Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/eFbV_8qu9xkMac_zheOPmS7H1qY.roa
File: eFbV_8qu9xkMac_zheOPmS7H1qY.roa (raw, json)
Hash identifier: PZ+CXHc+wTL1Fn9MHI8x2LafHrFpbaNawLj+oRkxgn0=
Subject key identifier: 78:56:D5:FF:CA:AE:F7:19:0C:69:CF:F3:85:E3:8F:99:2E:C7:D6:A6
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 13D6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/eFbV_8qu9xkMac_zheOPmS7H1qY.roa
Signing time: Fri 12 Apr 2024 20:53:13 +0000
ROA not before: Fri 12 Apr 2024 20:53:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5078 (0x13d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 20:53:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7856D5FFCAAEF7190C69CFF385E38F992EC7D6A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:18:9c:e4:5a:0e:46:6d:d4:f4:54:c7:ff:
40:af:e8:cb:fd:fc:de:98:b0:cc:0a:20:e6:f3:c3:
77:ab:45:66:b2:6f:cc:fd:33:9a:73:96:39:ff:11:
93:3a:03:16:77:c2:25:1f:cc:ba:12:c2:67:c9:4c:
ea:4f:ac:f5:74:73:a4:32:79:10:32:81:fa:c4:82:
3b:66:bf:e7:0d:bf:54:66:87:fe:0c:d5:09:29:dd:
d3:71:4c:23:ed:72:b8:d0:f5:d1:15:5c:a3:04:cb:
ac:63:3e:50:06:de:fa:10:5a:6b:13:12:3e:da:6c:
2e:81:cb:bf:40:c2:19:9a:6e:5f:59:50:98:a8:e9:
46:e5:ce:fb:50:f8:3b:86:71:98:af:c9:31:fe:a0:
ca:33:9e:f4:b5:5f:69:b8:82:bd:58:75:d8:8b:6a:
dd:06:31:f8:07:4e:c4:c5:89:43:60:fc:25:33:31:
b5:91:d3:e0:51:78:3a:ea:93:3b:cd:c6:bb:82:56:
90:e4:3c:2d:40:f5:2e:e8:5e:e6:28:17:db:65:dd:
56:d8:57:89:6e:31:d9:ab:fc:50:60:68:99:ea:3d:
f0:16:e4:8b:99:27:29:0d:a0:26:06:d8:c9:41:2a:
67:f4:67:83:40:69:c0:40:d2:21:d2:ad:44:fa:0f:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:56:D5:FF:CA:AE:F7:19:0C:69:CF:F3:85:E3:8F:99:2E:C7:D6:A6
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/eFbV_8qu9xkMac_zheOPmS7H1qY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c1:ed:c7:69:ee:57:cc:a5:5c:3d:07:9c:8a:67:6e:f0:52:a8:
8b:a8:73:0e:f5:5a:01:2c:c1:14:6f:df:8e:f8:4d:d0:2f:d8:
db:25:cf:83:fd:cb:47:d6:db:97:84:a2:00:9f:11:e2:6f:1e:
49:bc:44:e4:74:0d:7e:bb:03:43:b3:96:b7:45:fa:c2:91:49:
93:d2:d6:4e:96:04:ff:c9:58:1a:4b:90:33:e9:99:11:f5:3d:
1b:5a:f9:6e:24:50:ad:08:01:a8:0f:e3:23:6d:10:be:37:c2:
b1:40:f6:8f:0f:94:ab:8c:d0:00:3f:56:75:9c:c3:3c:77:a9:
30:82:c3:93:4e:4e:2b:94:36:54:02:83:16:c1:24:4b:5c:5e:
a1:a0:6a:d8:d9:6e:13:f3:9f:bd:1d:ea:a2:1b:87:f2:19:e7:
57:cf:14:28:7a:0c:27:73:93:51:a2:fa:4f:ae:4b:ef:ab:9d:
23:f5:c8:65:2b:04:c7:dc:86:8a:2a:3d:48:c1:e3:66:d3:51:
79:e4:93:db:f9:f8:ab:02:73:99:39:0e:36:34:12:cc:b1:82:
4f:39:30:fe:76:9b:3e:9a:38:d0:a0:e7:f5:ca:40:ab:ba:66:
41:4a:5c:45:33:55:9c:6a:8b:74:71:61:7e:19:63:fa:40:0d:
8e:a8:3a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:36:45 2025 by rpki-client