Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Rrwbq_IAg6YxbV-tpXOwTOVF-1c.roa
File: Rrwbq_IAg6YxbV-tpXOwTOVF-1c.roa (raw, json)
Hash identifier: bytClzoPwT+Gr3crd63hN4yVTUql5+O43RAT2/0XGVE=
Subject key identifier: 46:BC:1B:AB:F2:00:83:A6:31:6D:5F:AD:A5:73:B0:4C:E5:45:FB:57
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1232
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Rrwbq_IAg6YxbV-tpXOwTOVF-1c.roa
Signing time: Mon 08 Apr 2024 11:52:56 +0000
ROA not before: Mon 08 Apr 2024 11:52:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4658 (0x1232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 8 11:52:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=46BC1BABF20083A6316D5FADA573B04CE545FB57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:5d:8d:ab:e9:5c:6f:ee:06:da:95:ac:de:
83:c5:f6:75:6e:c7:7c:e7:73:98:a8:5a:ef:99:1e:
7e:c3:92:de:bb:09:6c:3e:f5:fe:11:99:05:7b:11:
ba:e7:ad:d4:82:b8:54:43:ff:5a:42:58:b8:e1:fe:
cc:75:1e:32:77:29:4d:65:50:4a:62:cb:36:ce:c8:
c2:f4:53:d1:01:10:2f:a2:5b:5f:b2:78:16:4a:fd:
1d:3d:c4:f6:25:62:af:b0:f9:be:18:39:e9:e4:c1:
9c:83:c9:9a:1c:23:80:59:cd:4b:42:ea:6d:16:54:
5d:31:64:0a:5d:4d:80:69:65:75:d7:5b:62:61:ca:
bf:0f:cb:07:93:bc:a4:52:40:3c:c6:9f:e5:8e:96:
93:02:3a:a4:24:5d:60:1f:e0:e2:77:28:58:1f:64:
ae:2b:d3:c2:c3:34:3e:38:fc:25:18:08:b4:20:d7:
31:51:36:43:00:b3:db:57:31:36:52:16:32:e9:f1:
2e:c2:70:39:4f:4b:17:28:a3:2c:a4:48:25:f7:95:
f7:f4:92:14:f1:c0:19:92:16:06:94:ca:36:27:9b:
77:14:23:4b:39:89:19:bc:8e:72:02:85:aa:ed:47:
41:0d:09:4d:f5:35:b1:c6:d8:ca:7a:e2:13:1b:44:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BC:1B:AB:F2:00:83:A6:31:6D:5F:AD:A5:73:B0:4C:E5:45:FB:57
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Rrwbq_IAg6YxbV-tpXOwTOVF-1c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:8e:07:fd:ec:a4:ae:35:52:9a:32:25:04:ce:84:08:97:dc:
b4:cb:84:10:b3:d5:21:80:e6:04:39:f2:2a:42:bd:a7:41:f1:
5e:58:e5:49:02:3d:92:48:e2:f6:f9:2e:ce:b0:4d:79:25:0d:
1f:cc:1d:8e:6d:9a:3b:75:dd:fc:df:a6:0a:f0:af:28:13:51:
c2:c1:09:f3:35:2f:83:78:0d:b3:3a:08:d8:e2:9f:7c:b8:27:
2e:77:13:60:34:d2:cd:f1:f6:9c:86:87:d1:76:b1:42:08:0b:
2b:30:6a:71:62:23:ed:a6:dd:ee:3e:47:9a:30:55:22:db:7d:
79:f9:f3:74:20:82:e4:38:b5:39:86:f1:d3:0b:32:d0:a4:56:
fd:f2:17:5c:51:0a:c7:0b:32:e1:b2:e3:66:44:24:ba:dd:18:
1d:6e:64:c3:47:3d:89:f3:ff:7f:4f:aa:2d:7e:8b:29:7a:59:
07:d3:ca:e7:3a:cd:e8:e8:a9:57:c6:e9:da:2f:95:44:da:f2:
56:94:76:c0:f3:d0:c0:23:c3:b8:a6:9e:2c:92:11:c8:0c:0a:
77:af:7d:07:9b:5f:63:29:6a:49:33:36:c5:fd:a1:70:47:1c:
6d:48:ec:08:b4:88:1d:3b:35:d0:2a:48:33:b1:00:6c:8c:1a:
8e:77:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:34:16 2025 by rpki-client