Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/34aazcgNWkt_SGuRMY0ImeHT1wY.roa
File: 34aazcgNWkt_SGuRMY0ImeHT1wY.roa (raw, json)
Hash identifier: aHhnJ9dAJhvVxbriaS6UuCZ6MN7oGFtOKwcScNnmIZc=
Subject key identifier: DF:86:9A:CD:C8:0D:5A:4B:7F:48:6B:91:31:8D:08:99:E1:D3:D7:06
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0DDE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/34aazcgNWkt_SGuRMY0ImeHT1wY.roa
Signing time: Wed 27 Mar 2024 22:52:26 +0000
ROA not before: Wed 27 Mar 2024 22:52:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3550 (0xdde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 27 22:52:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DF869ACDC80D5A4B7F486B91318D0899E1D3D706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:ee:aa:11:1c:97:6c:77:2b:ed:b1:fd:0b:
b6:e5:ed:59:e0:02:3c:80:cc:a7:62:41:3b:24:cb:
00:9f:e3:8d:5a:a6:57:69:bc:84:3c:31:57:56:29:
91:c7:2d:09:7a:ac:a8:49:a0:0b:ad:d6:cc:9a:d6:
f7:f8:76:20:11:44:a2:87:ef:4a:ff:ef:9a:d7:11:
9b:7e:8d:44:e6:c4:e7:d4:3f:36:5b:88:fc:89:fc:
9c:5c:3f:4c:e3:3c:24:fb:5d:46:73:ab:e5:91:91:
53:ac:9a:b1:da:d1:34:e0:f5:f6:03:6a:d1:66:b0:
ea:62:30:b8:4f:3c:0a:c4:16:9a:66:86:c4:86:90:
25:ad:44:56:d0:a2:99:bf:33:45:d6:60:d2:b8:f5:
c2:63:41:8a:19:57:03:51:0a:c4:ae:94:1d:98:52:
5a:df:0d:b0:d5:35:60:51:b2:b6:b9:ff:7d:4a:d9:
60:f1:f3:39:26:a6:1a:2f:2a:85:95:2f:77:ee:d0:
14:38:9e:95:ef:1a:84:3b:43:f0:64:b6:e0:d9:6d:
ba:48:a3:bb:01:9e:77:28:f7:d6:00:44:7a:2e:97:
99:54:bf:93:34:13:4e:5e:bd:c5:cf:4e:0b:73:b0:
29:75:ff:02:c3:79:56:0f:b9:03:14:26:fd:15:5b:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:86:9A:CD:C8:0D:5A:4B:7F:48:6B:91:31:8D:08:99:E1:D3:D7:06
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/34aazcgNWkt_SGuRMY0ImeHT1wY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:6e:8d:6d:03:d3:48:2d:00:9f:4f:b3:b8:0a:ef:2a:f8:cb:
82:23:8a:3a:b2:6e:96:af:cb:cd:9c:1c:11:8e:27:66:53:3d:
84:d3:9d:3b:b2:8a:da:4a:8c:31:88:50:b1:87:6f:cd:42:90:
be:45:88:5d:4a:c0:74:b7:3f:08:22:70:71:ad:19:e1:9f:09:
57:79:6a:69:2d:c7:10:2e:e9:89:9c:e5:c9:02:8e:a3:5b:a3:
db:69:81:ef:75:d2:57:23:20:26:e2:0d:eb:5f:e6:b5:07:3a:
96:ff:7a:15:e4:98:0e:37:91:92:c3:9c:6b:f2:42:5d:97:b1:
7c:7d:ca:bf:37:f6:ee:cc:28:1b:ae:7a:18:bd:70:b7:fe:aa:
9a:d4:ab:e2:cf:bc:94:8d:36:c3:bf:98:f0:e8:f0:06:97:76:
ec:5f:e4:74:f1:d1:46:bf:fb:43:13:0c:d5:9b:ea:97:99:09:
f1:68:89:c6:ea:5c:53:6d:3d:de:76:dd:63:ac:24:7b:c7:87:
43:77:ad:78:b3:51:63:54:80:68:04:26:c7:ce:0f:be:c2:71:
fa:9b:4b:4c:07:c1:d9:1b:f7:d1:54:ad:9c:a7:39:2b:c1:49:
b1:e7:54:72:81:8a:94:d1:d3:81:74:57:71:c4:36:6a:e3:6d:
54:f1:14:6d
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMjcy
MjUyMjZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKERGODY5QUNEQzgwRDVB
NEI3RjQ4NkI5MTMxOEQwODk5RTFEM0Q3MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5NO6qERyXbHcr7bH9C7bl7VngAjyAzKdiQTskywCf441apldp
vIQ8MVdWKZHHLQl6rKhJoAut1sya1vf4diARRKKH70r/75rXEZt+jUTmxOfUPzZb
iPyJ/JxcP0zjPCT7XUZzq+WRkVOsmrHa0TTg9fYDatFmsOpiMLhPPArEFppmhsSG
kCWtRFbQopm/M0XWYNK49cJjQYoZVwNRCsSulB2YUlrfDbDVNWBRsra5/31K2WDx
8zkmphovKoWVL3fu0BQ4npXvGoQ7Q/BktuDZbbpIo7sBnnco99YARHoul5lUv5M0
E05evcXPTgtzsCl1/wLDeVYPuQMUJv0VWwWZAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU34aazcgNWkt/SGuRMY0ImeHT1wYwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzM0YWF6Y2dOV2t0X1NH
dVJNWTBJbWVIVDF3WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEADW6NbQPTSC0An0+zuArvKvjLgiOKOrJu
lq/LzZwcEY4nZlM9hNOdO7KK2kqMMYhQsYdvzUKQvkWIXUrAdLc/CCJwca0Z4Z8J
V3lqaS3HEC7piZzlyQKOo1uj22mB73XSVyMgJuIN61/mtQc6lv96FeSYDjeRksOc
a/JCXZexfH3Kvzf27swoG656GL1wt/6qmtSr4s+8lI02w7+Y8OjwBpd27F/kdPHR
Rr/7QxMM1Zvql5kJ8WiJxupcU2093nbdY6wke8eHQ3eteLNRY1SAaAQmx84PvsJx
+ptLTAfB2Rv30VStnKc5K8FJsedUcoGKlNHTgXRXccQ2auNtVPEUbQ==
-----END CERTIFICATE-----
Generated at Sun May 18 05:59:05 2025 by rpki-client