Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/blSYGyR9C0Annh2H6B-JqgiW9Sc.roa
File: blSYGyR9C0Annh2H6B-JqgiW9Sc.roa (raw, json)
Hash identifier: FsMrX/ktZvsS5y3kcWJCVhDlESKE8t7e7BGLsXr7jmI=
Subject key identifier: 6E:54:98:1B:24:7D:0B:40:27:9E:1D:87:E8:1F:89:AA:08:96:F5:27
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D3C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/blSYGyR9C0Annh2H6B-JqgiW9Sc.roa
Signing time: Tue 07 May 2024 22:24:21 +0000
ROA not before: Tue 07 May 2024 22:24:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7484 (0x1d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 22:24:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6E54981B247D0B40279E1D87E81F89AA0896F527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:98:45:4e:02:7f:95:7c:b0:61:80:09:79:
84:e3:17:5d:b2:30:06:22:12:2e:c1:ff:67:5d:da:
28:55:86:b2:08:9b:2c:f3:f3:61:33:04:e5:6b:fb:
3b:93:94:32:5d:dd:d6:cb:4c:a4:08:0a:0b:e1:b1:
e0:98:48:1d:c6:61:9f:93:f0:7b:97:a6:92:2b:90:
e7:26:36:ca:82:31:82:61:90:d2:ff:a1:00:85:e1:
af:b0:68:b0:ae:60:b4:c9:0d:fe:5b:e7:5b:ae:50:
67:95:bb:be:07:47:7b:e9:fc:2b:0c:6b:04:3a:42:
1a:49:ce:1d:03:b0:16:60:ab:c8:a2:d4:2f:ef:c9:
5b:7c:93:be:81:dd:51:50:04:47:25:bd:e9:db:24:
cd:77:a3:d4:11:0b:e9:8d:30:50:ab:56:18:b6:63:
6d:68:4d:6c:bd:61:21:58:31:eb:ff:d0:34:6d:b4:
98:0a:03:bb:db:f1:ff:92:72:b7:9c:bc:72:1a:8a:
8d:9b:f3:a3:5e:70:2a:b7:48:60:ec:2b:7b:df:cd:
ad:0d:25:1e:ed:30:8f:15:e0:c0:8d:20:d1:3a:8c:
6a:36:6d:80:8c:5d:67:f7:5d:34:6c:1f:35:57:0b:
48:09:0f:68:e6:22:1a:39:95:24:48:c4:d4:d5:60:
e2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:54:98:1B:24:7D:0B:40:27:9E:1D:87:E8:1F:89:AA:08:96:F5:27
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/blSYGyR9C0Annh2H6B-JqgiW9Sc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:99:d5:dd:2d:ca:44:44:6c:20:cf:5a:0b:70:08:b0:be:cb:
35:5a:1a:b7:e7:3b:cf:fb:7a:37:b0:11:8c:e7:4a:69:e1:fd:
1d:53:50:4e:81:e9:86:a3:67:f1:bc:1d:c3:ee:f4:2e:2f:97:
b0:d0:20:e8:b2:99:0e:50:3b:74:50:d6:51:04:67:6c:9c:9f:
54:e6:25:6f:70:41:71:f5:67:1b:2d:74:a5:5e:7b:5d:0c:5e:
4b:56:9f:c7:be:fa:75:f0:e2:da:4d:ef:6b:23:25:e2:82:e3:
37:99:18:2f:9f:ab:52:41:3e:0b:41:57:e9:ea:09:c4:8a:42:
af:c6:b0:33:bf:92:11:34:d3:df:32:f1:f4:6a:91:41:9c:97:
83:5d:4b:0c:0e:2a:9e:f9:87:d7:04:f8:62:24:7b:6a:10:6f:
35:e7:a3:97:e9:25:df:94:dc:dd:b2:47:29:cf:6b:d8:64:52:
b6:93:e4:50:8f:a7:b6:1f:7c:b2:04:77:95:77:e9:e6:37:ed:
00:50:cf:a8:87:d4:c8:5e:e6:21:19:ac:b7:2d:9a:d6:c7:9d:
9a:b3:0b:ba:23:d2:30:6c:4a:ec:d6:0a:77:69:a3:05:da:1d:
9f:5d:52:07:b9:7c:6e:7a:98:af:ac:d5:ae:cb:18:e6:af:f1:
04:f4:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:33:56 2025 by rpki-client