Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/wp-VSsy6qrnClai2Q_85ZzxtDK0.roa
File: wp-VSsy6qrnClai2Q_85ZzxtDK0.roa (raw, json)
Hash identifier: yB9sM0FcmoTeZKvXy6fxg4K9ExDK0nmb2t9dYIdedyk=
Subject key identifier: C2:9F:95:4A:CC:BA:AA:B9:C2:95:A8:B6:43:FF:39:67:3C:6D:0C:AD
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1048
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/wp-VSsy6qrnClai2Q_85ZzxtDK0.roa
Signing time: Wed 03 Apr 2024 09:22:42 +0000
ROA not before: Wed 03 Apr 2024 09:22:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4168 (0x1048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 09:22:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C29F954ACCBAAAB9C295A8B643FF39673C6D0CAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:13:d7:99:54:d1:12:90:8f:8f:d1:97:84:
c1:cc:0c:d4:b9:92:3a:90:c9:37:23:70:07:3f:dc:
33:cf:d8:3a:7e:ea:8b:0c:60:b4:00:f0:db:26:ee:
cf:7b:6b:38:eb:e9:00:0b:d8:6a:65:a6:cb:61:29:
45:c0:e4:cf:23:f2:d1:48:ba:f6:03:22:ad:3f:48:
31:64:60:8c:ce:44:a8:10:7f:b2:37:03:10:bc:78:
17:ef:89:d2:56:31:a5:d0:1b:4c:1a:a1:3e:69:92:
f5:b2:76:ae:ee:5f:f6:3c:f3:c3:37:59:2c:7b:66:
a5:b2:30:3b:71:1b:ab:47:47:85:ed:55:0a:0f:8d:
c2:b7:76:cc:c8:5f:31:2f:db:5a:fa:c7:52:32:71:
9f:95:32:ee:9b:a8:9c:d8:e3:08:3d:a6:11:60:b7:
11:c4:ff:9d:4a:4d:50:ef:2e:3d:89:c9:f3:de:0f:
07:12:53:5c:d7:d6:1c:6e:34:93:8e:8a:79:25:71:
74:0a:e9:5b:ef:e3:51:ff:df:bb:f2:41:20:76:e9:
82:ef:ef:e1:fb:b7:1b:a4:0d:f6:f6:85:aa:89:88:
f8:79:e6:9a:32:47:be:c5:6b:89:29:3a:3a:a8:28:
1a:5c:7d:51:96:43:c0:f2:65:33:a0:79:3b:a9:59:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9F:95:4A:CC:BA:AA:B9:C2:95:A8:B6:43:FF:39:67:3C:6D:0C:AD
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/wp-VSsy6qrnClai2Q_85ZzxtDK0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:de:ce:96:b2:2c:4d:6d:81:f9:55:60:e2:48:8b:a9:fb:ca:
e8:0d:97:8d:82:18:12:1e:43:d5:22:b9:1a:27:b4:76:59:46:
86:74:75:69:38:7c:00:6a:ec:9f:15:54:23:cb:fc:19:5b:c1:
99:2b:a9:74:fc:ad:86:cc:42:f6:29:b4:82:f1:ea:6d:9f:aa:
e5:ae:f7:28:55:89:53:8f:06:9b:2d:bc:93:f9:17:94:aa:88:
78:5d:c6:51:b1:9a:8d:c1:70:42:70:09:b1:7a:94:7d:fb:a3:
c2:19:73:7f:b2:b4:1d:54:a4:01:b4:2a:57:7e:46:36:1d:15:
16:83:94:e8:e9:c9:27:2f:df:e4:c5:14:2c:09:4b:fb:f4:a8:
1f:71:e1:ee:31:c9:1a:cd:2f:2e:99:cb:7b:b2:b0:fc:3b:06:
84:3e:21:aa:6e:c5:1b:13:d9:91:d3:98:79:fb:d0:ce:62:de:
09:3c:64:8b:43:17:8c:46:a2:50:c0:5e:1e:54:ea:5d:39:60:
30:02:3e:e5:32:c1:2e:74:bf:ff:77:8a:6e:43:f7:31:d3:48:
a9:37:0c:6f:92:38:ec:47:4d:71:04:9d:ce:c6:6f:30:62:55:
f7:11:e3:5f:c7:f5:5e:c8:a8:35:7d:1b:3e:4b:69:d3:77:ff:
1d:73:bb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:51 2025 by rpki-client