Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/4CqjwWXiUT8-Lhzq0B25pDF6Gb0.roa
File: 4CqjwWXiUT8-Lhzq0B25pDF6Gb0.roa (raw, json)
Hash identifier: 6vHADHN0QeI6a3VE7QD2GYuNLVcAMRcx7Ks2gVTdVq8=
Subject key identifier: E0:2A:A3:C1:65:E2:51:3F:3E:2E:1C:EA:D0:1D:B9:A4:31:7A:19:BD
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 11D6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4CqjwWXiUT8-Lhzq0B25pDF6Gb0.roa
Signing time: Sun 07 Apr 2024 12:52:54 +0000
ROA not before: Sun 07 Apr 2024 12:52:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4566 (0x11d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 7 12:52:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E02AA3C165E2513F3E2E1CEAD01DB9A4317A19BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:5d:17:5d:75:4e:94:54:10:1e:80:40:03:
fb:24:8e:16:5e:21:80:cd:d4:ef:b5:f8:28:18:f2:
a2:fc:61:8b:3f:a6:c5:9c:91:4e:05:e4:bf:71:4c:
c6:a5:65:36:de:57:e4:48:8e:76:30:00:56:f9:a6:
d1:2d:e1:91:e6:3a:53:4b:ac:09:cf:2c:e2:21:0b:
51:36:06:cc:db:cd:a5:4f:29:bf:26:ad:c9:21:5e:
a8:27:95:c5:c3:69:ee:de:1a:c0:2e:c3:ae:28:c3:
3c:21:ad:8a:5c:02:cc:9e:e8:fa:5d:80:c4:37:a0:
df:b3:e9:08:d5:a6:3d:65:b4:f7:1f:ba:e0:04:1e:
29:28:5b:76:ae:d5:2d:73:85:4e:7f:96:61:30:41:
09:e3:b8:4f:05:17:ba:71:b2:8e:cb:d3:cf:af:4b:
ea:41:a5:d5:50:f1:2f:c2:b5:cb:42:23:f4:b9:77:
c6:6d:68:c3:83:77:64:9a:86:76:0e:10:b6:a2:99:
7d:26:55:75:c6:f8:90:7a:f9:d7:b0:11:fc:0c:8a:
60:7b:16:86:cb:77:be:d5:17:de:cc:ef:22:35:19:
90:4a:33:c9:76:30:47:ef:ee:3f:7d:48:b1:cb:fd:
ce:68:6f:f7:b7:09:d1:1e:e8:c1:40:7a:82:d2:10:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2A:A3:C1:65:E2:51:3F:3E:2E:1C:EA:D0:1D:B9:A4:31:7A:19:BD
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4CqjwWXiUT8-Lhzq0B25pDF6Gb0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:c1:40:e9:7c:e2:9b:a8:e6:5a:65:cd:7e:ff:1b:34:b8:11:
be:47:b9:47:7e:da:c1:ba:c2:9c:c4:67:09:06:06:29:8f:4f:
3e:65:fc:36:ef:13:cb:52:63:92:3c:ff:13:cb:bb:8c:9e:87:
4f:78:8f:a8:b3:05:d4:cb:62:47:bd:0b:d9:dc:d7:a2:13:d3:
76:20:02:d8:09:12:0e:3f:1c:e2:6b:60:01:1c:73:20:8b:61:
c1:54:40:b4:0d:96:53:48:ba:7e:b4:ec:37:00:8b:93:ec:2a:
56:f5:00:28:e0:d5:30:ad:d6:db:94:6d:9a:55:b3:20:99:34:
71:0f:f8:81:69:2f:2b:47:52:70:db:bf:40:96:da:03:af:3d:
f4:4c:57:61:dc:c5:74:d7:35:30:ed:2e:8d:f3:e7:b1:9f:f3:
4f:f4:20:5b:53:d1:3c:00:dc:22:0f:ae:f3:80:92:d2:75:1f:
3a:da:33:06:3e:75:39:e6:51:4f:a0:50:71:a3:eb:bf:3a:a5:
34:49:6b:0f:94:d5:a5:d3:2c:9b:3e:ef:bd:31:60:94:02:42:
ab:e4:25:ae:9d:63:60:26:a7:0e:cf:a1:e0:44:bb:15:68:58:
1c:73:ec:cb:d0:4d:ee:f1:c6:a8:c5:25:21:96:31:19:c6:df:
22:c7:09:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:55:10 2025 by rpki-client