Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/OhBtjhf8nYAau8fEm9t-ib8NbRI.roa
File: OhBtjhf8nYAau8fEm9t-ib8NbRI.roa (raw, json)
Hash identifier: VLlRcpr3xkoRaIvMOAAQpmF8HFPpj3EcLURN9mjXjo8=
Subject key identifier: 3A:10:6D:8E:17:FC:9D:80:1A:BB:C7:C4:9B:DB:7E:89:BF:0D:6D:12
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CE4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/OhBtjhf8nYAau8fEm9t-ib8NbRI.roa
Signing time: Tue 07 May 2024 00:24:29 +0000
ROA not before: Tue 07 May 2024 00:24:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7396 (0x1ce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 00:24:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3A106D8E17FC9D801ABBC7C49BDB7E89BF0D6D12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:2f:66:6c:26:de:61:76:d4:12:02:d4:7d:
96:40:e9:b8:50:32:17:57:be:83:39:2d:2d:89:49:
c9:24:6f:b9:0f:01:5d:70:8e:ef:93:1a:42:da:f4:
aa:2f:47:e7:8c:9b:13:92:7b:e2:2f:d5:76:00:a4:
5b:a0:32:80:e7:50:0c:df:4d:17:51:8e:1c:68:1a:
db:b4:92:ca:a7:42:e5:16:27:0b:27:ee:57:03:75:
c2:c1:31:6e:6c:d7:b5:f7:d6:42:dc:02:86:ff:66:
4c:d9:6e:9e:a9:ec:46:b9:75:84:c2:6c:a8:b8:8b:
5b:00:fe:89:9b:b2:9d:01:95:ec:6d:a0:cc:32:c9:
1f:b6:9c:45:ec:85:82:a1:53:a2:11:bd:24:d2:30:
1e:f3:03:66:b9:cb:d8:1c:50:18:31:a7:a2:34:f4:
d1:07:fa:c5:98:f7:71:4e:12:cb:9f:d0:05:6a:00:
2c:d0:0c:32:a1:7d:61:05:60:52:16:ed:56:75:ed:
69:26:2c:14:f5:4f:16:2d:b4:f1:b5:34:2e:7d:8e:
9b:85:1e:e1:cc:f9:fa:e5:80:91:a1:54:d4:8d:8a:
26:e5:4b:a5:34:b8:71:4e:8b:70:64:35:99:ab:58:
2c:7a:62:9e:f3:bc:4e:34:91:6b:20:b9:51:1d:7c:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:10:6D:8E:17:FC:9D:80:1A:BB:C7:C4:9B:DB:7E:89:BF:0D:6D:12
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/OhBtjhf8nYAau8fEm9t-ib8NbRI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cb:e6:f8:f5:2b:cc:1c:cd:4c:22:54:9f:f2:2d:83:e1:59:7a:
c9:99:43:34:aa:ae:07:0a:7d:21:f8:e1:38:6f:41:9d:7d:ba:
8f:98:2e:fb:3b:5a:49:c8:30:a1:c2:1c:b8:c9:67:07:21:48:
29:83:8e:6e:bd:4b:04:d5:16:81:ec:59:66:b7:b7:ef:b7:18:
d2:eb:8b:e4:47:b0:a9:bc:44:18:83:bb:9a:77:0c:5d:f9:83:
07:cc:7c:83:76:6e:de:23:88:19:b5:32:20:b3:f6:01:0a:ed:
c4:8f:0e:3b:53:94:45:d7:03:d3:2d:29:43:55:93:e1:44:24:
26:58:b8:51:c4:18:91:53:f2:ff:be:3e:b4:a0:d4:de:4b:d0:
d1:38:9d:08:92:ee:11:71:5a:6f:c2:e5:2d:dc:08:ff:f4:d7:
d4:44:7a:46:f3:3f:34:c4:05:61:90:bc:00:6f:66:fa:7f:3b:
5c:4a:ba:6d:63:b0:a7:7b:e0:74:80:cb:63:9d:99:e2:95:1d:
ea:5a:bb:63:8f:99:64:21:b9:37:22:8b:70:96:f7:ad:ff:41:
80:93:18:10:fe:ee:e6:9a:5e:e6:bf:44:00:ad:d8:72:87:9c:
54:53:c3:eb:a5:0b:58:b9:5c:8b:50:26:42:86:6c:00:fb:a6:
7e:c9:85:ec
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICHOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDcw
MDI0MjlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNBMTA2RDhFMTdGQzlE
ODAxQUJCQzdDNDlCREI3RTg5QkYwRDZEMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/4y9mbCbeYXbUEgLUfZZA6bhQMhdXvoM5LS2JSckkb7kPAV1w
ju+TGkLa9KovR+eMmxOSe+Iv1XYApFugMoDnUAzfTRdRjhxoGtu0ksqnQuUWJwsn
7lcDdcLBMW5s17X31kLcAob/ZkzZbp6p7Ea5dYTCbKi4i1sA/ombsp0BlextoMwy
yR+2nEXshYKhU6IRvSTSMB7zA2a5y9gcUBgxp6I09NEH+sWY93FOEsuf0AVqACzQ
DDKhfWEFYFIW7VZ17WkmLBT1TxYttPG1NC59jpuFHuHM+frlgJGhVNSNiiblS6U0
uHFOi3BkNZmrWCx6Yp7zvE40kWsguVEdfK0NAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUOhBtjhf8nYAau8fEm9t+ib8NbRIwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL09oQnRqaGY4bllBYXU4
ZkVtOXQtaWI4TmJSSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAy+b49SvMHM1MIlSf8i2D4Vl6yZlDNKqu
Bwp9IfjhOG9BnX26j5gu+ztaScgwocIcuMlnByFIKYOObr1LBNUWgexZZre377cY
0uuL5EewqbxEGIO7mncMXfmDB8x8g3Zu3iOIGbUyILP2AQrtxI8OO1OURdcD0y0p
Q1WT4UQkJli4UcQYkVPy/74+tKDU3kvQ0TidCJLuEXFab8LlLdwI//TX1ER6RvM/
NMQFYZC8AG9m+n87XEq6bWOwp3vgdIDLY52Z4pUd6lq7Y4+ZZCG5NyKLcJb3rf9B
gJMYEP7u5ppe5r9EAK3YcoecVFPD66ULWLlci1AmQoZsAPumfsmF7A==
-----END CERTIFICATE-----
Generated at Sun May 18 05:05:13 2025 by rpki-client