Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/E27jY5SjwT5tQESkW2iIe_0r2wU.roa
File: E27jY5SjwT5tQESkW2iIe_0r2wU.roa (raw, json)
Hash identifier: 9nIY3whTSSUdAN46QIz5ZAKpU0yIbfi0TYPK/gUkHOk=
Subject key identifier: 13:6E:E3:63:94:A3:C1:3E:6D:40:44:A4:5B:68:88:7B:FD:2B:DB:05
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1690
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/E27jY5SjwT5tQESkW2iIe_0r2wU.roa
Signing time: Sat 20 Apr 2024 03:23:30 +0000
ROA not before: Sat 20 Apr 2024 03:23:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5776 (0x1690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 03:23:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=136EE36394A3C13E6D4044A45B68887BFD2BDB05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:a9:ca:9c:81:8c:98:26:0e:78:e1:8f:c4:
71:76:01:e4:a5:a3:b4:87:67:b6:e4:0f:55:7a:f9:
c4:40:56:c6:be:5a:0f:a1:e9:c4:a9:f4:3e:9f:33:
75:b9:bc:4d:cd:49:58:a4:7e:73:72:7d:7c:58:f1:
18:8d:af:93:05:a6:0f:00:94:78:30:f6:b6:88:df:
ae:f8:83:5d:f4:a8:99:da:da:bd:96:fd:ce:c9:07:
5e:79:62:b5:84:4b:0a:a6:c4:c2:0f:44:20:9d:e0:
ed:c6:01:24:78:96:a8:bd:f7:c4:c0:69:13:8a:a6:
bb:94:e3:cf:20:42:a9:bc:2d:d7:49:6f:04:6b:f9:
79:79:54:3f:94:c3:ba:bd:92:db:9e:04:c1:ad:ce:
f8:89:6b:2e:29:35:8a:4a:ef:22:ba:a2:a4:b8:35:
bd:00:1c:4b:25:25:b7:a9:8b:70:40:56:1f:91:1f:
2b:e3:7e:15:c2:f0:2f:6a:89:85:21:43:b2:64:4e:
55:1c:a3:9b:23:a3:25:b7:e4:e8:bf:a1:a8:69:2a:
bd:09:be:eb:09:84:39:45:c7:6b:37:c5:d8:75:bb:
ef:bc:b4:83:fa:6b:6d:1e:55:b1:f5:3f:c0:0e:94:
93:6e:06:41:5e:89:9a:92:57:32:2c:38:18:00:69:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6E:E3:63:94:A3:C1:3E:6D:40:44:A4:5B:68:88:7B:FD:2B:DB:05
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/E27jY5SjwT5tQESkW2iIe_0r2wU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:70:0a:9c:d7:8f:26:ff:ad:79:74:de:b8:94:a9:5c:a0:97:
b9:9e:27:13:29:20:86:f6:70:23:60:aa:a6:07:f8:13:8f:22:
8a:c2:70:86:bc:48:dd:7c:aa:61:5a:83:21:18:77:b2:a5:6b:
9a:e3:fa:a5:09:18:5b:81:30:4e:fe:3d:e6:40:bd:e5:ce:1a:
e2:c6:93:78:30:6e:f0:93:9a:0b:6a:7d:0b:e8:f6:72:ce:18:
8c:29:cb:2d:b0:f3:83:57:c1:31:f3:ac:42:f2:df:d2:e3:0e:
da:a5:4b:70:52:fe:eb:33:e7:18:7e:51:60:27:56:dc:d1:a9:
e6:e5:0f:66:88:1f:18:de:8e:e2:4c:22:b9:f9:55:0b:7f:f7:
96:00:18:2d:fb:8c:06:29:30:b0:99:13:0d:9e:20:6d:a0:8e:
f4:0b:0e:f4:22:13:dc:2b:a1:f9:18:ef:24:35:9b:b6:19:9b:
3f:ca:fe:a5:c5:c1:27:85:df:1d:42:d2:3e:c3:aa:4f:b9:c4:
ff:fc:8a:63:50:3a:69:cc:ba:40:51:56:43:e7:f7:7b:73:e4:
ed:7a:24:d5:a0:28:66:d3:7b:cb:ff:09:99:82:0b:02:7c:23:
63:82:92:ed:09:aa:b6:85:bd:86:e1:d5:66:2a:b5:7f:53:bf:
5b:cf:c9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:31:35 2025 by rpki-client