Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/hWdZbD7JfjW41Yb_MavPRTnGZ6o.roa
File: hWdZbD7JfjW41Yb_MavPRTnGZ6o.roa (raw, json)
Hash identifier: 6AF6yW7Vjh0rIGGG6d82wP3x7W42Fam6BIpfsUIek/g=
Subject key identifier: 85:67:59:6C:3E:C9:7E:35:B8:D5:86:FF:31:AB:CF:45:39:C6:67:AA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 142C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/hWdZbD7JfjW41Yb_MavPRTnGZ6o.roa
Signing time: Sat 13 Apr 2024 18:23:14 +0000
ROA not before: Sat 13 Apr 2024 18:23:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5164 (0x142c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 18:23:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8567596C3EC97E35B8D586FF31ABCF4539C667AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:19:60:b3:b3:a9:77:88:e7:aa:2f:d0:32:
7b:af:9f:e9:b3:9c:96:ad:9a:5b:c8:c7:f1:df:5b:
d1:c0:39:02:21:ea:75:59:15:62:6e:a5:77:d4:ad:
6b:80:95:04:b6:17:d9:a1:55:81:c1:89:50:07:5c:
f5:2e:9c:59:e4:52:a9:59:e1:db:42:7f:2e:0b:77:
dd:89:6d:da:75:58:07:7d:4b:6f:bd:07:77:29:5f:
b6:40:b9:91:a1:cb:d1:99:f2:40:f0:f1:fe:1e:73:
a6:db:21:92:25:40:07:df:f7:36:d4:fc:10:90:41:
31:c6:50:eb:c9:f4:15:f2:6a:9b:a2:bd:41:48:b4:
1c:32:65:d7:b9:04:9b:f2:96:1a:03:f8:76:d0:27:
72:80:32:89:67:fc:af:21:61:33:2a:cc:bc:90:80:
e0:d4:ef:62:e6:63:44:76:37:88:d3:03:20:4a:dd:
20:6d:e3:8a:b7:6f:e0:fe:76:c8:fe:c2:ba:38:9b:
d0:d9:ce:a8:0e:dc:d1:b3:b4:e5:3b:46:01:eb:13:
23:ae:a8:e1:df:70:7b:ec:8f:a7:07:74:06:4e:6e:
f7:2c:d3:0b:24:f4:70:88:0b:f2:22:98:99:dd:02:
27:a3:21:a0:4b:75:69:d1:ad:66:25:d3:7b:c6:e5:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:67:59:6C:3E:C9:7E:35:B8:D5:86:FF:31:AB:CF:45:39:C6:67:AA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/hWdZbD7JfjW41Yb_MavPRTnGZ6o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:10:fc:61:be:3a:43:9a:68:16:24:4c:10:b7:02:75:65:39:
13:d0:82:ec:7f:c1:7f:0a:e0:fa:68:9c:48:80:a1:fa:a5:44:
51:cd:24:87:f1:1d:39:bb:c4:4b:cc:c2:64:3f:52:d6:57:6b:
7b:dc:b3:2f:95:36:15:b9:dc:39:21:bd:5f:e9:8a:32:3c:d7:
22:d9:fe:4a:48:46:e0:2a:e0:97:73:7d:38:e0:08:14:db:81:
cf:6d:8b:0b:f5:00:0b:02:7b:3c:7d:ee:5c:53:77:67:69:d1:
1b:83:93:c3:e3:9b:d1:ed:cb:ba:a1:3b:50:5d:75:67:66:87:
f8:63:f8:2a:91:9d:65:74:97:c1:82:b6:fc:35:d8:97:3f:ca:
c7:ed:48:01:70:ab:2a:a9:ca:1c:28:2c:8b:e7:00:ee:eb:86:
92:fc:22:ae:d8:5a:1e:01:70:91:78:ca:a8:9d:4f:e1:1d:ef:
4c:b6:73:74:ce:a0:a5:45:19:eb:83:c1:49:e0:40:c0:1c:fd:
1b:69:49:33:3b:31:ec:79:21:ee:4a:36:11:ed:37:f2:94:40:
21:ef:8c:cf:32:19:01:bf:0e:9c:b8:a3:fb:11:6d:f1:12:2c:
74:1f:29:a0:6b:c0:f8:ef:30:33:74:b4:05:e9:51:a0:e0:52:
0c:3a:c7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:31:53 2025 by rpki-client