Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ojr0gCrq_loefSzXXatw_sAIy3k.roa
File: ojr0gCrq_loefSzXXatw_sAIy3k.roa (raw, json)
Hash identifier: 6yCdgiDQIcbzzJLFywvqjl8O2fTF34/HvkVTmso4SiA=
Subject key identifier: A2:3A:F4:80:2A:EA:FE:5A:1E:7D:2C:D7:5D:AB:70:FE:C0:08:CB:79
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1366
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ojr0gCrq_loefSzXXatw_sAIy3k.roa
Signing time: Thu 11 Apr 2024 16:53:12 +0000
ROA not before: Thu 11 Apr 2024 16:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4966 (0x1366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 11 16:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A23AF4802AEAFE5A1E7D2CD75DAB70FEC008CB79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:a1:35:33:0c:35:df:a2:bf:1d:92:43:b8:
50:b0:50:5f:fa:2a:4e:0c:24:cb:b5:12:c3:3a:80:
ac:3e:e8:6a:c6:ee:8d:44:c1:47:50:00:59:d8:83:
46:6d:a2:2a:f8:05:76:6e:41:f5:2f:b8:c0:24:09:
34:dd:c6:3e:31:0d:77:1e:4b:c6:a9:b8:b2:37:35:
e1:12:c6:43:56:f8:f9:8d:b4:5b:41:a0:91:ba:3f:
07:62:3b:23:c8:30:49:2c:9a:d8:d8:02:75:82:61:
3c:35:10:e0:1e:49:ae:41:11:89:68:df:01:cd:bb:
64:db:17:55:d4:56:67:db:e1:48:9c:32:95:c4:cf:
4c:a1:37:35:35:55:b5:d5:4a:d3:06:f2:3b:d3:ad:
87:c2:f0:05:9f:3a:d9:4f:01:e1:4c:9b:db:b6:57:
59:42:75:b5:54:f5:5e:69:bb:53:a1:d3:4a:24:a9:
ea:da:9b:18:93:e2:3e:26:b5:a6:43:2b:20:52:7b:
6e:fb:75:8e:7e:d0:14:0c:f8:5e:a1:c9:ed:0e:f8:
90:b2:8f:08:f2:04:03:fa:1d:1f:78:90:2f:c6:e9:
64:af:dd:a1:39:dc:35:44:3d:de:82:e0:89:09:a5:
79:60:54:66:c0:2a:63:a2:9b:ad:8a:c6:d9:9c:3f:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:F4:80:2A:EA:FE:5A:1E:7D:2C:D7:5D:AB:70:FE:C0:08:CB:79
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ojr0gCrq_loefSzXXatw_sAIy3k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:40:47:e7:d7:b8:74:97:2a:ff:a6:a8:51:63:a2:a0:c3:8e:
96:a6:a4:fa:79:45:d9:f8:27:aa:04:55:49:c5:9f:93:98:e9:
66:58:37:57:c1:f0:88:28:33:e1:38:fe:dd:d0:ee:fc:65:a0:
9b:19:21:c5:ff:e6:be:26:62:45:96:de:6c:91:bd:a8:9e:83:
7a:af:9d:8b:b3:33:70:9b:ce:23:46:aa:1a:cb:45:c3:c5:ea:
d8:54:62:cc:e5:80:59:ab:ec:56:44:21:b1:b6:1f:60:f6:6d:
26:17:4f:01:be:22:4c:f7:28:47:77:38:af:85:31:4a:47:aa:
32:15:65:05:b3:59:a0:0f:cd:0c:6c:99:e4:99:ad:3c:c9:24:
93:6d:e8:81:87:ba:e4:ae:84:b0:46:ff:8f:b2:70:0c:0a:b4:
54:e8:82:cc:05:ea:f8:af:ba:a1:88:e4:d8:6b:7b:4d:7d:be:
f9:ae:5c:cc:26:aa:41:b8:de:7b:09:aa:52:f6:24:92:5d:21:
fd:db:2d:a9:9b:5f:f9:fb:ca:bb:dc:a8:4e:4d:f4:ed:1d:db:
62:73:ac:d5:f5:ba:6d:22:1f:33:d0:d2:3b:50:4a:32:11:dd:
04:af:7a:c1:4e:95:b9:c4:dc:08:8c:3f:62:bd:8e:30:c1:19:
cf:37:75:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:33 2025 by rpki-client