Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/GxWzrawXMAonaUNPRC0s2BIkDOw.roa
File: GxWzrawXMAonaUNPRC0s2BIkDOw.roa (raw, json)
Hash identifier: Qc4rd/go6YoxqYfC91wUqFIkq2a5n1bLmb1aVF0uBCc=
Subject key identifier: 1B:15:B3:AD:AC:17:30:0A:27:69:43:4F:44:2D:2C:D8:12:24:0C:EC
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1AAE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GxWzrawXMAonaUNPRC0s2BIkDOw.roa
Signing time: Wed 01 May 2024 02:54:00 +0000
ROA not before: Wed 01 May 2024 02:54:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6830 (0x1aae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 1 02:54:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1B15B3ADAC17300A2769434F442D2CD812240CEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fc:2c:ed:8d:53:8f:54:ae:58:42:ca:4c:1f:
c6:4b:8a:78:c2:2f:13:6f:9e:91:36:e8:d7:ab:3f:
8c:3e:8a:f7:a4:7f:92:cd:e9:e7:35:c3:52:24:00:
d6:fc:62:f9:a0:cb:51:33:fa:1d:b0:4f:c0:95:eb:
34:47:af:ee:7d:8a:d6:e9:0e:04:de:9d:6e:81:7a:
45:3e:36:04:e5:ff:de:df:06:26:3b:a5:33:cf:b6:
30:b9:42:43:25:4f:4f:6a:fb:f9:e8:f2:b8:ed:a5:
4f:41:75:cd:f7:a5:10:5b:04:98:23:83:84:58:a7:
87:97:06:0b:1b:59:e8:7a:a4:09:89:4e:9e:66:77:
b5:67:f5:21:e9:0c:ef:0f:cf:58:d3:0c:6c:85:29:
82:ce:a7:98:84:5e:40:b4:ee:77:9a:96:e3:7c:4d:
c8:78:aa:76:50:c6:a1:60:37:c5:94:0e:04:59:d4:
8b:5b:5f:24:48:6a:4b:ab:69:28:61:00:c5:4e:53:
92:15:94:af:36:f8:0c:dd:9b:32:e1:bc:51:2b:b0:
ae:0a:08:7a:47:b6:23:a9:50:32:44:da:ce:78:28:
c4:cb:5d:f4:a8:b7:b2:cd:ee:28:48:ce:f3:d6:f8:
5f:d4:a0:7e:5f:56:99:9a:4f:62:d0:a0:e5:ae:5b:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:15:B3:AD:AC:17:30:0A:27:69:43:4F:44:2D:2C:D8:12:24:0C:EC
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GxWzrawXMAonaUNPRC0s2BIkDOw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:aa:dc:75:12:dc:26:78:66:65:a8:23:74:65:93:bd:22:e6:
63:c1:78:3d:09:62:45:b7:66:60:c0:4e:c8:1c:9a:b8:f9:fb:
bc:62:37:f0:1c:5b:f7:87:54:78:cf:b1:2a:8b:29:56:18:a0:
2c:63:e6:dc:bf:cc:fd:4b:27:70:d6:1d:f6:20:9c:c6:90:4b:
46:a0:87:04:65:9c:40:21:0a:95:0e:c2:da:05:3b:f1:ec:59:
a1:79:22:d8:b1:e3:74:42:e6:83:7c:09:4f:a0:d9:6b:fe:b6:
35:60:37:50:03:d5:ba:87:2c:dd:5a:de:ea:cc:66:da:ba:e3:
9b:20:90:5f:99:07:ff:28:c8:67:09:b0:23:62:74:8e:9f:30:
8a:2a:83:c4:fe:b9:ed:82:e6:c2:5c:b5:fa:b5:60:29:29:d9:
94:49:95:1f:7c:7d:f6:2e:62:6e:77:9f:aa:e3:10:1e:f0:8b:
9c:d9:c3:3f:54:85:98:fc:82:d8:16:81:ef:4f:e2:b1:73:2e:
c2:ee:87:e1:df:b3:97:54:24:69:fc:cf:d2:2c:47:49:74:ad:
b9:c5:7d:5a:ec:4c:5b:ec:b3:93:ab:11:13:02:90:74:0c:bc:
b7:14:b4:b3:30:54:c6:74:04:ff:07:a2:78:e7:fa:01:16:c3:
f5:c0:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:49:11 2025 by rpki-client