Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/R7OvI1U05GEUZH3DSQq_f4fhaaA.roa
File: R7OvI1U05GEUZH3DSQq_f4fhaaA.roa (raw, json)
Hash identifier: jgzjrwSFOMMSalkU+Z/rVOVagDl2oXlj6VTTug6qEGE=
Subject key identifier: 47:B3:AF:23:55:34:E4:61:14:64:7D:C3:49:0A:BF:7F:87:E1:69:A0
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16A8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/R7OvI1U05GEUZH3DSQq_f4fhaaA.roa
Signing time: Sat 20 Apr 2024 09:23:32 +0000
ROA not before: Sat 20 Apr 2024 09:23:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5800 (0x16a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 09:23:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=47B3AF235534E46114647DC3490ABF7F87E169A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:54:48:99:87:91:83:30:15:7c:71:31:1c:
11:a1:a2:31:28:21:f5:12:88:84:af:b4:0e:c3:b5:
31:5d:db:54:24:a4:9d:5b:4e:56:89:33:b7:f8:16:
2b:a6:04:ec:92:ea:9c:d1:95:88:dc:ae:e6:75:82:
f5:93:25:49:f4:42:df:12:2f:10:61:7e:42:99:71:
08:c4:24:2f:53:8e:a6:da:af:d2:72:d8:2e:0d:29:
22:d2:1f:2c:cf:ea:8c:0c:27:49:41:09:f8:84:39:
1a:fe:48:24:5a:42:1e:d9:9c:a7:d2:87:7b:6f:79:
53:1b:2c:0b:c7:d9:44:84:05:38:57:61:fa:2e:51:
0f:de:4b:ee:3e:82:71:59:9a:11:20:97:14:f4:b1:
3c:b8:dc:62:52:0e:f6:3e:67:07:42:4c:9b:7b:ca:
9f:33:73:84:e8:36:10:3a:a5:37:48:2a:02:87:c8:
46:ba:8d:09:8f:a0:f6:95:5a:10:bd:38:cf:b4:4f:
4c:29:2f:fc:fc:13:2f:50:ca:41:d4:48:87:d3:06:
b8:1c:ca:a3:cf:2f:08:b0:06:4e:0e:31:80:a0:28:
14:64:25:d7:c6:03:68:5f:2d:18:50:75:46:12:84:
f9:67:8d:5e:33:15:99:48:f6:de:ba:fa:8e:39:3d:
94:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B3:AF:23:55:34:E4:61:14:64:7D:C3:49:0A:BF:7F:87:E1:69:A0
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/R7OvI1U05GEUZH3DSQq_f4fhaaA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:36:1e:18:e3:14:e2:b6:52:c8:25:9d:06:81:aa:f4:cd:2d:
54:68:d5:b5:bb:46:3c:a9:c5:06:00:ce:e3:a2:d7:6c:52:ad:
c4:9c:1c:d8:17:f2:66:3f:b4:96:c4:ad:31:e0:58:dd:b9:f9:
80:15:0f:dd:bb:24:34:2a:7e:fa:95:02:b1:a7:7c:1f:ee:10:
6f:b1:8b:fc:f1:72:21:88:3e:a0:4e:bd:48:75:8f:d6:4b:90:
01:a4:d6:57:9b:da:64:95:94:91:55:fb:0b:fd:65:93:82:98:
24:b7:cc:21:04:02:89:9e:74:66:b6:3a:37:d5:d3:16:e4:9f:
54:86:90:9a:42:99:2b:69:7e:ac:a5:46:15:79:9c:5a:af:8f:
68:90:67:64:0f:06:fc:14:6e:b9:c4:5b:4a:d4:39:4e:9d:e5:
63:fe:cc:ae:7b:9f:31:76:e4:ab:13:06:22:cc:46:1b:6b:43:
a6:f4:a9:9a:a5:a0:61:9e:49:fe:a5:53:11:51:5e:e9:31:3c:
e0:fb:68:dd:ad:d7:50:e7:12:09:c3:46:ce:0b:25:32:78:17:
38:f6:27:f3:b0:d5:0c:50:13:63:c1:b0:db:b9:5c:22:61:9f:
26:eb:69:70:aa:4b:96:18:5c:5c:19:5b:4b:78:5d:e3:a3:f6:
e7:1d:55:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:50:57 2025 by rpki-client