Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/6y9yiWkcLc07UZh4P-eoMI4oD8k.roa
File: 6y9yiWkcLc07UZh4P-eoMI4oD8k.roa (raw, json)
Hash identifier: d2winQhsr1DzxXs84x3bNmJDf7xE+XhFCApdKfQUQGQ=
Subject key identifier: EB:2F:72:89:69:1C:2D:CD:3B:51:98:78:3F:E7:A8:30:8E:28:0F:C9
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 145A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6y9yiWkcLc07UZh4P-eoMI4oD8k.roa
Signing time: Sun 14 Apr 2024 05:53:18 +0000
ROA not before: Sun 14 Apr 2024 05:53:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5210 (0x145a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 05:53:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EB2F7289691C2DCD3B5198783FE7A8308E280FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:fa:5e:52:6c:d0:d2:86:53:36:94:31:5c:
fc:5b:05:5c:ad:b5:2d:a2:02:39:ee:39:6e:06:ea:
e8:83:d4:27:db:24:41:5e:04:14:97:a1:06:ea:fc:
a2:b6:08:3b:8e:61:21:1d:45:76:a3:af:05:c3:dc:
24:1a:8c:7e:ea:e1:a8:2c:38:b5:d3:30:0a:c7:85:
ae:fa:30:1e:e2:ae:ae:2c:c1:c2:ff:af:87:a5:b7:
bc:4c:7d:f8:89:f8:f8:84:e0:56:d0:fb:a5:12:81:
e9:bf:4b:f2:e6:f2:4f:aa:46:fe:e7:cb:10:8c:14:
aa:f2:d6:a7:bf:ca:5c:83:0c:23:95:ee:a7:f9:c3:
a6:ca:a8:e9:bb:50:d1:8e:b9:6f:37:60:7f:b0:15:
92:83:aa:be:ef:23:2d:63:44:cc:83:02:9e:90:f9:
82:61:13:de:fa:10:68:a3:09:d1:65:6c:ab:0e:8d:
7d:b6:df:c9:06:5c:c9:03:ee:68:f0:31:e5:64:40:
7c:94:37:36:f0:cc:6d:c4:d1:d4:dd:b4:f2:13:eb:
1d:a5:c0:43:33:13:6a:43:a1:26:c0:bc:7d:29:5d:
dd:16:c4:04:5b:5d:64:e4:77:d3:19:48:d6:65:4d:
dc:8d:ea:e6:de:32:74:5e:8a:b9:f0:1f:88:25:cb:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2F:72:89:69:1C:2D:CD:3B:51:98:78:3F:E7:A8:30:8E:28:0F:C9
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6y9yiWkcLc07UZh4P-eoMI4oD8k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:0f:d1:ab:66:43:b3:aa:37:ee:fa:3b:43:b9:2a:51:37:2a:
3a:b1:76:39:da:36:d2:2d:f1:2d:5f:61:8c:6d:78:dd:2a:23:
34:aa:df:8b:5e:7b:d8:d5:f1:ce:0a:65:92:63:bb:9f:12:e4:
83:7b:98:3b:db:b7:3d:d5:9a:1f:a4:44:12:37:2d:5a:09:74:
0b:a0:62:40:bd:ef:ef:3d:55:d3:23:07:26:97:e4:e1:1e:fc:
27:ec:63:79:d3:24:0c:3c:fd:25:39:f7:cd:b0:7a:9e:35:5b:
2e:93:1f:f6:d7:6e:8a:53:5c:23:54:c8:d0:a5:4d:cb:ac:9f:
04:0e:06:25:b2:6d:57:18:e6:cc:fd:78:18:17:39:2b:0b:8b:
a1:b4:f9:7f:d1:a1:4d:9c:9e:ef:07:e6:00:cc:06:3e:67:57:
86:bd:b9:2f:64:bf:40:aa:7a:87:df:c0:84:d1:08:ac:14:7f:
e2:56:4b:af:18:4d:f7:bc:4e:c7:91:74:d3:91:25:44:ac:d8:
ff:5b:98:5a:3a:32:38:91:60:81:a0:b6:34:d5:6a:20:ed:20:
8a:f3:13:63:c3:05:a7:f8:32:0c:c1:67:4b:f0:7a:78:12:2e:
db:ab:7f:57:2f:d4:73:50:79:c8:76:ba:7f:8f:0b:17:df:a2:
b9:c2:a6:75
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFFowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTQw
NTUzMTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVCMkY3Mjg5NjkxQzJE
Q0QzQjUxOTg3ODNGRTdBODMwOEUyODBGQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLhPpeUmzQ0oZTNpQxXPxbBVyttS2iAjnuOW4G6uiD1CfbJEFe
BBSXoQbq/KK2CDuOYSEdRXajrwXD3CQajH7q4agsOLXTMArHha76MB7irq4swcL/
r4elt7xMffiJ+PiE4FbQ+6USgem/S/Lm8k+qRv7nyxCMFKry1qe/ylyDDCOV7qf5
w6bKqOm7UNGOuW83YH+wFZKDqr7vIy1jRMyDAp6Q+YJhE976EGijCdFlbKsOjX22
38kGXMkD7mjwMeVkQHyUNzbwzG3E0dTdtPIT6x2lwEMzE2pDoSbAvH0pXd0WxARb
XWTkd9MZSNZlTdyN6ubeMnReirnwH4glyzjRAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU6y9yiWkcLc07UZh4P+eoMI4oD8kwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzZ5OXlpV2tjTGMwN1Va
aDRQLWVvTUk0b0Q4ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAZg/Rq2ZDs6o37vo7Q7kqUTcqOrF2Odo2
0i3xLV9hjG143SojNKrfi1572NXxzgplkmO7nxLkg3uYO9u3PdWaH6REEjctWgl0
C6BiQL3v7z1V0yMHJpfk4R78J+xjedMkDDz9JTn3zbB6njVbLpMf9tduilNcI1TI
0KVNy6yfBA4GJbJtVxjmzP14GBc5KwuLobT5f9GhTZye7wfmAMwGPmdXhr25L2S/
QKp6h9/AhNEIrBR/4lZLrxhN97xOx5F005ElRKzY/1uYWjoyOJFggaC2NNVqIO0g
ivMTY8MFp/gyDMFnS/B6eBIu26t/Vy/Uc1B5yHa6f48LF9+iucKmdQ==
-----END CERTIFICATE-----
Generated at Sun May 18 10:57:15 2025 by rpki-client