Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/U3GvZm6EJn55e_baqR4VVBYEVu4.roa
File: U3GvZm6EJn55e_baqR4VVBYEVu4.roa (raw, json)
Hash identifier: kgbE6BZl+SpcPxmAWciE5y7xc4keuoT1ZKa8tDy8kYA=
Subject key identifier: 53:71:AF:66:6E:84:26:7E:79:7B:F6:DA:A9:1E:15:54:16:04:56:EE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19C4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/U3GvZm6EJn55e_baqR4VVBYEVu4.roa
Signing time: Sun 28 Apr 2024 16:23:53 +0000
ROA not before: Sun 28 Apr 2024 16:23:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6596 (0x19c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 16:23:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5371AF666E84267E797BF6DAA91E1554160456EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:16:53:3b:f5:6f:24:75:8f:0d:08:36:a2:
75:62:f1:19:ec:9b:d8:0f:16:f8:05:de:1c:1a:38:
b9:30:1d:9f:b9:17:7d:77:1e:7b:8f:d6:9e:e5:eb:
00:5e:12:fa:48:9f:a1:8e:95:2c:d7:79:e0:02:96:
f6:f0:ef:22:29:b8:7a:e8:c5:ce:b4:2d:d1:bf:1e:
6d:27:c9:89:f9:5e:bf:82:54:67:58:87:c0:e4:cb:
0a:7a:5a:dc:62:0f:68:cd:ac:ab:44:dd:9b:d3:a5:
10:7a:5d:62:97:31:99:96:e6:b5:85:a9:ce:a7:f4:
38:07:08:70:64:bf:1d:e4:00:83:14:d8:61:55:96:
d5:35:5b:4b:fc:c9:03:01:48:05:01:d0:f3:d0:2c:
95:61:f7:2e:da:aa:67:e1:8d:6b:56:c0:56:35:6f:
d2:78:07:63:2b:f2:17:9d:7e:ba:d9:e6:35:ab:ca:
95:a6:c4:28:35:95:42:7f:cc:81:c2:b2:69:f5:9c:
db:5d:52:10:fd:1e:6c:09:94:ce:e2:58:0e:14:cd:
ff:b7:ad:dc:f9:ef:3f:49:01:0c:83:72:ab:21:f3:
8d:77:43:e3:cc:ab:1c:8e:27:62:b3:e6:8a:cf:e9:
8e:37:c0:f0:f9:57:66:76:27:f3:a0:73:69:cb:b0:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:AF:66:6E:84:26:7E:79:7B:F6:DA:A9:1E:15:54:16:04:56:EE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/U3GvZm6EJn55e_baqR4VVBYEVu4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:95:c0:3f:53:0d:cf:c7:c0:eb:7d:8c:a4:d3:66:24:a9:6a:
ea:16:ac:bb:6a:3b:7d:59:07:02:0b:94:2a:90:40:40:6c:9b:
33:10:f7:0d:83:20:c9:f8:e9:a5:a3:27:6f:1f:c2:9a:e8:66:
95:79:c7:b1:95:e3:ea:ce:46:cd:98:d1:79:56:a9:f2:a9:dd:
6e:e7:59:a3:0a:9a:88:4b:ed:4b:50:69:27:9b:91:d9:83:eb:
b0:12:ad:92:84:e8:24:74:14:27:d0:69:98:dd:13:e8:49:73:
57:87:63:48:18:77:e6:78:83:92:78:8a:99:6c:c3:a9:7d:26:
77:b9:32:39:d2:30:13:d9:33:6a:e7:a0:6d:42:1c:87:a6:4f:
a7:d2:b4:5a:29:fb:04:c3:f1:5d:d3:a0:c6:a0:13:e0:9d:4d:
c8:fb:da:1c:6d:1c:94:16:c3:e1:b8:01:e2:d6:2c:ff:e8:f3:
2f:08:0b:e6:50:56:74:4a:39:31:6d:95:36:72:ee:1c:54:dd:
66:d7:73:be:43:89:13:01:16:cb:e8:78:b4:36:cf:e9:94:65:
ec:5c:12:a7:44:40:62:32:77:86:e7:83:98:3d:1f:38:7c:c3:
32:48:93:57:e1:17:55:8f:fa:32:51:22:68:f7:58:e1:b6:f8:
f6:a6:ca:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:59:37 2025 by rpki-client