Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/rfpAvMtBdhDaP66aW7h7boc0g_M.roa
File: rfpAvMtBdhDaP66aW7h7boc0g_M.roa (raw, json)
Hash identifier: pXA0BujqJUuCec2YHZ0wRsYzgXYddofQ6aLvDFMKLyI=
Subject key identifier: AD:FA:40:BC:CB:41:76:10:DA:3F:AE:9A:5B:B8:7B:6E:87:34:83:F3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E02
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/rfpAvMtBdhDaP66aW7h7boc0g_M.roa
Signing time: Thu 28 Mar 2024 07:52:31 +0000
ROA not before: Thu 28 Mar 2024 07:52:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3586 (0xe02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 28 07:52:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=ADFA40BCCB417610DA3FAE9A5BB87B6E873483F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:40:cc:bc:57:a9:a0:43:f7:d6:8c:60:1a:
7b:40:dd:8b:5f:7b:61:58:60:01:6c:60:ac:0a:60:
0a:8f:c0:26:96:aa:37:84:8d:0b:a1:68:a5:9f:71:
e0:8f:fd:64:46:6b:f0:63:54:c1:21:1f:0c:66:52:
7f:3d:dd:aa:f2:56:47:c2:62:31:4e:e2:6f:23:9a:
be:ec:fc:12:74:f4:f0:1b:9e:c5:46:22:3c:ab:2f:
d1:af:36:27:af:59:27:a9:a2:ff:7f:5a:23:14:dd:
ed:d4:b3:88:9f:94:18:86:98:39:8e:c9:32:42:21:
50:2a:a5:ab:3a:8a:c3:d9:80:f1:57:28:ca:b1:2d:
fb:c4:1f:35:4f:7d:fb:a1:11:6f:ed:c3:30:c8:92:
12:ee:bb:7e:16:82:f1:23:03:18:b5:c9:2b:a2:72:
ca:a1:a2:fe:c3:9e:ef:6a:8c:5c:30:ba:78:a7:08:
d3:e5:b7:cb:28:58:c9:19:8c:c2:27:9d:4e:16:47:
40:29:55:77:c2:f6:17:4c:db:6a:ab:6c:a8:6e:7b:
c4:0b:3f:08:48:67:c2:7e:34:f2:8a:4b:5c:82:cf:
18:42:3e:88:bb:9f:97:ca:bc:cb:83:81:5d:f9:58:
15:81:5c:02:e5:ad:64:06:4d:46:d2:a5:96:7c:f0:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FA:40:BC:CB:41:76:10:DA:3F:AE:9A:5B:B8:7B:6E:87:34:83:F3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/rfpAvMtBdhDaP66aW7h7boc0g_M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:a4:05:d3:c8:e8:fb:9e:d2:76:b9:7f:1c:23:77:29:6c:76:
c8:4a:8e:86:2a:54:a7:f1:53:6e:6b:fb:09:d2:51:43:1b:fd:
28:56:41:90:7a:31:70:f0:b1:2b:be:02:c2:15:17:f8:1d:7a:
a3:30:79:47:08:59:d3:2a:f7:48:c7:fd:eb:5f:69:27:58:bd:
34:f2:c1:0b:c0:81:7e:69:23:be:d2:51:33:d7:94:af:44:88:
6a:ab:70:1d:24:65:0c:95:7f:48:0b:66:bb:b3:0d:3a:5c:9a:
7d:b7:7f:99:41:a8:9c:9b:f2:1a:2f:b0:43:2e:83:b3:33:5c:
b2:20:ed:f1:9b:2f:5b:2a:12:59:2d:63:b8:69:a6:67:e5:db:
8d:27:15:35:4a:d7:ae:e4:b5:c1:15:66:eb:15:bc:f1:a7:c0:
a9:68:d8:16:21:f7:2c:82:f3:5a:57:d9:4e:69:1c:e0:b1:d9:
b4:e7:50:ad:ae:2c:04:55:e3:15:9a:f3:ab:1d:9e:af:ed:7b:
c5:53:5a:a8:31:4c:86:a9:0d:30:93:fb:f3:cf:05:f6:05:cf:
e5:e1:56:ce:07:4c:3d:79:16:df:b4:9f:67:93:79:48:07:60:
bc:a5:8f:80:5d:28:62:d8:3b:de:99:29:6d:51:a3:8f:aa:5d:
d4:7b:90:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:58 2025 by rpki-client