Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/O47p6Dhp8VFWe2LNr_HEVI1O2S8.roa
File: O47p6Dhp8VFWe2LNr_HEVI1O2S8.roa (raw, json)
Hash identifier: Zrpzsz0KYLJtj9HTSFWUIK2rYOcx4E0zicn1Plag7NU=
Subject key identifier: 3B:8E:E9:E8:38:69:F1:51:56:7B:62:CD:AF:F1:C4:54:8D:4E:D9:2F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D36
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/O47p6Dhp8VFWe2LNr_HEVI1O2S8.roa
Signing time: Tue 07 May 2024 20:54:35 +0000
ROA not before: Tue 07 May 2024 20:54:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7478 (0x1d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 20:54:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3B8EE9E83869F151567B62CDAFF1C4548D4ED92F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:15:d4:a9:31:ba:dc:4a:45:a2:24:e3:dc:
26:7a:67:38:f6:8e:48:3d:f4:ed:85:e3:d2:5c:2f:
f7:df:40:ba:6c:6e:30:44:a3:de:41:6f:1f:58:80:
24:e1:50:0f:0e:6f:dc:ad:4b:97:83:8c:e3:28:05:
2c:2d:2a:16:e0:25:34:c9:d0:7f:dc:d5:89:e3:41:
df:dd:eb:88:25:4c:9b:6a:39:6e:7d:b9:17:39:cb:
50:a0:71:10:94:cd:81:8b:9f:90:2a:53:a1:95:9d:
a1:59:02:29:3d:98:6e:0b:e7:2a:bc:81:6c:23:a5:
52:99:81:65:69:aa:13:4d:78:57:83:42:73:ad:ae:
dc:82:94:76:78:7e:81:a7:03:34:22:65:e5:c5:30:
b2:67:2f:f8:98:46:20:15:76:a2:e8:7f:34:96:6a:
c0:1d:d2:c0:b1:6a:43:c2:5d:b0:e2:8e:d0:b0:90:
bd:de:10:4f:1d:d7:84:b8:6a:f3:42:93:2f:a0:b3:
29:bb:12:e6:7e:c1:e1:78:14:72:42:6a:5a:ab:75:
ac:69:38:31:98:8d:7f:19:78:ac:a0:4a:44:8a:fc:
85:19:6f:ca:72:e7:0c:e7:31:aa:83:d3:55:3a:ee:
4d:cb:cc:53:ce:c0:da:b2:42:5d:72:51:74:c5:a6:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8E:E9:E8:38:69:F1:51:56:7B:62:CD:AF:F1:C4:54:8D:4E:D9:2F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/O47p6Dhp8VFWe2LNr_HEVI1O2S8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:35:4c:62:56:bd:7a:8d:eb:3f:99:ca:ba:fd:cc:65:d1:37:
e2:1f:25:6a:bf:77:2a:df:8c:6b:5e:85:c5:65:61:f1:c1:15:
4e:2c:d4:ee:3d:86:c4:bc:b1:58:9b:5c:94:f9:17:fe:a2:0f:
03:a1:f0:59:b1:b1:3e:c0:13:0f:94:2e:47:1d:47:a7:d5:c8:
81:9c:2b:f8:42:52:37:dc:70:50:f5:d3:11:fe:52:53:64:8b:
4e:ca:8d:b6:0d:d3:ea:ae:fe:69:ec:f2:9a:98:c7:fe:aa:70:
dc:ed:16:81:3a:3f:94:8e:ca:03:96:cd:ad:55:7b:e3:2a:45:
00:c7:b7:2c:52:c4:07:1d:a6:54:9f:9d:e4:0f:6b:c2:4c:2e:
58:1a:0a:33:3d:a5:a2:15:d9:0e:f6:09:4a:06:76:93:ec:4b:
03:df:d5:41:5a:e6:c6:70:91:29:0c:05:6e:ad:92:2d:9a:23:
c6:18:88:07:67:05:db:9d:83:7d:e7:af:28:65:7a:90:e4:e7:
a9:92:ba:2e:a6:37:33:a6:b9:2d:85:54:3b:29:12:3a:9b:d2:
8d:7b:97:75:a9:10:2b:5c:08:01:a6:26:34:d5:2c:94:a3:eb:
98:a7:62:00:a3:31:e6:17:89:11:c4:bc:1a:4f:22:78:d4:1d:
8b:a4:ea:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:56:41 2025 by rpki-client