Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/29gSeHKkW_cv3cCEHsPFlt6QJJ4.roa
File: 29gSeHKkW_cv3cCEHsPFlt6QJJ4.roa (raw, json)
Hash identifier: nYLK8DuHoPx51bBPnX29XesCTvsQc/KxwpKEV+zpGlw=
Subject key identifier: DB:D8:12:78:72:A4:5B:F7:2F:DD:C0:84:1E:C3:C5:96:DE:90:24:9E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1050
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/29gSeHKkW_cv3cCEHsPFlt6QJJ4.roa
Signing time: Wed 03 Apr 2024 11:22:44 +0000
ROA not before: Wed 03 Apr 2024 11:22:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4176 (0x1050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 11:22:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DBD8127872A45BF72FDDC0841EC3C596DE90249E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:b7:d1:90:64:2e:21:80:70:1d:2e:31:d5:
c8:f5:5a:07:f1:c5:bf:a8:67:71:86:3a:29:9f:d4:
f9:4a:26:73:ea:75:2a:29:91:7b:56:ae:c5:34:8f:
ee:27:86:84:3b:e8:18:ec:4d:3b:83:4d:aa:40:50:
9e:1b:65:2c:7d:6d:1c:1a:5e:f1:37:da:9f:5e:4d:
89:f1:3c:a2:4e:12:ca:c4:1d:0a:24:59:a1:8e:08:
22:f4:f5:30:95:a5:f2:40:db:0a:88:75:78:5a:44:
df:38:3c:e5:91:22:37:c0:87:a1:51:08:ac:3d:fe:
29:bc:f5:60:43:77:23:66:95:b5:b4:e6:7b:e2:dd:
87:ec:f0:31:93:dc:1b:e1:89:d0:3a:a1:64:d1:91:
d5:f6:9b:2c:30:46:45:6c:ea:2d:41:4e:43:59:5b:
14:d5:92:5c:77:48:f0:94:44:9b:db:0f:30:90:e1:
27:72:d8:94:4f:d6:f9:02:f4:08:12:90:20:6c:e5:
eb:35:da:31:41:90:43:8b:39:8a:a2:33:82:52:8c:
1e:e4:49:04:b0:cb:0e:c8:84:44:47:e0:0d:44:e8:
45:e3:c7:95:c5:b3:df:7d:0d:59:ad:de:22:df:9a:
09:2e:58:7b:99:e7:95:ff:8f:94:5a:6c:41:c4:c4:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:12:78:72:A4:5B:F7:2F:DD:C0:84:1E:C3:C5:96:DE:90:24:9E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/29gSeHKkW_cv3cCEHsPFlt6QJJ4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:b7:4c:e6:e1:34:2c:2b:d6:a9:89:30:4d:46:6a:4c:fe:53:
58:df:c1:ec:3c:fb:54:93:40:a8:ca:1d:b6:1c:cf:bf:a0:8a:
4a:1a:07:02:d2:bb:33:60:fa:bd:c1:cf:d3:61:db:7f:45:9d:
75:3b:56:bd:86:97:e1:3a:3f:db:6a:0a:1b:5a:91:b3:18:b9:
fc:a1:43:88:a8:4e:c5:b8:b8:fd:cc:5d:c2:dc:ca:26:5d:1f:
83:1c:ff:da:a8:9d:71:b6:9d:a7:18:78:5f:55:2b:de:98:96:
10:ec:a4:16:c3:e5:53:41:5e:b7:2c:02:ac:e4:7f:2a:1c:dc:
66:84:4b:e5:16:29:24:eb:df:41:40:c7:6e:57:e9:eb:f8:b1:
ea:06:d2:ee:aa:f4:11:96:0c:f5:e4:b8:f8:39:9b:40:e5:13:
41:0e:e7:fd:1c:39:1e:f9:17:39:94:e0:74:b9:3d:d1:7f:d2:
45:8f:92:fa:a9:5a:1f:af:65:99:5e:c6:f0:46:4e:d2:3b:a3:
70:06:f4:73:b7:f0:c4:bf:8c:44:ad:9f:c1:36:b2:61:64:a4:
d7:21:df:01:9c:29:b1:0e:eb:48:d4:ee:a1:3d:6e:dd:3e:bc:
16:f5:7e:fb:3a:d3:e4:fa:1f:aa:5c:34:17:0d:83:6d:b8:7c:
98:95:91:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:15:38 2025 by rpki-client