Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Cxvv-fKxQgBgVL8CcE0PEcFtMBk.roa
File: Cxvv-fKxQgBgVL8CcE0PEcFtMBk.roa (raw, json)
Hash identifier: Xbh7lMwrS5pHY43L0fHBK+U5jMhtTh2EDWnNXWmAlPc=
Subject key identifier: 0B:1B:EF:F9:F2:B1:42:00:60:54:BF:02:70:4D:0F:11:C1:6D:30:19
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0DF6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Cxvv-fKxQgBgVL8CcE0PEcFtMBk.roa
Signing time: Thu 28 Mar 2024 04:52:25 +0000
ROA not before: Thu 28 Mar 2024 04:52:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3574 (0xdf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 28 04:52:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0B1BEFF9F2B142006054BF02704D0F11C16D3019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:c2:9d:04:29:a5:e0:16:48:99:f5:5a:f1:
54:48:b2:79:23:0a:f2:11:15:c8:f4:e1:0a:06:08:
13:5a:37:ad:7f:d3:d1:4c:c7:8a:9e:10:c4:27:ba:
7d:af:f3:8c:6b:56:4b:a7:25:b8:88:37:04:e3:fb:
9f:c4:21:18:4b:8d:3c:c7:3d:1c:4d:e0:ac:45:47:
83:58:f8:c5:90:2d:b8:df:e6:d3:ea:f0:9f:e6:79:
03:ec:9b:0c:a8:eb:06:e9:8c:ac:3f:77:73:0a:b5:
a5:8a:57:a2:66:eb:fd:ff:47:29:a2:ad:2a:24:14:
47:a9:f3:b5:0f:d7:00:23:5f:29:e4:78:bb:0b:1b:
e9:b3:5d:fb:a8:9b:55:c4:2a:e6:87:ed:8a:9c:4e:
9a:bc:9c:82:44:3e:e4:01:e2:9d:06:66:55:82:c0:
89:47:64:e0:43:30:18:18:97:d1:76:7a:dc:83:86:
b1:a7:b2:b6:84:ba:87:c8:8c:0c:96:16:6c:97:b5:
1d:5e:4f:5b:3c:96:da:21:15:40:f2:4d:5e:f3:cd:
d9:f3:fe:81:bf:9d:d8:ef:a5:3c:b9:25:00:4a:33:
0c:9f:bb:87:7f:cc:28:1b:7f:51:1c:9e:f6:06:90:
55:65:5f:8b:fd:87:6c:6e:a5:e4:c7:c6:12:43:23:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:EF:F9:F2:B1:42:00:60:54:BF:02:70:4D:0F:11:C1:6D:30:19
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Cxvv-fKxQgBgVL8CcE0PEcFtMBk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:e2:98:b8:2c:8f:27:f8:c8:2e:96:bc:85:0e:60:20:2b:99:
a9:e6:00:09:43:28:be:81:93:a8:e4:24:b8:ca:49:4e:9a:4b:
09:d8:68:ef:f7:7f:a4:c3:73:5b:53:1e:d4:a7:ed:58:05:0f:
6e:98:51:f0:f3:a6:fb:86:a6:35:dd:52:f9:09:1e:a5:39:45:
34:49:b4:ca:36:64:7a:83:4e:ec:aa:cb:6b:76:c1:77:1e:8b:
17:87:90:26:b8:e1:25:fe:14:7b:07:da:03:4a:13:83:22:3b:
6d:da:31:c9:7d:97:6b:fd:45:d1:2e:81:a9:37:5a:61:2a:ca:
ee:38:8b:64:69:06:d0:91:53:5f:d9:17:d9:38:2c:a5:4b:62:
76:bf:d5:23:68:1c:77:33:81:90:73:c9:b7:ea:86:49:d0:10:
21:09:55:91:3d:c2:21:66:9d:99:72:1a:96:61:b9:c6:3e:16:
81:8d:19:58:43:8a:6d:5d:8f:cf:9a:b9:bd:71:80:97:47:09:
21:14:2c:a9:fa:f3:93:72:0e:93:9f:f1:b3:f1:29:e8:ff:e4:
84:be:da:85:7c:97:b9:31:ed:9a:e5:31:05:26:18:e1:6b:8f:
ad:03:b3:14:9b:2e:5e:10:7f:a9:8f:b3:4b:8c:e4:b4:0b:fc:
9a:62:6b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:01 2025 by rpki-client