Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/id96d9FcJ0cKgwIkd8zOrYStTYI.roa
File: id96d9FcJ0cKgwIkd8zOrYStTYI.roa (raw, json)
Hash identifier: yzN/O9+s2pjVpu8gWMu1UctHdBZnPVZhjqHv0tX26ds=
Subject key identifier: 89:DF:7A:77:D1:5C:27:47:0A:83:02:24:77:CC:CE:AD:84:AD:4D:82
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15B6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/id96d9FcJ0cKgwIkd8zOrYStTYI.roa
Signing time: Wed 17 Apr 2024 20:53:35 +0000
ROA not before: Wed 17 Apr 2024 20:53:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5558 (0x15b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 20:53:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=89DF7A77D15C27470A83022477CCCEAD84AD4D82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:e0:4f:a2:65:ab:3c:8a:38:62:8d:7b:a5:
77:07:6d:39:c4:f5:f5:ce:7a:bd:4f:c5:cf:dd:de:
af:e3:46:b9:16:e8:33:98:4c:e8:42:65:ed:87:50:
f8:16:78:57:ad:e0:29:6f:ac:e5:72:84:b8:43:d6:
4e:41:a1:80:55:69:3a:20:74:8b:81:e2:72:40:fa:
85:42:f3:42:07:f7:1d:a9:1a:06:5e:bb:a5:c5:e1:
ac:e3:be:5a:fa:a6:06:0a:a0:4e:21:c8:45:51:be:
ee:b1:4c:81:1f:07:de:61:ce:3f:c5:18:89:7b:56:
ba:85:3a:4a:23:83:f7:0b:df:94:c4:46:38:59:db:
fe:d5:f2:37:d9:1f:52:34:13:b5:5e:55:2a:02:a0:
9c:cd:0d:aa:8a:fc:9e:38:8c:27:54:dc:8f:ae:2f:
0a:c9:5b:6f:90:eb:a1:9c:e3:f4:e9:a5:a0:52:8d:
4e:8c:58:ef:ef:22:34:4d:78:54:40:9b:03:95:e7:
fd:15:35:70:70:b9:5c:71:d4:3a:73:18:b1:0d:f9:
ee:4f:01:80:40:7c:d8:1a:a7:fd:01:36:6f:63:c6:
2c:74:68:36:35:96:34:f7:a3:52:cb:20:45:ca:b5:
ea:46:fc:06:ce:af:f7:70:4c:ae:be:b9:c2:c0:19:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DF:7A:77:D1:5C:27:47:0A:83:02:24:77:CC:CE:AD:84:AD:4D:82
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/id96d9FcJ0cKgwIkd8zOrYStTYI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:d0:9d:cd:74:e7:2f:90:35:85:f8:81:ae:30:66:1c:67:13:
e4:5a:4c:2a:4c:ee:5c:f4:d3:21:e7:5f:3e:51:f7:ba:86:98:
f7:61:ef:b3:bf:6d:4d:f3:c3:84:0c:49:7b:6b:bd:2d:02:2d:
7b:b1:16:54:c7:5f:c9:df:f8:e2:dd:a2:d8:64:b4:03:ff:3e:
ab:c2:ac:a8:da:26:38:77:1d:64:b8:66:61:0a:9a:b3:1d:46:
80:f2:0c:49:48:0a:73:90:dc:72:c0:d6:8f:84:34:68:d0:26:
6a:e3:df:62:3c:c5:1f:bb:3d:0c:eb:a6:69:15:54:d3:4d:1f:
40:bd:d2:1f:0d:25:48:07:7b:2a:38:74:2e:06:d6:bf:68:8b:
3d:68:52:4a:84:2e:9f:2a:c0:28:4b:bf:d7:26:0c:32:3b:78:
45:a5:26:6c:6e:24:ed:4c:72:a1:72:f7:79:99:fb:b1:ed:87:
95:f2:c5:9b:79:42:b5:70:a4:51:d6:91:54:29:5b:4d:7e:87:
b0:b0:8c:3d:fa:19:fe:5d:5d:a6:6c:c6:12:9a:a3:80:32:86:
be:0b:f6:33:cb:b3:53:4b:f5:38:59:ba:9e:35:33:ef:9f:ef:
cc:ca:cf:05:7d:39:b9:7f:f0:29:5c:63:bc:fe:9b:7d:ab:7d:
99:05:b3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:19:00 2025 by rpki-client