Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/5jY_9UQh5B21Ja4ZD9-btx0bUC0.roa
File: 5jY_9UQh5B21Ja4ZD9-btx0bUC0.roa (raw, json)
Hash identifier: Uc+46tVJs55LehT7wfOH6o+12tFeplxitXp7mjCv3l0=
Subject key identifier: E6:36:3F:F5:44:21:E4:1D:B5:25:AE:19:0F:DF:9B:B7:1D:1B:50:2D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CBC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/5jY_9UQh5B21Ja4ZD9-btx0bUC0.roa
Signing time: Mon 06 May 2024 14:24:29 +0000
ROA not before: Mon 06 May 2024 14:24:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7356 (0x1cbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 14:24:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E6363FF54421E41DB525AE190FDF9BB71D1B502D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:98:21:df:1a:c5:6a:53:53:b4:26:27:5b:
45:fe:21:e1:91:50:1f:3d:9c:2f:02:02:71:ef:16:
ec:ac:47:85:6c:b2:f4:db:3f:77:dd:bf:ff:be:f5:
ed:46:48:39:2d:2d:52:ff:d2:d7:8a:bb:7d:8d:99:
88:e7:53:37:45:11:8f:d8:e6:1a:83:ee:db:ed:53:
64:2f:9f:a4:44:e4:50:1a:6d:b8:89:82:1c:af:9e:
90:99:5d:f3:03:fb:b3:e6:2c:13:2d:e8:3a:a6:cb:
b2:05:24:c1:06:42:59:92:ae:66:e6:9c:e8:5a:a7:
18:db:b4:e7:8d:52:55:29:33:cc:70:05:b0:87:2f:
ca:13:dc:93:8d:65:a2:da:a5:9c:cb:aa:0f:26:e1:
71:3c:b5:c9:33:9e:31:73:78:04:9d:d7:d4:1b:80:
01:1d:f0:28:21:88:3e:5a:e1:e0:db:58:93:3c:06:
ff:95:7f:52:ec:bf:be:94:71:6c:87:d3:40:24:85:
e9:49:46:60:e5:d3:61:4b:bb:1d:fc:69:1b:c4:fd:
37:73:69:6d:a1:00:31:af:d4:ac:79:1b:fb:be:ad:
bb:00:09:68:56:0e:2e:64:ac:b9:a5:51:e6:43:55:
59:c1:64:b4:a9:cc:12:26:91:a4:20:43:62:00:6b:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:36:3F:F5:44:21:E4:1D:B5:25:AE:19:0F:DF:9B:B7:1D:1B:50:2D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/5jY_9UQh5B21Ja4ZD9-btx0bUC0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:df:8c:07:bc:7b:6a:4b:d9:1b:d8:f0:94:3c:c1:0b:c1:7a:
4d:fa:ce:2e:ce:e0:cc:72:66:90:66:cc:0b:ec:f1:09:b9:d8:
b4:dd:e6:11:d8:01:5b:9f:d3:f8:f7:eb:e1:7c:24:c8:6f:28:
19:ff:e9:26:ad:8b:12:b5:fc:f0:e8:16:d4:b8:b9:be:56:54:
36:f8:29:a3:ef:22:cb:66:a4:36:b1:10:bf:96:75:ae:2b:c4:
4c:a2:52:48:a1:a2:0b:6a:65:c9:b8:ed:f7:09:85:8e:07:d5:
c4:15:ae:56:14:25:9e:14:77:91:a2:c7:5d:b8:2b:b6:85:25:
54:a2:00:e6:75:a7:c1:a2:5c:e3:45:c8:dd:ca:9e:40:19:1e:
20:22:82:29:03:b2:0d:87:e2:8d:43:05:78:54:97:b3:1d:f8:
f3:44:e8:b2:bc:15:ba:ad:6b:7c:f1:96:58:40:de:91:db:c8:
91:78:6c:ec:45:bb:3e:f0:55:a0:94:bd:09:1a:54:c8:ee:01:
fd:65:7e:ef:7f:70:77:9f:fb:40:8c:5f:78:1d:47:b8:28:09:
e4:3a:16:7d:47:0f:b5:ba:9b:b0:0a:c0:3a:a0:72:df:78:ca:
7e:f4:f2:c8:dd:b2:c3:ed:95:85:71:f9:e7:ad:7a:01:32:23:
19:0e:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:56:49 2025 by rpki-client