Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/LPmPCJptuBxB-LzG7HXQEwKlns4.roa
File: LPmPCJptuBxB-LzG7HXQEwKlns4.roa (raw, json)
Hash identifier: yIPLb6FQH08eCriX/vS6ccG6/10yWUhRqk/jMI8pHA8=
Subject key identifier: 2C:F9:8F:08:9A:6D:B8:1C:41:F8:BC:C6:EC:75:D0:13:02:A5:9E:CE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EA4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LPmPCJptuBxB-LzG7HXQEwKlns4.roa
Signing time: Sat 30 Mar 2024 00:22:31 +0000
ROA not before: Sat 30 Mar 2024 00:22:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3748 (0xea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 00:22:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2CF98F089A6DB81C41F8BCC6EC75D01302A59ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:1f:90:65:55:65:99:fa:b2:89:98:97:df:
fc:51:80:5b:1b:ff:0b:22:77:cb:17:7d:ef:09:bf:
cf:70:b8:e6:46:d2:6e:2a:fe:fe:bd:9e:1c:11:46:
c4:82:64:ed:63:9d:70:38:70:8f:4f:69:30:c8:f6:
28:ff:83:18:d4:d9:c3:7f:b3:32:b5:10:a6:d9:a9:
2b:3e:22:15:db:20:bc:fa:9f:bd:eb:99:63:e6:f3:
48:35:43:59:e7:4e:b8:50:50:ab:ba:7e:03:81:b6:
8f:83:44:0f:bd:87:e5:24:c7:ca:7f:a2:ba:e8:7b:
ba:b4:fb:1c:3d:f0:39:b7:5f:4a:94:c3:7b:84:e4:
01:c1:c1:d3:7c:4f:cf:39:d0:5f:7d:22:3a:c5:0a:
ad:27:8c:99:86:f7:52:26:31:5a:39:9f:24:66:a6:
e7:07:04:42:f8:03:48:59:98:d7:5c:af:a4:1c:9d:
06:54:d6:6e:d8:c6:94:3c:37:23:a8:28:53:92:6f:
54:a3:28:4a:1b:78:42:06:70:5b:4b:e2:2d:74:47:
6a:2d:fa:6b:e3:c7:d4:93:45:31:ff:3e:c1:40:11:
b3:16:75:af:8f:41:22:f2:ba:bd:c8:d3:3b:aa:31:
49:7b:a8:0f:18:ca:e2:07:92:13:94:8d:42:4c:e8:
c9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F9:8F:08:9A:6D:B8:1C:41:F8:BC:C6:EC:75:D0:13:02:A5:9E:CE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LPmPCJptuBxB-LzG7HXQEwKlns4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:c3:18:84:de:43:ae:c6:4c:f2:cd:c1:e2:2c:0f:5f:43:8e:
6e:a1:3f:1c:09:68:f5:fe:e9:09:04:19:16:c8:20:2b:70:c9:
60:c9:c2:d1:68:64:f5:31:d9:c7:04:69:90:87:47:a6:b8:92:
6f:a1:78:30:1a:24:9b:b7:eb:c0:dc:0e:f6:56:3d:cb:a3:ec:
5b:e8:4d:a5:0c:83:d2:fe:8a:c5:d0:ab:28:41:76:cf:f0:e9:
ea:cf:f1:8e:be:30:4a:a9:62:b2:a1:56:9f:ab:e0:31:56:0e:
58:e1:67:1a:c7:9c:d3:0c:b8:47:c4:51:aa:db:79:dd:9f:44:
37:bc:6f:ba:d2:7c:1a:7e:f2:34:91:d6:8d:66:15:fa:08:a2:
71:25:92:25:8e:ef:e4:9c:e9:97:10:7e:b6:c3:37:2c:6e:61:
63:66:5e:ce:de:4d:60:75:81:fa:db:58:19:92:de:57:6e:1b:
ac:8d:d9:7c:06:58:81:47:7a:20:10:5a:6a:1b:fe:c4:2f:b7:
89:6c:09:25:be:2f:96:0f:b9:36:c5:dd:5b:97:34:46:ad:c0:
93:7d:ce:5f:2e:de:0c:58:86:17:19:5b:78:5f:58:1a:c3:68:
0f:67:a0:2d:8d:99:ea:09:bf:3c:46:1f:53:55:72:b3:13:22:
fe:29:3b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:44:22 2025 by rpki-client