Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/i-Kar8l4c4tBHSL1BnI-7Rd64Nk.roa
File: i-Kar8l4c4tBHSL1BnI-7Rd64Nk.roa (raw, json)
Hash identifier: 4W7UsbIj15TEHwEtaoYlxQx00RVwDd8XpLLQk+uLXPg=
Subject key identifier: 8B:E2:9A:AF:C9:78:73:8B:41:1D:22:F5:06:72:3E:ED:17:7A:E0:D9
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 152A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/i-Kar8l4c4tBHSL1BnI-7Rd64Nk.roa
Signing time: Tue 16 Apr 2024 09:53:24 +0000
ROA not before: Tue 16 Apr 2024 09:53:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5418 (0x152a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 09:53:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8BE29AAFC978738B411D22F506723EED177AE0D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:c2:f9:62:a2:97:66:4f:9a:cd:d0:5e:6c:
27:8e:4d:55:ce:f0:9d:a1:d1:1c:96:1f:95:aa:c0:
b2:2d:81:5d:f6:46:7b:89:0f:43:0c:73:3c:28:28:
d5:ef:f0:e8:3d:a5:e3:a2:f7:37:b5:63:b9:05:ed:
dd:ef:59:26:0c:dd:24:06:47:64:99:69:d7:64:53:
13:d3:9e:cd:32:8c:c3:27:7d:ed:62:5f:db:63:73:
cd:1f:cd:61:bd:70:0f:3c:b5:9d:92:67:32:b0:34:
14:d1:52:91:d1:7a:78:20:c9:73:eb:0c:87:1f:47:
55:be:eb:48:1a:7d:81:fa:fc:c8:61:f5:dc:1c:49:
82:8b:ca:ff:70:d5:dd:83:61:43:89:d7:26:46:a1:
13:ec:77:96:7a:19:b4:3b:d5:27:c8:c1:13:e7:ed:
2e:6f:68:e4:3a:c6:1b:74:76:6b:a7:91:5d:2a:e3:
cd:14:71:fc:a3:79:1d:2e:e2:4f:42:47:61:b0:50:
f6:09:a1:88:47:e0:25:fe:a3:b8:3b:e7:f5:c7:fb:
68:9a:05:fd:4d:eb:9f:57:43:4e:9f:80:74:20:31:
21:88:58:93:7f:02:64:ec:b3:e1:73:f5:b6:8b:d1:
ae:61:0c:87:ee:ce:33:b9:24:48:00:c1:ee:f9:5e:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E2:9A:AF:C9:78:73:8B:41:1D:22:F5:06:72:3E:ED:17:7A:E0:D9
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/i-Kar8l4c4tBHSL1BnI-7Rd64Nk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:cb:b8:e5:ea:41:86:e3:56:c1:64:f7:28:d6:ad:82:f9:ca:
e9:43:ed:d0:ec:e1:46:21:c9:ac:32:23:ae:d3:e4:68:ca:f1:
7b:90:20:80:9f:83:10:a2:5b:79:88:99:eb:7a:0f:e1:ab:89:
1b:9c:f6:a8:14:7b:31:06:4b:77:6f:a3:a6:0f:56:2e:94:b3:
a0:5a:5e:13:96:65:b3:13:ea:f4:10:66:a4:54:8c:e4:0a:fd:
60:c4:19:bd:33:80:0d:24:6a:76:11:9e:3f:62:0b:af:b3:fb:
6c:19:0c:c8:e1:78:4d:ee:0c:72:80:bf:4a:e8:5a:41:3a:73:
ae:1d:ff:f5:25:39:89:0d:b0:79:14:9c:07:a4:f5:3a:c3:fb:
70:7b:16:0d:5c:59:58:81:17:7d:35:84:7a:0e:4b:22:f7:21:
89:a7:9b:73:01:6c:e3:fe:3d:2b:93:fe:b0:7a:da:4f:51:2c:
f7:c3:45:09:6d:72:c3:41:c1:b0:95:29:54:e7:11:dc:62:1a:
25:93:8c:50:51:45:b4:a5:8b:21:bb:07:53:94:3a:4b:32:8e:
4d:3a:f0:f8:ab:65:fc:57:6a:31:fb:bb:38:e8:94:ca:e6:15:
24:d2:fe:67:6c:d0:60:c7:d3:b0:7d:2f:bb:f9:95:7b:e6:a1:
d4:ab:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:28:49 2025 by rpki-client