Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/N_JAIo08yi22PqGndzbdLhNW52M.roa
File: N_JAIo08yi22PqGndzbdLhNW52M.roa (raw, json)
Hash identifier: ZbGZG+dvU97D1BrCMYJE6X+jCv89Ek+VYWIbV4W/yIo=
Subject key identifier: 37:F2:40:22:8D:3C:CA:2D:B6:3E:A1:A7:77:36:DD:2E:13:56:E7:63
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B62
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/N_JAIo08yi22PqGndzbdLhNW52M.roa
Signing time: Thu 02 May 2024 23:54:08 +0000
ROA not before: Thu 02 May 2024 23:54:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7010 (0x1b62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 23:54:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=37F240228D3CCA2DB63EA1A77736DD2E1356E763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:f5:cf:d6:24:f7:39:51:ff:12:9d:a8:a1:
83:7e:27:28:8f:38:e5:d9:bc:c3:0f:db:ba:18:74:
44:56:eb:10:22:db:03:a1:0c:58:39:bf:ca:48:47:
19:cd:d5:0e:7d:24:62:66:c0:f8:93:ae:62:b2:1b:
f7:32:af:80:aa:8e:16:b9:9b:81:33:37:4a:ea:50:
fe:21:92:73:39:80:2a:be:08:ba:db:7f:4d:91:f3:
79:c5:22:fb:29:1f:69:66:f0:d7:11:8b:fb:dc:a0:
90:06:cf:22:a4:ce:68:02:c5:3d:92:c9:4f:4f:19:
5f:ca:e7:fd:b5:62:79:a3:b0:f5:4d:78:19:87:f2:
f3:57:07:0c:07:fd:9e:c2:59:e7:e7:6c:58:a3:bc:
38:22:d5:ad:a6:79:21:40:7a:e2:33:e6:21:9a:0b:
6d:20:a2:45:80:2c:f5:ef:86:86:b0:93:d4:49:0d:
c4:73:7a:59:c4:dc:be:b7:79:10:8f:b2:e0:48:89:
92:b5:61:80:7a:38:3e:ef:99:19:b8:3b:60:72:42:
b9:bb:4c:fd:5f:48:66:50:21:74:d3:ee:00:cc:b7:
c7:c7:52:3c:5d:11:66:f3:58:db:e1:dd:fc:cd:51:
f6:9c:a7:15:44:72:6b:24:61:8f:ca:ad:14:96:cc:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F2:40:22:8D:3C:CA:2D:B6:3E:A1:A7:77:36:DD:2E:13:56:E7:63
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/N_JAIo08yi22PqGndzbdLhNW52M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:96:db:64:87:f6:2e:5c:fc:e6:11:a0:e6:91:af:8b:cf:49:
40:1e:42:b2:62:28:96:f7:3c:68:64:2e:e2:d5:59:3e:4a:bf:
6a:9b:dd:6b:63:28:9e:3d:f9:3f:ef:9a:32:9b:b9:61:2a:ec:
da:67:e0:ed:a7:1a:81:bd:8d:9d:d9:ec:f5:dc:92:da:9b:03:
63:65:cf:60:38:de:48:bf:53:1f:c8:a1:6a:ac:3a:1f:ec:c2:
6d:48:57:0b:ab:46:a7:27:53:08:db:a0:a3:48:8f:40:43:9d:
24:6a:0e:46:d0:44:d6:c2:fd:9a:aa:1a:c6:97:25:b0:65:06:
5e:23:c9:66:06:e4:13:bb:e1:ec:fc:84:d1:d9:83:2b:26:bb:
09:cc:1a:6e:12:02:4e:69:25:ac:05:82:97:09:c2:fe:53:b5:
b9:85:d9:33:4c:19:9e:0b:48:b5:03:20:8d:a2:8e:0b:98:68:
6b:18:56:2f:13:20:44:ee:44:d5:d6:6d:6e:9e:4b:37:cf:09:
50:fa:e1:a1:39:ae:c6:35:cb:05:64:a6:0c:15:52:49:1d:40:
90:5d:5c:f0:14:04:dd:8f:1f:da:6d:1c:6c:c2:70:46:a4:cc:
21:59:64:63:46:c0:b9:01:f5:66:67:7c:f8:42:2a:79:9b:5d:
e5:f5:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:36:55 2025 by rpki-client