Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/6xnA_6FM5WdKdBA3X8UOqYmyoV8.roa
File: 6xnA_6FM5WdKdBA3X8UOqYmyoV8.roa (raw, json)
Hash identifier: 5wmuDFSbj3fC4UKgs0p+4L0AqMtPaQB/XQFufqn31Ns=
Subject key identifier: EB:19:C0:FF:A1:4C:E5:67:4A:74:10:37:5F:C5:0E:A9:89:B2:A1:5F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 160A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6xnA_6FM5WdKdBA3X8UOqYmyoV8.roa
Signing time: Thu 18 Apr 2024 17:54:19 +0000
ROA not before: Thu 18 Apr 2024 17:54:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5642 (0x160a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 17:54:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EB19C0FFA14CE5674A7410375FC50EA989B2A15F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:72:79:98:ef:49:42:c9:ef:9d:da:86:4b:
6c:f3:cb:7f:32:26:2d:85:54:b8:99:2d:fb:ae:15:
4a:b5:1e:f6:8f:ad:a2:42:ae:0d:ad:47:52:ef:d5:
d1:45:cb:1c:ba:d8:de:1d:f4:05:37:26:18:26:40:
2e:ef:53:93:17:fd:0e:62:12:e0:4e:8d:c0:59:f3:
89:7b:2e:91:95:f0:6c:48:b5:03:6a:0d:15:b5:b1:
4b:02:76:a0:48:1f:8a:82:78:13:1e:5b:5e:0d:b6:
f7:d5:5b:8a:a1:a6:3a:1c:45:c9:2c:cf:b6:5e:af:
1f:56:c8:72:13:e3:9c:9f:5f:cc:db:ca:d9:83:34:
45:65:49:7c:94:90:f8:01:3f:81:f1:d6:19:52:96:
0c:8f:34:19:47:46:92:2b:4a:1c:de:be:4b:3a:62:
62:ee:4a:ca:f8:48:91:5c:1b:36:b7:16:4c:d3:6a:
46:58:02:ca:02:90:99:05:59:dc:32:b5:1c:02:b0:
d8:2c:3a:74:78:11:b6:dd:55:51:c2:de:dc:b4:3f:
b9:29:b5:c7:35:cd:02:3a:8a:b9:90:37:f4:89:45:
6e:6d:a4:a3:0f:8a:e6:fe:03:d9:49:77:67:55:f4:
f1:47:3d:23:b2:77:3e:14:a9:32:25:34:fa:e5:1a:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:19:C0:FF:A1:4C:E5:67:4A:74:10:37:5F:C5:0E:A9:89:B2:A1:5F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6xnA_6FM5WdKdBA3X8UOqYmyoV8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:17:c3:71:70:cd:42:6d:60:63:97:1e:85:29:b7:de:e0:0e:
6e:ed:49:26:14:90:81:83:62:95:3d:dc:ea:28:01:95:c9:53:
31:94:b4:db:d2:4b:aa:77:51:eb:df:d5:d3:c0:ad:ce:62:61:
51:4c:54:36:b4:7a:27:19:ac:15:11:07:22:6d:bc:06:51:a6:
48:83:1f:1f:48:74:e7:13:2c:ed:3c:8c:43:75:af:7f:e6:18:
93:1e:d6:e2:f5:b5:1d:fb:be:32:35:8e:24:d5:71:57:a4:ee:
6b:2e:54:74:53:db:8a:9e:07:69:99:62:44:6a:56:bd:6c:15:
2e:4d:16:b7:4c:0b:bd:3f:ad:09:39:71:79:e6:5d:6d:a6:29:
4c:48:38:f3:6d:e9:23:14:7b:81:4c:d5:96:3c:d2:c3:5f:49:
b6:c8:2f:ee:be:ad:35:07:8b:e2:4f:74:4f:f1:cc:77:70:87:
9e:8e:12:e8:35:78:1c:57:85:45:8c:d5:77:b7:e1:c4:a3:e2:
ff:5e:72:05:e1:12:8c:9f:a6:64:4d:08:39:c9:d0:a2:19:9f:
38:7c:a1:5d:7d:de:6c:03:d8:55:3b:61:31:2d:ed:e6:a3:09:
4e:89:c0:2c:69:e0:ab:3f:90:bc:7c:13:80:6e:98:cf:b8:12:
7c:a4:2c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:34:39 2025 by rpki-client