Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/-xMx5bcddNZnAnO5Nj-GRi9jCo4.roa
File: -xMx5bcddNZnAnO5Nj-GRi9jCo4.roa (raw, json)
Hash identifier: OO+ZhkHbqrmSJY35G5aZ7xt5mMec2NPc/+ynDjZ3ktI=
Subject key identifier: FB:13:31:E5:B7:1D:74:D6:67:02:73:B9:36:3F:86:46:2F:63:0A:8E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1292
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-xMx5bcddNZnAnO5Nj-GRi9jCo4.roa
Signing time: Tue 09 Apr 2024 11:53:02 +0000
ROA not before: Tue 09 Apr 2024 11:53:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4754 (0x1292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 9 11:53:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FB1331E5B71D74D6670273B9363F86462F630A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:eb:9f:27:79:ff:2c:a8:bc:01:62:4e:5a:
43:40:7b:3f:ba:a1:cf:76:57:39:77:9a:13:59:77:
20:df:1b:8a:e8:54:ae:3a:47:a7:78:46:6f:49:ac:
ee:70:bb:da:61:2a:3a:0d:fa:c9:8d:bc:2f:12:d4:
8a:6e:01:51:ee:03:e9:6b:fc:fe:b9:44:0e:4f:c6:
20:57:1f:a3:05:99:77:34:fb:7d:eb:86:2e:92:71:
fb:3c:f4:5e:a7:a9:d0:d7:fa:cf:f5:5d:f1:cb:40:
e2:09:da:4d:cc:ae:02:63:08:16:1e:e8:e8:ed:da:
d3:fa:21:4b:f9:d2:d1:58:88:3c:e3:0a:ee:88:5f:
03:0a:fe:53:3f:35:14:41:d4:52:c3:39:5e:70:e5:
cf:4f:fb:81:07:67:97:8c:c1:41:d6:d9:8e:83:79:
43:6b:c4:47:ef:1d:6e:17:07:cd:66:52:ae:59:be:
77:2d:7a:e2:56:7b:4e:86:d9:c0:ef:98:28:b7:7c:
ef:5a:d2:4a:3e:4e:5e:f6:76:83:e7:2b:82:d8:6f:
bd:2d:79:70:26:21:90:66:4e:f0:bf:f8:2d:93:71:
b0:b6:f6:33:0c:bc:23:4e:aa:e4:17:b8:73:b0:aa:
d5:bb:07:38:9a:ea:5c:43:f8:cb:de:f0:fc:40:24:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:13:31:E5:B7:1D:74:D6:67:02:73:B9:36:3F:86:46:2F:63:0A:8E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-xMx5bcddNZnAnO5Nj-GRi9jCo4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:24:ff:6e:6c:b5:f1:83:27:55:64:41:61:f3:25:ca:8c:90:
dd:47:35:54:db:b2:9a:3f:e2:a5:85:13:cc:0d:4f:78:fb:dc:
d7:50:f2:d0:83:9e:a7:df:d4:d7:7f:16:42:dd:74:b4:0f:75:
17:a1:71:3e:ae:ab:a7:73:4e:45:8f:14:f0:5e:43:d8:25:1b:
9b:8f:80:09:ea:a4:77:68:75:5c:bf:aa:be:85:48:31:74:4b:
79:ae:0e:f7:14:d9:ee:fe:d9:a0:03:0c:55:13:15:22:40:8e:
41:76:49:82:09:62:3f:2d:e6:b3:33:c7:dc:c0:64:95:e4:e1:
ff:5f:70:d4:b6:ef:93:20:ed:56:94:8f:9d:69:4a:e5:b8:80:
b4:0c:e3:92:59:54:81:66:16:01:fe:70:a2:41:1b:43:fa:48:
47:b3:9a:13:59:58:63:07:48:e7:fc:06:7a:32:4d:46:19:28:
9f:0a:6b:aa:2a:11:2a:89:67:43:78:7e:c7:24:8c:a0:78:a5:
ca:26:a4:22:7a:56:e7:cf:9f:b6:c7:89:5d:58:f8:43:9b:47:
1b:db:e4:a0:41:fe:ff:a1:1a:20:75:8b:32:fc:43:64:bc:03:
82:59:a4:25:17:db:87:84:96:f5:01:d6:aa:88:6b:a7:f0:1a:
ff:7e:ef:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:25 2025 by rpki-client