Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/9_5v-i39WdALICC3oZBJxzh7N5A.roa
File: 9_5v-i39WdALICC3oZBJxzh7N5A.roa (raw, json)
Hash identifier: qfmqXlj93O/LRZgyc9OaCR7wSC1I3WClsel28N7my8w=
Subject key identifier: F7:FE:6F:FA:2D:FD:59:D0:0B:20:20:B7:A1:90:49:C7:38:7B:37:90
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14F0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9_5v-i39WdALICC3oZBJxzh7N5A.roa
Signing time: Mon 15 Apr 2024 19:23:17 +0000
ROA not before: Mon 15 Apr 2024 19:23:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5360 (0x14f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 19:23:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F7FE6FFA2DFD59D00B2020B7A19049C7387B3790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:10:f1:44:58:f9:25:fa:7c:5c:d7:57:ed:
c5:9a:a6:46:4b:0b:bd:77:40:2f:c3:4f:de:2a:50:
16:c4:06:a9:c2:e5:e7:02:be:e4:c9:b0:38:f1:50:
cb:9a:7f:55:8f:28:d4:22:06:eb:70:97:03:f7:23:
8b:2c:fd:71:63:61:09:8d:b9:d8:0f:5a:33:60:ea:
ad:e3:7d:01:ef:e7:61:a7:1e:7b:69:0b:1b:0b:64:
d6:b0:4c:67:9e:b7:e2:a9:b5:45:11:dd:c9:1f:06:
35:ba:7d:64:0d:a6:b4:02:ae:57:3a:e0:60:f5:ac:
15:0a:94:f6:89:ef:07:d1:20:60:ad:25:c0:12:59:
3f:9b:ba:21:22:ac:17:2a:30:f3:db:3a:67:65:1a:
c3:ba:d1:de:fd:19:0d:0e:cf:ff:41:3b:29:bc:77:
67:5b:d0:8c:6e:15:3f:d0:7c:fc:30:b0:2f:7b:e4:
47:57:ef:3f:20:83:db:0c:6e:07:db:4a:db:94:b3:
32:da:39:4f:45:08:7b:6b:8e:df:8f:c6:c4:59:fe:
75:5a:43:e8:f6:4f:7d:02:1b:2a:00:6a:55:dd:b5:
b8:ec:51:24:f2:05:61:86:15:0e:0f:fc:7a:44:ba:
fc:97:b6:06:74:0d:be:cc:4c:ae:dc:3c:cd:86:6f:
f7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FE:6F:FA:2D:FD:59:D0:0B:20:20:B7:A1:90:49:C7:38:7B:37:90
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9_5v-i39WdALICC3oZBJxzh7N5A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d5:fa:b0:aa:a5:76:75:43:f2:ba:19:b5:bd:c4:29:8d:2b:f4:
63:3b:83:b2:d8:57:e4:71:38:70:19:97:8d:2d:f8:f0:d4:9e:
01:4c:cf:25:33:97:ad:1b:7e:76:6a:e3:18:2b:11:aa:25:78:
52:e2:dd:90:3d:b9:e7:84:06:f6:bf:33:41:6a:00:cb:9b:0f:
19:93:d0:26:3e:37:81:db:7a:a3:e3:b1:08:13:d6:fc:3b:0e:
74:2c:70:af:d3:01:dd:82:d1:bb:1d:75:67:cc:df:59:06:0c:
f6:c5:14:64:84:a2:b8:77:1f:5e:fc:6d:ad:76:54:d5:a3:6b:
10:db:1c:4b:53:7f:f7:4a:5e:20:80:fb:ba:15:0a:6d:84:22:
8b:e5:6f:c8:71:f3:2b:db:a8:91:8b:b9:c2:b5:e9:a7:92:8b:
54:4d:fa:95:91:50:d3:b1:7d:52:f1:13:fd:13:76:d6:19:f7:
c2:e3:e6:60:20:74:6c:b3:81:90:95:8c:7f:08:6a:6b:64:b8:
5d:5b:d2:fe:f2:db:5a:23:fc:4b:a6:59:a9:7c:cb:fb:48:48:
1c:85:3f:f6:b9:2f:ef:e9:54:c6:d7:0e:f3:6a:17:2c:58:5a:
2d:47:6c:e8:b8:db:f0:5b:07:d0:0e:54:3a:ef:68:57:95:cc:
82:67:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:34:05 2025 by rpki-client