Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Ud_CdclAojRkwasTBCP1uuy0niM.roa
File: Ud_CdclAojRkwasTBCP1uuy0niM.roa (raw, json)
Hash identifier: YjL5To9cq+NAhQ3AYlxJl+bfNhoXgERGu294jdQLEko=
Subject key identifier: 51:DF:C2:75:C9:40:A2:34:64:C1:AB:13:04:23:F5:BA:EC:B4:9E:23
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 180C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Ud_CdclAojRkwasTBCP1uuy0niM.roa
Signing time: Wed 24 Apr 2024 02:23:41 +0000
ROA not before: Wed 24 Apr 2024 02:23:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6156 (0x180c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 24 02:23:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=51DFC275C940A23464C1AB130423F5BAECB49E23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:fd:94:2c:41:4e:d5:79:f3:eb:35:5c:66:
cd:00:8b:df:53:cb:50:8e:53:78:1f:fb:72:e1:94:
2b:e1:8a:dd:47:62:51:09:6f:2c:e1:ea:44:53:fa:
b4:46:ed:49:fe:2d:d4:e9:77:e2:33:5c:a5:ae:06:
ae:01:e0:21:e1:c9:25:c4:67:e2:2c:33:f7:a1:ba:
bf:ee:b2:4a:1b:53:85:b0:48:33:f8:05:6e:b4:cc:
e3:f9:4d:03:7a:f1:4e:e4:68:5e:e7:26:38:23:4c:
45:34:4a:9e:d0:62:5e:e5:9b:5d:3b:7d:e7:d8:49:
de:d4:81:21:0c:e8:b5:22:77:32:73:a2:49:1a:d5:
a1:3b:9d:ac:14:b0:d3:53:8b:77:34:fe:c1:f5:43:
24:18:5c:ae:9c:e6:eb:a8:bb:14:ea:b7:a0:81:29:
39:95:73:00:23:70:a1:97:4b:c9:0c:c4:5f:8c:e2:
ab:16:1f:9f:ee:5e:c0:4e:0b:17:d5:43:fc:6d:e3:
d6:5e:6a:f5:2e:b5:e8:18:ab:94:dc:5d:64:0b:3e:
38:b7:3e:17:e4:f6:ce:94:92:20:94:f2:a2:56:fc:
52:69:f6:a4:4a:32:d7:25:47:59:07:1f:30:4e:6e:
38:b7:5f:57:aa:f6:e8:6b:a2:da:27:5e:e6:ce:2a:
bf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:C2:75:C9:40:A2:34:64:C1:AB:13:04:23:F5:BA:EC:B4:9E:23
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Ud_CdclAojRkwasTBCP1uuy0niM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:7e:47:84:0d:28:25:c4:58:b1:d9:ec:7a:c6:2f:cc:33:9c:
6d:fe:0c:f2:65:f9:9a:a0:cb:db:35:48:c2:1a:4b:a2:91:a4:
25:5f:33:10:f8:29:ae:d8:94:2c:29:f9:8d:50:f4:a8:db:dd:
9b:4d:6e:4f:12:ae:b6:7e:ab:36:af:db:4a:f1:4a:69:7e:13:
5a:8a:95:1a:fa:00:84:f8:aa:da:fd:b8:4c:f0:1a:34:39:0a:
a5:b2:42:67:79:f9:66:e0:b5:36:88:15:c5:0b:bb:0a:e9:72:
af:ac:61:87:51:de:de:0d:22:b4:10:22:7d:99:17:62:ec:53:
4c:8f:52:ac:81:b8:ee:77:e2:ff:51:be:45:c6:28:9e:f2:ab:
5e:02:1b:c4:dd:fd:7c:af:e5:a1:0d:bf:57:32:e3:09:cc:7b:
08:d5:dd:a8:62:80:59:56:e8:7a:65:b1:41:ea:90:de:0b:3a:
59:ed:8b:f7:82:6d:5f:79:bf:a0:64:9d:fa:68:66:1e:18:36:
3f:1d:7b:45:38:7d:c6:60:6c:ee:65:99:d6:29:23:23:b6:7b:
90:bf:d0:2b:9b:33:cc:85:a5:f5:c7:a0:34:19:15:cc:b9:b0:
29:b1:2f:1b:e4:4b:e5:1a:66:ca:b0:17:fd:9f:af:a0:5f:c3:
0b:a9:0e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:22 2025 by rpki-client