Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/HnNa8CmRf4WKAhI4rjH7HMq67sc.roa
File: HnNa8CmRf4WKAhI4rjH7HMq67sc.roa (raw, json)
Hash identifier: iMh6lffVaVVb2Mz6pXKuAYE5M/U8GAKjPLwxfpKccOg=
Subject key identifier: 1E:73:5A:F0:29:91:7F:85:8A:02:12:38:AE:31:FB:1C:CA:BA:EE:C7
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F04
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HnNa8CmRf4WKAhI4rjH7HMq67sc.roa
Signing time: Sun 31 Mar 2024 00:22:33 +0000
ROA not before: Sun 31 Mar 2024 00:22:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3844 (0xf04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 00:22:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1E735AF029917F858A021238AE31FB1CCABAEEC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d7:b2:ce:49:9f:21:ff:68:25:9f:16:e5:1c:
08:5d:02:34:61:fe:43:9c:b4:89:d2:dd:b3:2e:93:
11:43:d7:d0:f5:b4:19:18:db:f9:fe:e5:a5:12:d6:
36:f5:1e:47:b7:c6:8d:1e:3b:54:2a:1e:b3:14:b5:
7b:97:1e:e2:41:e4:bd:a5:db:9e:20:37:85:80:ec:
b0:e7:55:e6:a8:e2:8f:41:1e:2f:aa:1e:42:b5:f0:
e0:36:53:4f:2d:3d:18:68:28:35:b1:bd:c4:2c:74:
e3:27:0c:11:7e:28:90:bd:51:33:53:99:40:75:2a:
dc:16:83:4d:9d:05:24:98:82:4c:b7:3e:90:a4:08:
21:08:93:d6:ff:76:dd:05:12:f8:6d:d8:e7:36:e3:
9d:bb:26:72:66:d7:e2:47:40:52:d8:09:4b:25:ed:
fc:45:87:d7:14:41:9e:5a:47:95:fc:d6:b9:81:f7:
c7:8b:0e:8f:37:93:6a:b7:54:ce:42:02:7a:dd:e5:
72:c8:51:96:da:e5:6c:90:e8:b0:83:c3:a7:49:d0:
2e:fe:00:2b:c6:4e:d3:f2:50:2d:c0:15:7d:dd:07:
4c:2e:87:61:b7:85:64:21:17:c1:94:d4:73:f2:41:
8b:6c:4f:46:0c:b5:ed:32:c4:06:e3:34:9c:ac:a4:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:73:5A:F0:29:91:7F:85:8A:02:12:38:AE:31:FB:1C:CA:BA:EE:C7
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HnNa8CmRf4WKAhI4rjH7HMq67sc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:91:7d:47:3e:e9:07:a8:62:4c:5f:aa:03:55:3a:75:6f:19:
40:79:29:2c:e8:b9:8e:d0:cf:f1:f5:04:2c:09:d8:8d:4a:c7:
83:a3:88:05:13:ed:b6:3b:9a:0d:98:ae:80:d1:98:83:f7:7a:
71:42:b3:7a:2e:17:dc:6f:a2:e9:8a:ed:fb:90:0c:c6:95:b0:
4e:aa:3e:c4:30:67:06:7b:c9:e0:46:3d:c3:19:a2:45:d2:f6:
3a:e1:68:3f:97:14:8f:76:86:15:fa:b5:29:02:17:db:c9:0e:
a1:43:0a:2c:a0:61:7f:2f:05:03:3f:27:48:c5:ab:18:8d:12:
98:10:c8:6e:d4:90:25:e3:d2:6a:b2:3d:a6:45:df:99:55:8a:
c9:90:65:1a:c9:fc:b0:cf:b3:4a:27:47:3b:d8:4d:4d:26:f3:
6f:98:f8:b8:dd:af:99:0c:1b:b3:58:d1:09:53:cd:21:a2:67:
92:1a:b7:73:78:f4:00:62:cf:ef:ed:c3:7f:dd:29:e6:e8:05:
2f:f6:68:2e:02:5c:e2:ae:ec:ce:e0:25:d2:e9:a1:c6:1d:8b:
b4:b2:76:ea:a2:6a:81:68:14:2d:6e:f9:57:de:26:1c:c8:65:
9d:27:28:c4:79:6e:f8:bd:29:65:58:50:fd:6a:53:fa:b3:1d:
f0:dc:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:36:58 2025 by rpki-client