Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vsUgFLZVbVu4Y07B5DFvGkON3pM.roa
File: vsUgFLZVbVu4Y07B5DFvGkON3pM.roa (raw, json)
Hash identifier: 0HHmCMgDSanq3JATxcdnCXmD1hGZu9KEEwJ/+qhsyhU=
Subject key identifier: BE:C5:20:14:B6:55:6D:5B:B8:63:4E:C1:E4:31:6F:1A:43:8D:DE:93
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BB2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vsUgFLZVbVu4Y07B5DFvGkON3pM.roa
Signing time: Fri 03 May 2024 19:54:42 +0000
ROA not before: Fri 03 May 2024 19:54:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7090 (0x1bb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 19:54:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BEC52014B6556D5BB8634EC1E4316F1A438DDE93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:6c:c7:4c:84:36:ee:6a:01:cf:52:d7:7e:
26:c6:c7:6b:94:bc:50:4d:ee:15:cf:18:f0:49:80:
c9:c0:7e:f8:6f:00:f1:de:2f:00:3d:ab:0e:92:e6:
0e:1c:bf:b2:e0:34:22:5b:4d:0b:7f:32:80:6d:88:
45:6e:c4:e4:13:32:7d:af:8e:81:a3:0a:9c:b5:c3:
6e:5f:49:e0:0b:53:6e:a8:0b:bb:4e:91:99:10:63:
08:37:3b:1a:f2:3e:bf:82:4c:1b:e6:d2:f9:98:27:
71:f6:6a:fc:1b:86:0d:f3:be:5d:e5:77:db:87:3a:
56:cd:a8:2a:e7:96:54:29:43:bd:50:59:88:0f:17:
83:5c:46:0c:35:9f:1b:94:b0:a0:89:99:6e:69:8b:
d7:c0:59:4c:7f:4b:56:70:cd:44:15:81:39:f0:50:
71:2e:f4:68:ac:82:d4:1e:b8:25:a7:96:9e:e2:c7:
4a:1a:db:6d:bb:85:1d:fe:06:a5:f2:24:ca:c0:48:
24:4a:6b:d6:b7:0f:6d:22:88:62:77:b4:19:c9:3b:
89:fc:57:32:9c:06:a3:83:f6:82:38:39:7a:a5:b3:
be:94:82:77:1a:20:9f:1b:e7:05:79:e2:5c:1a:e3:
fd:e3:73:a5:4b:b3:b0:15:8b:3e:b0:bf:b2:c0:9e:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C5:20:14:B6:55:6D:5B:B8:63:4E:C1:E4:31:6F:1A:43:8D:DE:93
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vsUgFLZVbVu4Y07B5DFvGkON3pM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:0b:2f:d2:30:ef:8a:4e:b9:b5:e7:fc:59:15:9a:cb:2c:33:
3e:e6:61:97:13:9b:d0:4c:96:b9:b9:f4:64:e4:d9:d7:ea:69:
06:fc:80:8d:5c:01:63:ef:6d:f9:0e:23:8b:90:08:eb:b1:55:
16:76:3f:0c:53:3d:2d:b5:08:9e:d2:b9:c5:a0:09:ba:45:e3:
a2:42:27:e8:57:4b:e2:ba:20:84:8e:bd:45:96:65:48:3b:b5:
06:2e:7e:03:d1:73:6d:d2:93:b2:4e:f3:74:5d:ca:8a:9f:39:
38:47:c7:7f:17:c4:55:70:e3:ff:bc:0d:d5:41:d9:01:9a:fc:
f5:af:24:6d:b5:72:5b:ab:0b:ec:ff:be:1e:f4:a3:9c:2b:97:
e6:68:b8:ac:97:f5:2c:7b:8a:8f:3e:2b:43:94:6f:b1:21:fe:
88:be:f2:c0:28:e9:c5:46:98:83:01:ec:25:dc:5e:8c:ee:17:
d2:b8:23:12:af:d4:ae:60:5c:69:10:f0:82:d7:09:18:21:0e:
00:ca:83:47:aa:82:d9:9a:78:fa:84:e5:c3:7a:01:68:2c:9d:
f9:c5:91:2a:5e:c7:c2:30:c4:6c:85:e4:06:1e:10:49:3e:fd:
08:df:0e:af:53:04:66:ab:33:46:9f:e6:cd:a4:09:c1:9a:66:
05:bd:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:01 2025 by rpki-client