Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/6Hzr3M5TMyhJAWmJpFz8HSYEOMI.roa
File: 6Hzr3M5TMyhJAWmJpFz8HSYEOMI.roa (raw, json)
Hash identifier: cOqsaSrjqt7T87kF6ODFFmYFBgH2DI27yr/EL0UUGxA=
Subject key identifier: E8:7C:EB:DC:CE:53:33:28:49:01:69:89:A4:5C:FC:1D:26:04:38:C2
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D92
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6Hzr3M5TMyhJAWmJpFz8HSYEOMI.roa
Signing time: Wed 08 May 2024 19:54:33 +0000
ROA not before: Wed 08 May 2024 19:54:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7570 (0x1d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 8 19:54:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E87CEBDCCE53332849016989A45CFC1D260438C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0b:e3:74:61:34:29:5f:65:45:57:3d:71:50:
3e:09:1c:4f:96:e3:28:c6:fa:e3:78:53:0b:7c:c2:
5d:4d:45:19:ca:2a:2c:15:0d:7b:1a:97:66:50:7a:
ce:1b:81:36:6d:a9:f9:8b:fe:6b:e9:25:cf:f8:2c:
93:50:b8:c5:10:12:c7:c3:a0:79:a8:f7:e3:d1:cd:
66:4d:73:28:37:af:06:c6:29:de:64:3e:d2:8e:63:
bb:b1:c4:4d:4d:e5:06:ee:60:b4:6d:e0:7a:dc:b8:
fc:df:86:1f:4c:52:ef:70:4c:4e:28:d5:9c:b9:48:
4c:76:99:c9:00:78:39:7e:fa:99:c6:e8:fe:60:d7:
7c:83:1b:dd:b4:72:d7:48:d9:87:67:73:fc:30:13:
59:69:7c:0f:63:4d:88:01:9d:83:be:48:28:c7:96:
4d:1c:2d:d0:b6:0a:7d:4a:30:9e:8a:9c:3e:92:3f:
8d:60:35:16:e4:99:01:76:b0:a0:b2:a1:95:21:c5:
ca:a2:a3:27:6e:bf:25:f2:fb:b8:1a:4f:5a:9a:54:
60:af:c7:9d:62:c4:25:51:58:d0:f9:b3:de:9e:5c:
42:72:cd:30:a0:39:d6:34:60:7d:1c:83:13:c6:98:
61:73:12:ac:41:bd:99:bb:47:0f:8c:1f:a3:07:e5:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7C:EB:DC:CE:53:33:28:49:01:69:89:A4:5C:FC:1D:26:04:38:C2
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6Hzr3M5TMyhJAWmJpFz8HSYEOMI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:64:5c:b5:4a:dd:2e:b7:5e:5a:23:f0:15:77:19:34:c3:d2:
3c:f0:99:04:61:dd:e4:98:6a:43:cb:de:63:38:18:b1:d1:93:
00:82:0c:57:cb:31:84:b9:a3:db:c5:d3:d9:c0:44:c6:4f:54:
a3:61:64:76:ba:1f:33:76:67:a9:7c:02:4c:68:0c:d7:43:21:
cc:b6:18:7f:ac:cf:d8:6f:28:1b:79:d3:26:0e:1a:45:a6:a0:
1d:2b:48:ee:97:f8:49:1c:5c:2d:47:81:b8:e4:dd:ba:fe:13:
74:a6:aa:bb:aa:d7:91:5b:15:23:92:11:8a:0b:a8:1e:31:87:
11:4d:ca:db:4b:d2:78:46:50:f5:89:ac:19:ad:99:6f:f4:66:
43:3d:58:cd:14:b3:e2:b4:5e:db:40:bc:10:52:b0:ca:35:6c:
e4:29:6d:75:c8:09:e2:0c:d3:08:f7:d2:06:e4:9e:fd:83:97:
81:62:4a:18:0b:55:0f:c3:64:25:38:0d:ab:1a:77:52:a3:cc:
93:3e:a9:b3:79:8e:6e:ab:73:fa:f7:bb:3c:c8:90:a1:0c:9a:
08:f0:30:c1:4e:bd:38:ea:c0:8a:86:f1:54:e2:c3:33:24:12:
87:af:fa:e3:c5:29:27:b0:7c:ab:06:b2:35:5d:0f:ae:d1:77:
95:92:a9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:48:43 2025 by rpki-client