Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/eP-4FGRKPKPatjsy3QB8KDy-YLQ.roa
File: eP-4FGRKPKPatjsy3QB8KDy-YLQ.roa (raw, json)
Hash identifier: 41UuCwRE/yY03QevAL+UaIZjPFh4ba4e+b0mmpeS1C4=
Subject key identifier: 78:FF:B8:14:64:4A:3C:A3:DA:B6:3B:32:DD:00:7C:28:3C:BE:60:B4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 140E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/eP-4FGRKPKPatjsy3QB8KDy-YLQ.roa
Signing time: Sat 13 Apr 2024 10:54:05 +0000
ROA not before: Sat 13 Apr 2024 10:54:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5134 (0x140e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 10:54:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=78FFB814644A3CA3DAB63B32DD007C283CBE60B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:57:80:4e:49:2f:c1:e0:c7:32:16:1c:37:
a2:63:ef:42:8f:27:0d:ae:9f:36:5d:a5:9a:ae:df:
43:b2:63:ae:a6:2e:83:51:19:53:a3:4d:23:f5:3c:
61:0d:16:c2:01:59:e8:fc:05:8f:5c:e3:a3:95:a3:
a4:86:ec:a6:50:a3:6d:94:2d:a8:b4:2b:2f:f9:2f:
ff:53:c0:4f:20:2a:4e:b2:78:9a:b2:4b:a4:63:8a:
73:0d:e6:43:b7:3a:3d:e7:a5:e9:01:e5:7e:ec:c4:
5f:16:01:7e:cc:6f:4b:a0:ce:c4:ec:36:a6:1b:47:
ed:fb:b6:3b:e0:ee:11:24:82:e5:68:2d:f9:e0:db:
d0:e3:e1:82:7e:37:f7:6a:3a:c6:12:71:f7:63:46:
df:ee:72:a9:5f:52:2d:a8:64:35:01:5d:ae:c4:85:
2d:b9:63:8a:0f:4e:94:cc:77:62:0d:6a:0b:71:c0:
74:43:d7:d0:5e:4f:3a:7a:d1:2a:f4:79:fd:5b:29:
89:e5:e0:ba:e2:3a:2a:d4:34:a0:cc:b5:ee:19:59:
d1:a4:b7:c4:58:53:00:11:52:79:cb:76:a0:19:e5:
4f:62:c6:d9:c2:f1:93:04:3a:87:53:5c:d7:ff:93:
58:d5:59:14:02:db:12:13:fc:c0:bc:f3:e8:07:97:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:B8:14:64:4A:3C:A3:DA:B6:3B:32:DD:00:7C:28:3C:BE:60:B4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/eP-4FGRKPKPatjsy3QB8KDy-YLQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c2:01:10:d8:59:34:32:5c:ac:12:5e:c1:b9:c0:19:30:3b:e1:
54:55:74:65:8e:e1:e5:44:1e:49:97:96:06:4e:03:45:6f:2a:
2c:1a:21:af:1d:9c:5b:90:c9:97:23:9c:80:fd:4e:46:3f:8e:
d5:e7:03:66:ab:14:74:d9:aa:c9:1b:6f:ac:b5:c2:86:15:a7:
fe:c6:5d:dc:a5:ef:e1:f8:0b:85:0e:aa:bd:91:d9:c3:6d:3f:
4f:8a:34:2a:c2:e8:27:54:0f:0b:aa:ec:0b:d2:58:39:fe:b2:
50:12:c6:da:c2:0d:02:e6:04:b7:a7:57:13:85:10:a0:4d:e2:
9b:01:14:05:73:c8:a1:3d:e6:d2:30:8c:f4:e4:c2:6c:89:b1:
6a:43:6c:64:23:7e:eb:28:5b:ef:4b:d7:f9:15:85:aa:41:79:
d1:ad:cf:44:1e:d2:f9:d7:cd:ea:8d:9c:2b:5d:8e:bb:dd:d8:
cd:7e:6f:76:22:d8:6a:16:24:83:d7:2f:c8:c3:8f:77:33:d4:
f3:25:06:80:49:6a:ce:0e:30:5b:82:18:90:02:9c:90:c7:0b:
db:7d:aa:c1:90:04:f8:31:cf:fb:fa:e6:34:22:ec:56:cb:6c:
1b:06:b9:fa:13:68:ec:17:b4:05:47:e9:fe:aa:03:d2:a2:ac:
d1:34:bb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:07 2025 by rpki-client