Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vhR-liXOA2KqJ1lE0qyGd5Kbijs.roa
File: vhR-liXOA2KqJ1lE0qyGd5Kbijs.roa (raw, json)
Hash identifier: M9fYSTwcdVvf+fNRAuBY15YJiWf8Q1sbluSaPtuSozE=
Subject key identifier: BE:14:7E:96:25:CE:03:62:AA:27:59:44:D2:AC:86:77:92:9B:8A:3B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1388
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vhR-liXOA2KqJ1lE0qyGd5Kbijs.roa
Signing time: Fri 12 Apr 2024 01:23:15 +0000
ROA not before: Fri 12 Apr 2024 01:23:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5000 (0x1388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 01:23:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BE147E9625CE0362AA275944D2AC8677929B8A3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:86:67:7f:f5:0f:e7:5b:4c:43:1e:a3:e6:
c1:63:5b:cd:1b:50:86:d8:2c:cd:bb:ce:90:50:7a:
de:ee:bc:38:78:ed:b3:09:ec:dc:9a:b0:c4:3d:9b:
77:e3:0a:75:86:09:c7:58:60:be:57:67:bb:3e:c0:
cb:88:43:1d:3d:53:3e:9f:fa:59:c9:45:ac:02:49:
3a:cc:54:69:ea:2e:2a:5b:77:91:37:2d:94:48:62:
e2:bd:1a:6c:f8:6b:0b:5c:a1:8e:6a:48:63:1c:f8:
cb:2a:89:93:14:a7:e0:2e:b0:c7:95:2a:bc:aa:3e:
f8:14:d6:39:9d:39:8f:b9:fe:40:aa:0d:ab:bd:e4:
ee:52:25:22:13:16:36:c3:d8:1e:93:dd:12:1e:47:
cb:63:69:5d:d3:e1:6b:1b:3e:a3:10:94:34:cb:9e:
5f:75:9d:93:06:df:16:23:6a:b3:e1:13:25:42:c1:
11:ee:f8:8c:2b:03:00:78:d0:4d:ed:11:c2:2f:7d:
75:78:d3:42:79:e2:b5:f3:53:26:28:d5:cc:93:24:
68:29:8a:9f:51:9e:26:bf:6b:49:8d:dd:f5:35:c7:
b5:06:2d:cd:2d:98:c6:f0:6b:70:b3:dc:13:cf:7f:
24:e5:fe:7f:82:d1:87:7b:32:91:ac:f5:cd:fb:07:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:14:7E:96:25:CE:03:62:AA:27:59:44:D2:AC:86:77:92:9B:8A:3B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vhR-liXOA2KqJ1lE0qyGd5Kbijs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:85:71:6d:a9:e3:6a:38:7d:e7:f8:dc:f9:92:f1:93:92:e9:
67:d6:b4:52:5b:4a:dd:44:32:ac:8b:c2:7f:4c:b4:9a:c0:67:
7a:f0:de:7d:27:a0:33:af:02:53:88:e7:37:2d:a0:ef:cc:ff:
76:70:5f:f3:f5:19:8d:d3:fc:42:3c:17:45:54:9b:56:57:69:
40:24:b7:84:8a:0d:2c:1e:a3:5d:96:d8:d9:a8:d2:56:93:10:
e6:1d:5e:09:ee:74:c7:f2:59:2c:43:3a:de:40:53:2e:7c:db:
79:8d:65:50:02:9c:46:3d:3d:d5:fa:95:33:13:f6:90:a5:a5:
2e:37:5e:04:d0:13:56:d6:96:c3:bc:40:2a:54:52:f4:76:1e:
35:87:97:c8:fb:38:57:ad:17:bc:0c:41:e9:e2:c4:1d:22:94:
df:c6:44:23:45:36:d0:32:2f:c6:19:30:59:8f:0c:e0:c6:43:
3e:57:47:02:f3:15:9a:36:fd:7f:34:00:f1:1e:ce:cb:52:d6:
ea:47:d6:b2:69:08:21:e0:3f:bd:9e:4f:b7:5b:f9:ed:62:63:
42:c5:16:74:88:32:ea:12:0b:f0:d7:e7:f3:96:a3:8d:67:ef:
78:1e:eb:c0:cc:88:33:4e:25:9a:58:5b:47:40:38:ca:30:96:
af:ff:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:22 2025 by rpki-client