Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ciM362CW4kgcJPfvnHNgg5RQRnw.roa
File: ciM362CW4kgcJPfvnHNgg5RQRnw.roa (raw, json)
Hash identifier: iwZzXDNp6gVyE3tNY9uHve52v1/maYInJsJmIohHNkQ=
Subject key identifier: 72:23:37:EB:60:96:E2:48:1C:24:F7:EF:9C:73:60:83:94:50:46:7C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1636
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ciM362CW4kgcJPfvnHNgg5RQRnw.roa
Signing time: Fri 19 Apr 2024 04:53:28 +0000
ROA not before: Fri 19 Apr 2024 04:53:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5686 (0x1636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 04:53:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=722337EB6096E2481C24F7EF9C7360839450467C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:fe:60:7a:b7:97:72:7a:96:ea:84:3e:98:
6b:6f:7c:3e:b7:1c:d0:f7:c4:95:cc:04:f0:dc:c8:
8f:15:91:a1:f3:d8:52:13:51:be:7a:f1:b6:cd:ec:
61:79:f5:87:ed:03:cc:84:af:ab:f8:74:4b:e8:76:
9e:c7:63:c0:5f:62:5b:83:cf:21:13:b3:0c:29:8a:
a9:fc:25:2a:02:5b:60:94:2d:33:72:f5:0e:ac:17:
e9:54:19:37:fd:a3:c4:04:41:a0:a4:96:64:55:88:
cf:f7:7d:f7:3a:fc:18:33:d9:f3:18:01:a0:60:f2:
ed:cb:a2:fa:69:6a:75:82:53:9c:80:56:a4:70:5b:
79:6b:02:59:06:8a:1f:ae:ce:a5:e7:24:1c:9d:f8:
67:e3:34:3d:f3:86:ef:79:33:5d:9f:a7:24:71:40:
6c:e3:c6:bb:8a:fc:37:6a:d5:43:79:e5:18:66:13:
d1:38:64:ef:eb:4f:61:ea:41:48:fc:7a:7c:88:dd:
7a:e0:a5:9e:a8:f1:ae:bc:e8:b8:67:57:f8:ad:d8:
6c:cc:cc:9e:cf:43:31:1c:25:3f:a5:44:37:4d:48:
4e:78:d1:00:33:25:ef:1d:c1:3e:3d:1a:f3:12:3c:
53:8c:6b:f5:aa:cd:fc:f1:5c:37:a9:9c:35:e3:66:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:23:37:EB:60:96:E2:48:1C:24:F7:EF:9C:73:60:83:94:50:46:7C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ciM362CW4kgcJPfvnHNgg5RQRnw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:51:66:2d:75:38:ee:f6:37:3a:2d:23:dd:7b:d4:be:77:9a:
99:40:52:bd:64:a0:e4:75:70:84:39:bf:e1:23:00:b7:3d:3b:
1f:fb:62:4b:88:47:c1:f0:5d:46:7e:b5:f5:8b:a8:70:eb:25:
42:ac:a3:fe:95:41:af:d9:40:58:02:68:26:18:3b:20:5d:fd:
55:78:41:83:aa:78:b3:e3:be:c4:3b:02:56:dd:ba:0e:38:cb:
35:1c:d2:63:56:07:33:fa:62:79:f7:a1:45:b3:d3:c6:2a:b6:
10:39:9e:3e:bc:3a:82:a6:da:ed:b2:d4:fd:d8:ec:4e:14:94:
6c:5a:d2:c2:b3:f8:e5:81:1d:00:d7:d0:f5:9d:17:cc:4a:0d:
b7:78:05:1a:e9:4e:cd:5d:ae:fc:6f:d2:0a:cf:76:1d:3f:52:
42:55:75:b5:0e:b7:85:de:12:3e:2d:23:2e:fb:9c:4e:b6:8b:
35:2a:ce:a9:af:d5:b6:80:d9:43:b5:f2:44:2c:47:ce:41:1f:
ce:89:cb:b1:6d:f5:c4:c6:b7:3f:f7:42:ea:4d:51:5a:ab:21:
53:d5:be:22:11:0b:12:40:9b:f7:1e:60:57:98:33:b7:31:ba:
61:13:a5:fa:fb:c7:5e:22:d8:28:5a:c5:a0:31:4a:e6:37:d0:
48:1e:33:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:50 2025 by rpki-client