Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/RbLhO2TBf0swUuru_Z0yFvdHvo8.roa
File: RbLhO2TBf0swUuru_Z0yFvdHvo8.roa (raw, json)
Hash identifier: QZZQCmEFQ8lSthx+dn+RiCnL382Ztj7wVJ+fdkC2nQU=
Subject key identifier: 45:B2:E1:3B:64:C1:7F:4B:30:52:EA:EE:FD:9D:32:16:F7:47:BE:8F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0FFE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RbLhO2TBf0swUuru_Z0yFvdHvo8.roa
Signing time: Tue 02 Apr 2024 14:52:47 +0000
ROA not before: Tue 02 Apr 2024 14:52:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4094 (0xffe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 2 14:52:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=45B2E13B64C17F4B3052EAEEFD9D3216F747BE8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:89:c0:2b:a1:1d:90:6b:a8:1a:56:f1:c7:
eb:9c:ec:44:14:5e:a8:df:7f:fc:25:05:54:05:1c:
80:82:cb:59:ff:f2:5e:a4:68:65:c9:c6:a8:91:d6:
b8:ab:a3:b7:31:06:fc:87:a7:b5:ac:80:82:e4:71:
6e:da:fd:a8:a1:bd:a4:11:f0:f1:9d:c3:b4:f4:7d:
fb:94:29:e0:0b:e2:14:e8:57:4e:6c:71:0a:85:ce:
98:c9:20:a1:ae:d7:f9:a2:5b:fc:88:73:47:4c:5e:
4e:bf:28:73:84:5c:04:e9:de:b0:59:fc:13:cf:48:
23:49:5d:f6:e1:47:98:83:10:64:36:32:de:0c:ab:
1e:da:58:86:79:31:bb:12:90:60:84:7f:da:87:b7:
2b:66:c6:74:5e:8b:96:6c:46:9e:89:ad:3a:d3:a5:
08:6b:af:d2:17:68:7a:e4:2b:59:4c:01:f4:d8:2c:
f2:6f:0b:9a:70:b8:2f:dc:02:2d:d7:73:15:c9:e3:
78:bb:a0:09:a9:e2:1c:cc:1b:23:81:28:52:b2:80:
d3:5d:47:85:1d:f5:0e:49:f1:30:65:3f:f9:79:26:
44:e0:05:7a:a0:42:a1:53:e1:2e:0f:a6:5a:0c:21:
64:ce:ec:7b:56:06:98:68:09:24:0c:70:1b:c8:53:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B2:E1:3B:64:C1:7F:4B:30:52:EA:EE:FD:9D:32:16:F7:47:BE:8F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RbLhO2TBf0swUuru_Z0yFvdHvo8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:8e:c3:97:08:52:7f:ab:f5:c2:a9:0f:03:3d:6e:45:8e:97:
de:ef:ae:40:aa:36:b2:b4:53:50:b3:d2:da:a1:9c:e5:7a:25:
2f:99:f2:19:1b:42:e4:94:02:68:b4:62:61:98:0e:6a:d4:71:
58:40:05:31:90:dd:9b:77:26:12:42:88:16:d5:7a:16:de:6b:
93:9e:b6:33:6d:98:4e:74:2c:0e:29:a4:14:c8:55:ff:ce:71:
ed:81:8d:c3:31:a2:06:54:8f:84:1e:6d:65:11:6e:7f:44:c3:
0f:0e:38:1f:34:6d:a7:51:b0:10:b5:34:99:bd:50:e9:cd:ff:
51:bc:37:03:8d:3f:e3:ec:35:ad:db:3a:ef:fd:98:53:c0:57:
ef:dd:5f:5e:79:df:f7:e5:17:ea:a6:14:43:11:c3:ab:74:9e:
34:80:79:74:31:7c:65:dc:77:09:47:86:6d:cc:11:c9:54:a4:
cd:53:40:3d:5d:0d:69:be:d1:1a:f6:74:ea:52:76:4a:d8:1b:
54:6c:95:5e:98:5a:fd:03:73:db:22:f8:c6:35:93:88:3e:33:
7b:ff:bd:07:05:6b:ed:11:90:82:39:31:bb:86:8f:25:7c:25:
4e:cc:76:b4:37:a7:a8:aa:08:09:ea:8a:d8:25:70:b4:b8:61:
6b:ef:ce:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 08:09:10 2025 by rpki-client