Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/DoaeCHetjv3NXG6IOR14UXjNLZ4.roa
File: DoaeCHetjv3NXG6IOR14UXjNLZ4.roa (raw, json)
Hash identifier: 4HgoNPHLXnjBeHxuofEMQi7tcw98gKL33CJuIw6Jaaw=
Subject key identifier: 0E:86:9E:08:77:AD:8E:FD:CD:5C:6E:88:39:1D:78:51:78:CD:2D:9E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1046
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/DoaeCHetjv3NXG6IOR14UXjNLZ4.roa
Signing time: Wed 03 Apr 2024 08:52:39 +0000
ROA not before: Wed 03 Apr 2024 08:52:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4166 (0x1046)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 08:52:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0E869E0877AD8EFDCD5C6E88391D785178CD2D9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:bf:5b:69:f9:1b:65:0f:eb:81:cb:9c:a3:
7f:90:3e:d2:9d:5d:20:73:43:29:ec:ad:ca:dd:0b:
a5:d4:2b:25:41:a4:b3:6a:bb:2a:87:92:2a:47:e4:
f9:b8:dd:b0:01:63:73:57:c7:8c:4a:33:ba:d0:96:
b8:a4:fb:10:ad:a5:4c:43:47:80:bc:d3:fd:29:72:
e2:7b:b3:b0:5f:64:de:3c:ca:46:66:1c:ac:e6:30:
00:67:75:d6:58:da:97:ab:5c:53:da:fb:0e:1f:bb:
ea:5b:a5:2a:f0:cf:ad:86:f5:ab:54:10:2e:dd:89:
16:17:dc:43:7f:73:88:d1:0f:58:5a:09:15:91:07:
a5:8b:aa:10:25:93:4a:10:1e:88:40:74:b8:56:4a:
60:8d:0f:1e:5a:7b:bd:f5:5e:7e:66:36:14:4f:74:
35:31:08:15:c3:3d:87:1e:e8:72:09:b7:81:61:33:
db:f5:b3:ae:34:1f:7c:77:07:63:9f:aa:8f:11:c1:
82:4a:da:39:df:53:c9:87:d3:fa:59:3c:58:7f:36:
06:3c:04:5b:3d:4d:43:46:eb:d8:5b:2d:9f:bd:23:
af:d8:39:57:0d:d5:07:93:db:1e:cd:2e:96:29:5b:
07:61:34:dd:4d:b2:4d:9c:fb:1b:e6:da:e0:9d:07:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:86:9E:08:77:AD:8E:FD:CD:5C:6E:88:39:1D:78:51:78:CD:2D:9E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/DoaeCHetjv3NXG6IOR14UXjNLZ4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:6c:ac:f4:7e:bf:e8:20:28:70:23:79:f5:53:7c:93:67:ba:
08:9a:0b:2d:11:9a:bf:d1:f7:15:75:94:66:bf:74:1f:c2:e0:
bd:5c:75:e9:2f:2b:02:c2:a2:9f:bb:c0:fa:2a:b3:51:e8:a3:
9e:a5:1a:6f:d7:03:db:cf:ef:31:02:94:ae:34:3c:0f:d6:39:
e2:e4:7f:ba:12:11:f7:f0:60:86:5b:89:a1:c9:b4:95:53:83:
15:a0:c1:7a:1d:a1:77:15:9d:1e:70:c9:8b:a1:b9:4b:8e:b8:
e0:60:09:fe:9a:d8:41:81:88:c3:c6:4a:e3:9f:54:db:53:bf:
6c:bc:92:54:c8:5d:e9:b0:f8:b5:90:d0:27:13:de:d1:84:81:
9e:4e:a1:ea:3d:26:fb:16:e0:37:9d:c5:9d:2e:0e:88:81:c8:
c5:a5:27:80:34:3d:c1:41:49:f9:2f:67:3b:f8:c7:72:00:26:
82:8b:27:cb:75:eb:77:51:2b:71:e6:96:15:93:a6:c1:a2:29:
3d:ae:cd:87:da:57:12:30:6a:7e:19:1f:96:57:26:50:b4:2b:
da:63:46:c9:71:fd:4e:d5:a6:18:ad:d6:d4:7a:82:c9:ca:e1:
c9:d1:29:f3:07:54:d0:36:26:53:fe:db:ad:79:89:27:7d:51:
74:42:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:43:22 2025 by rpki-client