Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/nxA8B0j6swqXzgkiZH762z2tlwE.roa
File: nxA8B0j6swqXzgkiZH762z2tlwE.roa (raw, json)
Hash identifier: 4Rpc1SQuiHmD+eJq06lvSLP/t8tbz8hgAufR5yMofL0=
Subject key identifier: 9F:10:3C:07:48:FA:B3:0A:97:CE:09:22:64:7E:FA:DB:3D:AD:97:01
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1572
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nxA8B0j6swqXzgkiZH762z2tlwE.roa
Signing time: Wed 17 Apr 2024 03:53:21 +0000
ROA not before: Wed 17 Apr 2024 03:53:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5490 (0x1572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 03:53:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9F103C0748FAB30A97CE0922647EFADB3DAD9701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:29:e9:7a:2b:07:84:4f:88:2b:53:1f:e0:
8e:f8:8a:c1:98:27:6c:bb:61:b0:e4:cf:e2:f0:38:
8e:fe:44:8b:44:e2:db:75:7c:0c:c1:20:98:80:b4:
89:08:aa:89:7b:35:86:48:27:16:fe:15:c9:08:c1:
9a:7f:ca:b4:0e:a5:69:08:13:8d:4a:8d:4b:69:4d:
4d:4f:2c:69:32:cf:1b:e5:41:9c:3c:36:36:50:7d:
48:72:ef:22:e8:67:ab:26:78:7a:c9:ff:73:7c:58:
96:88:d6:aa:c9:b9:99:60:a5:f0:22:d6:c7:3e:58:
1b:39:2c:30:0e:1b:be:40:44:30:c1:27:ca:c1:d0:
b4:aa:ce:2d:f2:a3:af:ed:58:13:fb:5f:44:70:57:
1a:a7:64:72:64:cd:c0:ac:29:8b:59:8e:a6:16:b0:
49:0b:32:9d:fa:32:4d:0e:44:ad:71:b0:f0:61:30:
ed:3b:82:75:c2:86:b3:34:8c:4e:12:39:6a:0f:86:
c4:e1:dc:75:7b:08:a4:c3:e6:a5:15:3c:74:3b:77:
1b:e0:01:c3:2f:a8:93:87:59:1e:de:b8:1c:47:71:
d5:75:25:88:65:c7:49:b1:e1:88:64:c3:58:cc:61:
9f:83:e7:37:26:c4:c8:fa:3f:15:de:84:21:98:c6:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:10:3C:07:48:FA:B3:0A:97:CE:09:22:64:7E:FA:DB:3D:AD:97:01
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nxA8B0j6swqXzgkiZH762z2tlwE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:70:18:0b:c8:ea:a3:33:1d:22:5b:d3:ce:19:9b:0e:ad:96:
0b:89:71:3e:93:70:35:24:3b:f2:dd:14:ec:b3:d9:8f:2a:55:
89:b5:ea:04:fb:7e:b5:ec:44:83:80:6f:cf:0b:ee:e5:10:32:
d7:32:ae:90:5c:72:f2:80:34:6f:8a:83:7a:16:e9:e8:69:73:
2f:18:b2:dc:35:92:f7:ee:1b:0d:d0:23:fa:b9:37:e3:a1:00:
1d:62:c0:a9:ec:f7:c1:b1:54:1f:d7:50:a6:69:dd:8c:8d:42:
4e:6a:0d:72:66:2d:92:ac:c3:fa:ee:e4:12:22:02:f0:97:e2:
50:e0:70:73:d1:8e:fe:d6:76:3a:85:ae:1b:91:7d:a4:04:e2:
9d:29:ef:31:d8:34:73:e4:14:85:36:5c:14:10:f4:fa:25:12:
5e:64:5e:7b:66:45:09:6f:26:d4:fd:25:65:4c:1b:50:12:89:
b6:f7:5a:dd:7b:1f:ed:43:e8:aa:b3:6b:84:3a:d4:dd:84:2a:
c9:5f:93:47:17:a4:0e:a9:03:be:fe:a9:b7:1f:1c:49:10:17:
bd:9f:c9:08:10:78:fb:9e:51:e9:0e:d5:6f:3e:f1:67:f6:2a:
9e:eb:88:09:27:a5:a6:0d:97:e7:a4:5e:2f:05:e8:41:c3:a9:
a7:ef:1a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:37:22 2025 by rpki-client