Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/-zwXr9CBC9q_XOHK2aRehOsfeBo.roa
File: -zwXr9CBC9q_XOHK2aRehOsfeBo.roa (raw, json)
Hash identifier: 86fTOVO2coqYkAP7qMEWI4cCmvLUtD2d2OIUEoY1LiU=
Subject key identifier: FB:3C:17:AF:D0:81:0B:DA:BF:5C:E1:CA:D9:A4:5E:84:EB:1F:78:1A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15F0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-zwXr9CBC9q_XOHK2aRehOsfeBo.roa
Signing time: Thu 18 Apr 2024 11:23:37 +0000
ROA not before: Thu 18 Apr 2024 11:23:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5616 (0x15f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 11:23:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FB3C17AFD0810BDABF5CE1CAD9A45E84EB1F781A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:fd:f3:70:d0:2e:96:02:9d:b0:93:98:aa:
0a:97:c2:80:4f:e5:50:78:34:73:70:86:b3:a7:e5:
b8:fc:1e:1e:11:b5:65:c2:37:d8:66:49:39:f7:3b:
83:30:40:13:e1:f8:f8:3c:3f:a4:b5:ea:15:f3:22:
57:74:88:d7:c3:91:25:10:92:65:88:c8:01:7b:b2:
8d:c7:98:38:b9:c8:17:26:2e:3b:6e:e5:37:77:1b:
e4:d7:76:e8:f6:c3:51:f7:04:d0:6d:62:d9:e5:59:
d3:f9:5e:44:e7:6d:e7:d9:6a:9b:9c:70:4e:d6:63:
f4:d6:6a:6e:c7:0c:fa:e7:ec:27:a4:4e:53:4d:cd:
b1:f9:a6:16:ef:2f:37:7d:1d:62:c4:a0:a4:34:a0:
64:25:1c:03:10:39:7f:45:2c:16:cf:c6:38:ae:a8:
54:e6:3c:0f:f2:db:06:b8:03:e8:0e:55:ae:4d:9d:
6a:8e:b5:d0:db:8f:06:aa:31:a4:87:e6:cc:96:76:
41:db:5b:cc:1a:4d:62:39:b9:e0:73:4e:ee:89:48:
a7:c6:28:bd:bb:39:97:79:30:c8:fb:9f:96:51:7f:
1d:98:42:83:07:35:90:b9:6e:86:8e:a9:93:ea:a4:
66:09:79:b0:7e:14:1c:03:0a:fb:c3:4a:3d:7a:f0:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3C:17:AF:D0:81:0B:DA:BF:5C:E1:CA:D9:A4:5E:84:EB:1F:78:1A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-zwXr9CBC9q_XOHK2aRehOsfeBo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:95:f2:a3:fa:35:0a:ac:bf:76:d5:09:10:0b:36:f4:fa:09:
9d:b8:36:ea:f8:b1:ee:2c:8c:4d:f1:76:5c:24:eb:01:81:d4:
aa:6a:98:29:1c:bf:df:26:2a:13:a2:a9:2b:a1:9f:c6:51:c6:
50:ff:60:81:e2:2f:2b:71:af:4f:ca:66:6a:3c:73:14:67:50:
ef:3b:9e:0e:58:d2:34:d1:f8:b9:1e:87:ee:58:0e:c1:4d:df:
f5:2d:8b:a1:f2:b7:95:86:1c:95:db:78:44:b3:d3:06:44:ed:
50:90:da:b3:e3:98:b1:ce:78:e1:4a:ac:00:e2:92:fb:04:17:
57:76:05:b5:4d:bc:da:97:ba:9e:cf:32:3c:8f:a9:8d:dc:04:
41:28:53:ba:9c:e2:8c:6c:6d:07:d2:5d:f6:9d:3f:37:2a:f3:
28:39:fc:81:f5:bb:2d:d2:fe:7e:1b:e9:73:8e:60:03:ad:f3:
2a:c7:d4:18:3d:a2:46:e3:ae:30:37:cc:86:a2:95:e0:a1:e0:
53:cf:50:2d:8a:2d:38:ea:3e:c7:4b:53:c6:da:b8:75:4c:45:
e6:64:61:5a:46:5d:4e:c9:f5:83:ae:90:9c:ee:8e:8d:d7:df:
63:34:50:4b:cc:a0:42:c3:40:28:60:c8:56:31:2a:7e:93:e2:
b4:a1:1e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:36:46 2025 by rpki-client