Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/KZ5_z8Pg7WwVb5kON5jutLQlVpE.roa
File: KZ5_z8Pg7WwVb5kON5jutLQlVpE.roa (raw, json)
Hash identifier: 8HsaGHt5MQX5xpQlx08zu32h6ZZfaz6h+5CDQ2DIfdI=
Subject key identifier: 29:9E:7F:CF:C3:E0:ED:6C:15:6F:99:0E:37:98:EE:B4:B4:25:56:91
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EC0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/KZ5_z8Pg7WwVb5kON5jutLQlVpE.roa
Signing time: Sat 30 Mar 2024 07:22:32 +0000
ROA not before: Sat 30 Mar 2024 07:22:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3776 (0xec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 07:22:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=299E7FCFC3E0ED6C156F990E3798EEB4B4255691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:29:eb:b6:9e:3f:30:69:47:67:7a:89:84:
5e:a3:40:90:8e:0c:1f:34:6b:58:bd:4f:6d:1e:40:
fe:60:b7:90:e2:6d:d4:b1:71:05:72:43:bf:a9:f1:
9e:a1:57:5c:88:78:cf:2e:e0:c0:a0:50:ff:66:59:
0e:6c:71:dc:ea:5b:c8:c6:3d:d0:a6:f8:3a:4f:b4:
fd:fe:d8:f2:89:ae:80:fa:3f:d8:64:48:25:07:7e:
e0:ff:2a:3a:1c:98:d2:e8:a6:d4:c3:78:a7:7e:2d:
5b:8b:8d:1d:7f:22:f0:df:65:2b:de:16:c0:5f:19:
0a:31:00:67:8c:86:d6:9f:98:b6:2f:e0:50:ef:07:
c7:ad:91:f8:f8:5f:4b:69:3c:5d:39:4b:92:4e:4d:
37:4c:d2:40:94:51:4d:e2:89:d6:7d:98:21:80:c8:
20:e4:93:77:ff:05:b5:e4:7b:24:d3:fd:a0:d9:e2:
06:d6:69:af:91:c7:2a:a7:b5:c1:e8:8d:b1:68:44:
cd:59:d3:e7:ec:1a:44:9c:ae:e9:ca:ce:51:7c:a0:
f1:16:3b:ee:e6:6e:0d:1d:4b:98:7a:eb:81:74:90:
a9:cd:26:7e:b3:9f:73:d3:91:ba:46:33:c3:c4:8d:
31:63:15:b9:eb:02:1d:b8:24:e7:c0:6e:ff:1c:3c:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9E:7F:CF:C3:E0:ED:6C:15:6F:99:0E:37:98:EE:B4:B4:25:56:91
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/KZ5_z8Pg7WwVb5kON5jutLQlVpE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:19:9b:ca:9a:15:6e:65:21:78:63:71:8d:76:13:a8:78:6f:
ec:7d:34:6b:13:f5:87:65:ad:5d:1d:a6:d4:9d:84:40:20:82:
af:f9:f9:d9:98:8f:aa:2e:7a:48:f1:4c:86:27:f7:e1:01:6b:
34:5f:69:d3:f5:e7:79:11:ed:77:92:1b:ee:e5:05:8d:71:04:
dc:71:38:40:ae:bf:dd:76:2f:fb:40:a7:52:4d:33:d8:40:3d:
4a:70:f0:2a:95:1e:9d:21:7b:11:c7:7d:60:e8:ef:85:90:57:
df:c8:7e:4b:da:61:73:e8:ef:be:a2:00:fe:99:11:f5:b8:9c:
31:38:38:59:ef:2e:6d:60:c3:91:38:9a:de:75:dd:2f:8e:f7:
36:de:d3:85:a2:f6:ed:3e:3a:6d:c9:17:b5:20:9e:e5:9a:b6:
a1:51:7f:d5:f6:86:e2:20:07:4b:49:4d:8d:31:cd:1d:8e:76:
4f:49:2f:bc:cb:fb:d6:6f:24:4a:aa:d7:c3:bf:43:a5:42:b7:
c1:a6:95:3d:e6:3d:89:24:35:23:78:0f:1c:d8:52:4d:43:3d:
45:12:6f:bc:4c:56:84:45:c2:94:a6:30:35:a1:0b:e4:24:82:
38:c8:ed:4a:37:eb:a4:15:3a:11:25:2a:ce:fe:c2:27:22:6b:
e8:a1:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:57:59 2025 by rpki-client