46:FD:E4:B4:5D:AD:36:E3:2E:8C:F2:19:03:3B:BD:C3:C0:AD
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/SXdG_eS0Xa024y6M8hkDO73DwK0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:96:97:24:18:b4:17:3e:e0:90:e7:82:07:7f:70:eb:89:61:
ec:8d:91:c0:d7:19:98:fd:1c:e8:ae:45:1f:bd:5d:a3:3d:90:
fd:5a:5e:81:46:a4:4c:a8:e0:7e:b4:c9:40:9f:39:e8:9e:86:
b1:7e:06:57:87:70:84:ee:20:b7:70:0e:8a:8e:52:38:50:66:
c1:ae:f4:0e:58:81:9d:57:c2:5c:be:00:77:dd:ee:19:9a:65:
3d:a6:e4:94:83:43:12:e5:02:33:77:b7:a9:5d:8b:d4:ed:7e:
e2:de:43:0e:17:b9:be:87:0a:7b:be:88:61:19:05:0e:35:20:
ec:1b:b5:30:e0:90:06:7b:b4:9c:4b:28:28:ef:b0:60:24:cd:
79:ac:51:4b:a0:61:00:08:97:53:e7:6d:91:6c:8a:d3:3d:e6:
79:b8:f3:62:4d:d8:e5:fc:12:93:4b:80:2f:ba:87:ff:26:7f:
6d:88:fd:d5:d5:45:d2:5c:2a:ad:78:0d:07:e8:dc:d0:de:8a:
83:06:77:31:c9:d1:ca:a9:f8:f5:21:a5:14:a7:43:6c:23:e8:
64:ef:7a:eb:43:70:ed:1e:9a:1b:d7:56:11:e3:30:bb:90:6b:
28:f8:5b:3e:53:f0:06:79:ca:4d:3e:5c:09:38:52:78:87:d5:
94:e6:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:24:35 2025 by rpki-client