Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/taMBtPucFRoVwcxU3EqhGu6b_EE.roa
File: taMBtPucFRoVwcxU3EqhGu6b_EE.roa (raw, json)
Hash identifier: tlQkhzKa2woLMbYQyIGYu3Sll0xdtIQs9ubaV82kGgA=
Subject key identifier: B5:A3:01:B4:FB:9C:15:1A:15:C1:CC:54:DC:4A:A1:1A:EE:9B:FC:41
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1480
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/taMBtPucFRoVwcxU3EqhGu6b_EE.roa
Signing time: Sun 14 Apr 2024 15:23:15 +0000
ROA not before: Sun 14 Apr 2024 15:23:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5248 (0x1480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 15:23:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B5A301B4FB9C151A15C1CC54DC4AA11AEE9BFC41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:b9:c5:d6:73:0c:1d:b6:95:ed:72:7a:16:
0f:52:5e:cd:be:68:3c:80:a3:f8:61:6a:c1:b7:d1:
cc:e4:12:e1:34:f2:e7:59:c6:f3:27:d5:97:3e:80:
40:a2:6a:27:53:16:55:26:82:d2:04:92:6e:d6:ec:
2d:08:6b:01:d8:7c:e2:89:59:8a:47:23:59:02:14:
50:90:d9:a0:bf:4d:6b:1e:30:74:29:52:63:6c:22:
f4:c1:1f:41:7b:7f:26:e7:90:be:cf:20:7e:41:c6:
ab:88:8e:99:f3:67:01:98:18:00:08:58:bb:76:b4:
53:88:09:7a:13:c3:01:18:10:36:c0:ac:c9:a3:74:
d8:ec:35:20:b6:ca:75:85:61:2f:79:68:3f:9c:d1:
cd:44:0a:d2:25:83:6c:a0:73:07:54:1e:e6:77:27:
a7:0d:d3:e6:cd:9e:9a:46:e5:65:e3:b5:0a:a6:56:
11:13:de:d5:d3:49:4c:b0:f3:ba:6d:84:1b:da:25:
d1:1b:96:3b:64:a8:24:99:75:60:07:d3:f7:ef:2d:
2b:8d:61:f8:04:c6:ff:60:8e:04:4c:77:45:06:b8:
e5:0a:ad:39:fb:c5:e5:92:82:86:ae:5b:b3:79:bf:
7c:0c:60:e0:f3:ac:77:0a:8d:da:ab:a5:c9:18:0c:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A3:01:B4:FB:9C:15:1A:15:C1:CC:54:DC:4A:A1:1A:EE:9B:FC:41
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/taMBtPucFRoVwcxU3EqhGu6b_EE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:4a:bf:2e:9a:6f:a6:94:b5:11:ae:1d:3a:64:64:b4:65:41:
c4:90:89:21:5a:c1:54:65:bc:e4:e9:d4:05:30:b9:75:07:1d:
ef:2b:ca:67:5a:56:2d:3a:a0:a3:b0:d5:24:d8:10:77:6f:fc:
12:6d:7c:69:fa:da:f8:c3:62:bf:fc:21:9f:5b:95:00:b9:79:
7d:1f:54:0f:7f:3a:d5:02:cd:05:4a:98:cc:3e:b3:b9:9f:d2:
fc:5d:1c:27:6f:b9:20:b0:e6:4a:a5:86:44:bd:a7:f5:e2:65:
62:f1:dc:54:a0:09:9c:8e:88:5f:6c:65:60:3c:0c:e8:3a:d7:
11:1c:b2:60:84:a8:80:63:63:03:b0:14:3d:d2:f1:e3:38:11:
e7:d1:d8:da:89:6b:3f:a0:a1:ef:93:f7:45:20:62:f7:63:c6:
d1:0b:d4:d8:b5:7c:c0:ea:ee:56:28:79:45:1f:3d:83:aa:07:
92:dc:1e:74:32:da:cd:64:7f:c9:3d:df:93:ba:8f:31:ac:55:
3e:48:3c:c8:c2:02:0c:9b:a3:ac:d7:97:f2:60:da:cc:3f:e3:
43:25:3d:ab:8a:05:81:d3:16:be:72:49:bc:d2:ac:07:fd:28:
e2:bf:14:94:5d:bf:ce:02:6d:3f:1e:85:47:72:15:db:13:07:
54:c8:ca:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:34:17 2025 by rpki-client