Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/4YZrwxQRFx9Le2voIWoy1ZzR7Zw.roa
File: 4YZrwxQRFx9Le2voIWoy1ZzR7Zw.roa (raw, json)
Hash identifier: K0qW9YU4NMNVgynSiiCTXnpXhmPyUXHNpmnnNZ7I8Bg=
Subject key identifier: E1:86:6B:C3:14:11:17:1F:4B:7B:6B:E8:21:6A:32:D5:9C:D1:ED:9C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0DBE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4YZrwxQRFx9Le2voIWoy1ZzR7Zw.roa
Signing time: Wed 27 Mar 2024 14:53:09 +0000
ROA not before: Wed 27 Mar 2024 14:53:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3518 (0xdbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 27 14:53:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E1866BC31411171F4B7B6BE8216A32D59CD1ED9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:27:2c:d3:39:74:54:3f:ce:2b:6e:85:3d:
ed:7f:d3:59:7f:15:ea:e3:af:68:27:06:12:51:95:
23:1d:d6:91:ef:fa:4b:38:6d:c2:80:6c:c6:a4:a1:
75:da:64:f4:38:c2:df:8c:5f:93:a0:5a:d8:e8:2d:
b9:91:29:ec:7b:aa:73:af:fe:ed:04:4b:54:b7:de:
6f:19:7b:f6:d5:fa:e1:f3:b9:d7:aa:e9:9d:01:5e:
74:ed:8c:3f:a9:c1:7c:55:77:4f:43:cc:06:a2:cd:
75:1f:3b:fe:d2:68:b3:c2:17:3e:2d:1d:db:90:f9:
72:c7:ab:61:f9:32:95:ad:78:94:2b:f0:be:db:10:
e7:b6:f4:8e:28:f4:e7:fd:38:e4:59:33:f6:f9:01:
eb:b0:79:ea:64:19:f2:b1:f5:00:c8:9d:5a:13:d1:
46:2a:d6:45:53:65:79:13:d2:2f:05:99:aa:e9:7d:
43:2d:b9:d9:d1:10:6f:05:75:cd:42:78:4b:7f:29:
74:3b:e1:c7:2f:4b:c0:ee:28:44:cf:34:51:79:ce:
0a:b0:71:a7:8d:02:e2:34:0a:f1:dd:07:76:da:c9:
0a:59:30:35:4d:0c:bf:93:5a:4a:9a:72:fb:e2:ce:
d3:4c:f2:3d:68:c2:31:4f:e3:85:40:ac:82:85:ac:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:86:6B:C3:14:11:17:1F:4B:7B:6B:E8:21:6A:32:D5:9C:D1:ED:9C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4YZrwxQRFx9Le2voIWoy1ZzR7Zw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:9b:45:57:cb:c5:a3:f7:6b:cd:11:38:11:6c:a1:24:e5:d5:
ce:15:cb:1f:2f:bf:61:0a:34:e4:c3:6b:e4:2d:da:61:d3:c7:
45:02:c8:60:92:e6:96:00:39:fd:73:05:42:01:19:29:b0:6c:
8c:65:2e:59:65:da:f8:b9:fb:6c:f9:65:0a:45:02:40:e2:07:
12:8b:24:75:97:99:77:28:f9:5b:7a:68:fd:da:af:f6:19:50:
b6:9c:f5:5e:8b:f8:64:33:50:2a:b3:79:0a:bc:70:09:bc:a8:
a4:78:89:4a:33:dd:ae:1d:d4:7d:47:25:7e:47:28:cc:50:2a:
17:69:78:1e:a9:a5:77:ea:81:3a:91:af:ad:5a:25:8a:04:21:
60:1a:5d:c0:06:c0:ec:7b:5f:2e:8e:2a:16:8d:dc:3a:72:f2:
f5:20:ed:b8:da:7c:2b:9a:11:49:f9:42:32:9f:e5:b9:18:79:
20:d9:ed:a1:11:d6:a6:f6:e6:7f:97:f2:4c:30:e0:02:28:43:
8c:69:f6:54:c4:cc:a0:e4:47:1f:20:3c:59:d0:66:f1:fb:03:
af:87:f3:f3:be:e8:c5:b1:a9:dc:87:1a:36:c6:f2:80:21:1b:
83:6e:9c:05:e3:4b:54:53:27:04:06:2d:8e:8b:e8:85:e6:95:
ff:6b:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:55:43 2025 by rpki-client