Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/-jCjXKvj3nu2aLTHXWSCmsrkU0c.roa
File: -jCjXKvj3nu2aLTHXWSCmsrkU0c.roa (raw, json)
Hash identifier: UNd4QoSpw0sDbYoB2OuIqvfSTuEs2Ydm0xiSmXqybOU=
Subject key identifier: FA:30:A3:5C:AB:E3:DE:7B:B6:68:B4:C7:5D:64:82:9A:CA:E4:53:47
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B50
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-jCjXKvj3nu2aLTHXWSCmsrkU0c.roa
Signing time: Thu 02 May 2024 19:24:51 +0000
ROA not before: Thu 02 May 2024 19:24:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6992 (0x1b50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 19:24:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FA30A35CABE3DE7BB668B4C75D64829ACAE45347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:83:d3:9b:55:f5:df:d2:5f:a6:92:56:b4:
dc:04:9b:4e:b4:53:db:59:99:00:30:b1:81:d8:c4:
f7:d3:c2:b9:fc:a9:3c:45:cc:02:ae:17:20:f5:b9:
c2:08:0c:26:8f:99:08:5c:96:d0:28:67:71:91:a4:
81:c7:9e:cd:c8:0b:83:98:f5:db:31:af:4c:02:a1:
d5:f2:0b:e8:92:0e:84:17:51:b5:73:a6:53:4a:38:
e8:2d:73:61:d7:95:79:56:6a:1b:d6:7f:f7:c5:b5:
14:0b:bb:98:c9:fb:00:3c:70:c3:5f:e5:73:15:6f:
b8:80:b4:2d:0b:76:f7:01:b0:7b:1e:93:c9:bc:a1:
97:83:33:8f:ce:3a:e9:03:45:ff:fc:03:88:b9:fb:
4d:3a:54:b5:de:f0:59:7a:e6:d1:4f:b9:35:5b:3d:
02:69:33:fb:eb:5b:31:29:68:fa:29:ac:15:56:a1:
f2:33:7e:8f:53:d6:c0:49:19:ca:ee:3b:f9:e1:fa:
ac:c1:9a:72:3e:45:52:e9:77:a8:9b:f2:4c:af:64:
86:16:51:1b:96:ba:09:07:b6:a3:21:6b:90:4a:91:
6e:3b:b1:36:e0:4f:d4:d2:13:39:90:37:a0:03:70:
0c:50:e5:75:1b:24:92:ca:b2:c4:cd:ff:a2:31:03:
5e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:30:A3:5C:AB:E3:DE:7B:B6:68:B4:C7:5D:64:82:9A:CA:E4:53:47
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-jCjXKvj3nu2aLTHXWSCmsrkU0c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:d4:fa:d0:86:4a:07:ec:12:16:b9:30:c3:f0:90:f5:ca:bc:
f4:97:d1:91:52:76:e8:ed:a7:9d:3f:b4:f4:9f:63:2e:d6:1b:
f6:e5:67:0d:3b:c1:7c:c4:04:0c:99:fe:92:59:96:20:3e:d8:
97:a5:11:30:90:ea:39:cd:51:d9:e1:96:98:75:e5:28:a6:d7:
05:d0:5b:3b:bb:c7:8a:ca:96:31:ce:64:04:24:4c:e1:ec:79:
68:87:c2:09:71:ae:e3:e8:93:b5:59:cb:fc:6e:69:0b:a9:8a:
ed:74:f4:9c:3a:92:1b:9e:3b:70:5c:e0:7b:7c:ef:ec:f3:10:
12:d4:11:1f:93:4f:b7:57:a0:af:e3:9d:8d:fb:8b:cf:da:81:
61:ea:91:01:4d:11:46:c8:69:df:53:12:b4:4e:8f:9d:a6:98:
9c:c3:53:2f:76:85:3f:bf:8d:bf:1b:a5:92:3a:bd:da:ef:74:
c1:00:08:aa:f6:ad:f1:55:96:f1:51:2b:ef:3f:5d:54:23:8e:
fd:75:2b:27:04:04:c3:86:71:f1:da:ca:9f:9c:6b:ca:4c:1c:
ed:84:e4:4b:dc:ba:40:55:2d:d5:26:2d:8f:a4:39:3a:75:54:
85:41:c1:af:19:ef:e7:c4:3d:30:ff:94:16:b8:b4:04:eb:1f:
7d:c9:14:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:53:59 2025 by rpki-client