Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/WPeG8yKDOaodLS96sllM8bp2yWc.roa
File: WPeG8yKDOaodLS96sllM8bp2yWc.roa (raw, json)
Hash identifier: fn+eIFIqjMbWfJ27MzrwKmx8NXIiEsSFVOrRncIB53U=
Subject key identifier: 58:F7:86:F3:22:83:39:AA:1D:2D:2F:7A:B2:59:4C:F1:BA:76:C9:67
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C14
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WPeG8yKDOaodLS96sllM8bp2yWc.roa
Signing time: Sat 04 May 2024 20:24:12 +0000
ROA not before: Sat 04 May 2024 20:24:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7188 (0x1c14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 4 20:24:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=58F786F3228339AA1D2D2F7AB2594CF1BA76C967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:08:a7:b0:c4:83:d2:78:06:20:38:5f:ac:
ba:8b:42:36:fb:32:6a:b3:3c:c0:ee:3f:01:6d:ba:
e6:0f:32:a3:8a:a3:4d:be:db:93:e8:6d:22:bd:f7:
c2:26:98:22:f1:1b:cd:10:ff:48:12:27:8c:82:01:
d8:da:04:19:51:0e:73:d8:89:42:fd:e7:b3:a1:fd:
8e:07:b2:1b:d2:3d:74:10:d1:93:7d:1c:a9:45:88:
e3:e6:b2:25:90:13:f5:83:7b:00:a1:02:fb:dd:44:
2b:29:0e:0d:71:03:66:50:b3:3f:84:8d:d2:be:52:
43:e1:f2:48:32:8d:ef:42:3a:a9:0c:b0:64:9d:35:
af:3e:23:56:2d:98:34:a7:4a:5b:ed:ef:1b:89:60:
b7:3b:d2:07:e6:03:44:0f:89:86:b2:53:2b:bc:72:
88:9f:44:97:25:24:d5:14:3b:4d:d5:63:05:d7:ee:
8f:c2:51:d7:81:e2:90:8d:c8:81:ae:92:6c:fa:d9:
c2:ae:79:a9:50:4f:30:4f:fc:2b:13:fd:86:36:b8:
00:b5:f5:38:42:df:fe:93:79:64:e7:f4:ca:67:e6:
1e:1c:d9:90:b2:3d:cd:74:2a:e4:76:44:f0:f4:45:
0d:fc:07:17:0b:56:01:bc:dc:7c:f0:50:92:fd:3e:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F7:86:F3:22:83:39:AA:1D:2D:2F:7A:B2:59:4C:F1:BA:76:C9:67
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WPeG8yKDOaodLS96sllM8bp2yWc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:d0:09:66:94:a1:22:1c:b5:98:b5:9d:19:df:03:b1:ef:e3:
db:fa:dc:52:de:3b:7f:f4:aa:e4:c3:38:7b:ae:57:15:c1:93:
3d:70:56:14:30:73:f1:20:5a:3a:97:27:17:0e:c4:55:0f:e9:
d6:47:f5:ef:c2:2f:80:0d:24:4c:f7:5c:7b:ce:e1:d1:b2:e4:
c1:82:13:b5:97:37:64:e2:6e:4e:40:ac:f6:d0:35:fa:c3:8b:
4f:6e:5f:5f:4d:3a:2b:0e:1d:2e:20:c1:e0:b1:31:a8:22:98:
de:b6:4f:2b:5d:df:9f:09:ad:41:42:62:4d:9d:24:a3:3f:86:
8e:4e:a0:32:08:0d:47:16:d8:65:05:0a:cb:a4:bf:b5:62:bc:
c1:95:b4:79:09:c0:33:9e:82:03:2f:c1:9c:e9:e7:54:6b:49:
36:2a:32:9b:36:c1:15:3c:0f:3c:29:a3:d0:4a:ba:a8:d9:da:
7e:d0:94:2c:ae:e7:02:5f:f3:ea:9c:30:76:73:79:9c:32:e5:
ac:69:33:e4:f6:48:cf:79:6c:f5:fc:a7:92:9f:cd:f4:f0:bc:
1e:35:82:9a:56:8b:58:cf:f7:2b:35:ce:ce:3a:a3:08:b9:df:
73:c0:a5:65:cf:8a:4b:1b:c7:8b:04:d3:58:30:f3:2c:3e:d1:
f4:4c:32:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:44:34 2025 by rpki-client