Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/8lBfn05g8_BSBy-c6grhrAnuHsw.roa
File: 8lBfn05g8_BSBy-c6grhrAnuHsw.roa (raw, json)
Hash identifier: tcjrGNCRfsBb0Nu2XUu29+L7nY3O2D2k6ZU1c4GHOoE=
Subject key identifier: F2:50:5F:9F:4E:60:F3:F0:52:07:2F:9C:EA:0A:E1:AC:09:EE:1E:CC
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19B0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/8lBfn05g8_BSBy-c6grhrAnuHsw.roa
Signing time: Sun 28 Apr 2024 11:23:57 +0000
ROA not before: Sun 28 Apr 2024 11:23:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6576 (0x19b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 11:23:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F2505F9F4E60F3F052072F9CEA0AE1AC09EE1ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:66:c4:66:23:64:20:52:00:90:78:e3:f0:
18:25:2e:0d:85:47:15:f0:9d:1b:aa:e7:81:d6:82:
87:d6:8b:31:eb:b4:25:c8:97:31:0b:c6:6c:7b:33:
91:ff:27:d0:dc:bb:ec:b8:37:96:c9:1f:61:2c:da:
bc:25:f5:a5:0e:61:9c:49:2e:55:e4:86:50:d2:11:
55:b7:2b:07:3d:90:b3:7e:24:86:18:f5:28:d2:ba:
88:de:7f:1d:89:9a:77:e2:eb:fb:eb:58:e9:9e:3f:
2f:54:90:ae:53:96:2b:80:34:44:d1:c9:c7:1d:cc:
13:60:47:39:e0:00:0a:89:be:9a:99:1d:4e:d8:3c:
8d:3f:7c:2f:92:72:9f:64:ad:63:44:27:34:b5:19:
1d:b1:e9:04:68:4f:a5:d3:dd:01:0f:13:c4:19:2a:
1e:0a:e7:1e:87:df:32:db:5f:a8:45:e1:26:91:5d:
d4:9b:71:1d:a3:48:f4:04:8d:ae:f8:5a:87:8a:e8:
2e:85:ec:ef:3f:6f:bc:f3:c4:79:7a:ac:ad:ae:88:
80:d6:61:32:be:b6:b4:dd:37:41:ed:6c:fe:20:79:
27:c1:8d:7c:de:53:35:95:00:c4:51:1c:b9:8a:9c:
85:9e:7e:d8:07:6e:c3:3b:e3:ea:c6:c6:d1:53:0c:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:50:5F:9F:4E:60:F3:F0:52:07:2F:9C:EA:0A:E1:AC:09:EE:1E:CC
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/8lBfn05g8_BSBy-c6grhrAnuHsw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:8e:d1:ed:7e:61:9b:1c:9d:7b:4b:fc:3c:51:a8:7b:35:92:
f9:f0:c2:90:c8:d4:55:78:d7:09:fa:32:09:17:a6:8e:35:a0:
60:5d:ce:85:59:05:c5:95:eb:45:dd:2e:b8:e2:83:ad:8e:17:
9a:88:83:73:7f:bc:81:ce:55:8f:d6:bb:87:bd:96:48:b6:c6:
6d:0f:88:64:95:6f:4d:03:3f:f5:84:6b:b5:f6:32:24:c7:84:
c3:d3:89:c2:be:4b:48:70:79:f4:f0:c4:41:3a:42:cf:e0:bf:
eb:f6:15:2d:96:d3:a3:63:7a:07:6b:72:ec:de:08:c5:65:0f:
75:f9:05:5c:0f:2a:34:57:d1:f0:5d:94:64:99:9f:68:2e:d6:
75:cc:7f:10:f0:6f:8e:9b:9b:fc:52:b9:6b:75:0b:60:b2:4a:
f6:41:24:66:86:8a:af:02:37:1b:dc:dd:93:2e:bf:ff:e1:a8:
1c:9d:5a:9d:39:19:46:d9:09:2a:ba:74:d8:13:30:22:8b:26:
1c:b2:ab:56:e7:84:cf:f8:05:e7:fa:1d:3c:88:32:7c:38:db:
4e:72:24:7c:80:18:83:04:ca:95:66:7f:07:62:c0:fe:6a:ff:
c2:fc:99:6c:3f:08:80:db:4c:2e:5b:2e:d0:89:bd:c6:48:72:
49:65:9f:c5
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0Mjgx
MTIzNTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYyNTA1RjlGNEU2MEYz
RjA1MjA3MkY5Q0VBMEFFMUFDMDlFRTFFQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfNmbEZiNkIFIAkHjj8BglLg2FRxXwnRuq54HWgofWizHrtCXI
lzELxmx7M5H/J9Dcu+y4N5bJH2Es2rwl9aUOYZxJLlXkhlDSEVW3Kwc9kLN+JIYY
9SjSuojefx2Jmnfi6/vrWOmePy9UkK5TliuANETRyccdzBNgRzngAAqJvpqZHU7Y
PI0/fC+Scp9krWNEJzS1GR2x6QRoT6XT3QEPE8QZKh4K5x6H3zLbX6hF4SaRXdSb
cR2jSPQEja74WoeK6C6F7O8/b7zzxHl6rK2uiIDWYTK+trTdN0HtbP4geSfBjXze
UzWVAMRRHLmKnIWeftgHbsM74+rGxtFTDD6FAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU8lBfn05g8/BSBy+c6grhrAnuHswwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzhsQmZuMDVnOF9CU0J5
LWM2Z3JockFudUhzdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAQI7R7X5hmxyde0v8PFGoezWS+fDCkMjU
VXjXCfoyCRemjjWgYF3OhVkFxZXrRd0uuOKDrY4XmoiDc3+8gc5Vj9a7h72WSLbG
bQ+IZJVvTQM/9YRrtfYyJMeEw9OJwr5LSHB59PDEQTpCz+C/6/YVLZbTo2N6B2ty
7N4IxWUPdfkFXA8qNFfR8F2UZJmfaC7Wdcx/EPBvjpub/FK5a3ULYLJK9kEkZoaK
rwI3G9zdky6//+GoHJ1anTkZRtkJKrp02BMwIosmHLKrVueEz/gF5/odPIgyfDjb
TnIkfIAYgwTKlWZ/B2LA/mr/wvyZbD8IgNtMLlsu0Im9xkhySWWfxQ==
-----END CERTIFICATE-----
Generated at Sun May 18 16:50:07 2025 by rpki-client