Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/IMBskJqXO7-ViOhBup27coaZvy4.roa
File: IMBskJqXO7-ViOhBup27coaZvy4.roa (raw, json)
Hash identifier: IOWvrzEH7L7Ie2pSuAZE/Ak15OJk5dsehP0YK/3En/k=
Subject key identifier: 20:C0:6C:90:9A:97:3B:BF:95:88:E8:41:BA:9D:BB:72:86:99:BF:2E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1560
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IMBskJqXO7-ViOhBup27coaZvy4.roa
Signing time: Tue 16 Apr 2024 23:23:20 +0000
ROA not before: Tue 16 Apr 2024 23:23:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5472 (0x1560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 23:23:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=20C06C909A973BBF9588E841BA9DBB728699BF2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:5f:36:e9:ac:80:c2:57:ac:1f:95:13:40:
0a:05:5c:1d:61:4c:43:bb:3e:20:3f:04:68:0e:e2:
b5:46:66:39:16:f4:11:39:49:0a:b9:42:52:6c:e7:
91:36:ec:6b:72:49:76:17:e0:ba:b3:54:5f:7d:6d:
12:2f:43:76:8a:f6:23:be:de:06:1e:74:e4:b8:1c:
56:4c:13:48:cb:76:58:af:54:6c:2b:7a:cd:d0:fd:
4b:c9:9a:7b:ac:c4:c1:91:8c:d0:6b:61:f3:da:09:
d1:c8:9b:1f:fe:91:12:8c:f8:0d:6d:b5:7d:46:b0:
98:2a:c3:31:61:87:16:ce:99:fa:fa:5f:d5:35:21:
49:64:e5:6b:9b:16:c0:5b:6e:b0:18:e0:70:4c:bf:
3f:93:d8:a1:76:9d:b9:55:df:f3:a3:f3:1a:ee:af:
d0:ae:07:7a:2e:b8:93:51:1d:80:8f:de:17:40:71:
1c:22:de:8f:0e:f2:70:68:52:15:63:72:5e:b5:37:
40:8f:c1:4a:e3:37:7f:3c:9e:2a:0e:9d:41:5b:2f:
cc:34:40:fd:f1:56:e0:d3:a0:12:d8:ba:80:c1:45:
ea:41:4b:af:90:8b:ae:38:b1:f4:25:51:82:76:14:
e9:7d:c8:b5:2b:9a:ce:5e:16:ba:bd:62:b9:49:fa:
e6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C0:6C:90:9A:97:3B:BF:95:88:E8:41:BA:9D:BB:72:86:99:BF:2E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IMBskJqXO7-ViOhBup27coaZvy4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:6b:1f:c4:4d:c6:22:e4:90:4c:23:85:4c:cc:ad:df:ed:02:
00:5c:0b:80:77:f8:18:3a:3c:89:aa:2a:96:60:c5:d6:74:28:
33:01:62:5e:26:04:bf:07:94:8b:50:53:07:cb:b3:cb:85:fa:
97:64:c4:25:e4:8c:cd:1c:40:4f:b9:38:57:17:8d:c6:c6:9f:
13:98:11:bf:25:e3:a8:88:91:29:bd:fb:0d:f4:d5:ac:49:77:
88:ed:a6:7b:0d:09:4d:0a:25:55:74:e7:a5:7d:03:41:42:6a:
7e:fa:1f:2e:e4:5f:f2:24:cf:e4:ec:cc:c6:be:2b:dd:86:a7:
9a:e4:56:83:31:68:2c:7a:e3:7f:89:94:ea:e5:53:65:2d:1f:
a3:b8:20:fb:fa:da:6f:1d:1e:64:07:f5:bf:45:18:b2:96:43:
c6:65:fc:3e:e1:78:b1:f0:5e:6d:e0:a3:5e:65:18:a4:20:d4:
ef:89:9e:14:90:0d:c7:91:4f:cb:f8:80:08:8a:f0:fa:6a:87:
99:08:bc:4b:ce:d4:1c:e5:8f:9a:d0:ce:b7:cd:3f:d3:fb:80:
06:4b:d2:43:67:38:d7:15:c2:c5:bb:4d:3d:65:68:a9:99:a7:
8a:fa:13:a8:d9:8d:8e:de:ed:39:18:67:c5:06:d1:0a:11:c8:
c0:ab:f8:78
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTYy
MzIzMjBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDIwQzA2QzkwOUE5NzNC
QkY5NTg4RTg0MUJBOURCQjcyODY5OUJGMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlD1826ayAwlesH5UTQAoFXB1hTEO7PiA/BGgO4rVGZjkW9BE5
SQq5QlJs55E27GtySXYX4LqzVF99bRIvQ3aK9iO+3gYedOS4HFZME0jLdlivVGwr
es3Q/UvJmnusxMGRjNBrYfPaCdHImx/+kRKM+A1ttX1GsJgqwzFhhxbOmfr6X9U1
IUlk5WubFsBbbrAY4HBMvz+T2KF2nblV3/Oj8xrur9CuB3ouuJNRHYCP3hdAcRwi
3o8O8nBoUhVjcl61N0CPwUrjN388nioOnUFbL8w0QP3xVuDToBLYuoDBRepBS6+Q
i644sfQlUYJ2FOl9yLUrms5eFrq9YrlJ+ub9AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUIMBskJqXO7+ViOhBup27coaZvy4wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0lNQnNrSnFYTzctVmlP
aEJ1cDI3Y29hWnZ5NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAsmsfxE3GIuSQTCOFTMyt3+0CAFwLgHf4
GDo8iaoqlmDF1nQoMwFiXiYEvweUi1BTB8uzy4X6l2TEJeSMzRxAT7k4VxeNxsaf
E5gRvyXjqIiRKb37DfTVrEl3iO2mew0JTQolVXTnpX0DQUJqfvofLuRf8iTP5OzM
xr4r3YanmuRWgzFoLHrjf4mU6uVTZS0fo7gg+/rabx0eZAf1v0UYspZDxmX8PuF4
sfBebeCjXmUYpCDU74meFJANx5FPy/iACIrw+mqHmQi8S87UHOWPmtDOt80/0/uA
BkvSQ2c41xXCxbtNPWVoqZmnivoTqNmNjt7tORhnxQbRChHIwKv4eA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:31:54 2025 by rpki-client