Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/aueDrP1RNfxtwg7jn25VLQQmYG0.roa
File: aueDrP1RNfxtwg7jn25VLQQmYG0.roa (raw, json)
Hash identifier: grShZR5LDo597E7KFobk3PEuuJcEF1av1tL39RfVXkA=
Subject key identifier: 6A:E7:83:AC:FD:51:35:FC:6D:C2:0E:E3:9F:6E:55:2D:04:26:60:6D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 158A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aueDrP1RNfxtwg7jn25VLQQmYG0.roa
Signing time: Wed 17 Apr 2024 09:53:23 +0000
ROA not before: Wed 17 Apr 2024 09:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5514 (0x158a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 09:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6AE783ACFD5135FC6DC20EE39F6E552D0426606D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e7:71:13:ee:c0:36:2c:7d:3e:67:54:1c:d4:
62:4e:5c:ea:04:c3:a3:83:26:7d:fb:a7:54:cb:15:
42:5a:75:f1:fd:f4:10:19:1a:ef:b2:76:6b:a5:43:
b4:62:e8:6b:e2:69:54:df:ea:67:d2:72:03:9e:89:
38:59:d6:11:82:a0:ef:09:72:03:38:96:48:11:2f:
94:0c:92:45:8a:6d:73:ab:06:27:93:7f:6a:0d:30:
9b:f4:6b:85:17:14:f6:c2:0b:66:d3:42:59:f9:e6:
65:2e:fd:37:09:2b:d4:6b:49:3a:03:34:93:cd:f9:
85:bf:a4:a7:fb:36:fa:25:71:c9:f6:83:e9:51:8f:
45:df:45:41:20:19:11:e8:a2:7c:f9:bc:c8:ac:ae:
09:c4:c1:d3:bc:85:9e:78:39:2c:5c:35:bc:ac:09:
96:d9:a9:fe:f6:cb:81:7b:ac:6d:25:bd:b5:21:de:
61:e3:eb:64:02:9e:fb:3a:7e:7d:24:9a:aa:25:25:
32:56:5b:d9:f1:f9:b9:dc:fc:f6:c3:cf:52:a5:ce:
0d:ec:ec:ee:76:51:d5:ec:b7:f4:03:2b:72:7d:ef:
d4:65:28:62:53:9d:38:ae:0c:cd:f3:71:d8:6d:a5:
57:5d:a0:05:74:6c:65:cb:37:4f:4b:80:4e:a9:20:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E7:83:AC:FD:51:35:FC:6D:C2:0E:E3:9F:6E:55:2D:04:26:60:6D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aueDrP1RNfxtwg7jn25VLQQmYG0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:db:20:36:13:3e:2b:4d:52:77:ce:e1:e9:7f:a1:9d:92:a0:
e0:f3:a7:62:49:c3:89:54:15:4a:1f:7b:e7:7f:68:53:c2:00:
04:7d:cd:92:26:db:78:01:b9:84:19:95:27:dd:b1:c3:85:e4:
16:59:91:cb:c6:9e:4f:1e:31:10:8e:91:c0:10:72:f9:d7:cc:
aa:36:4f:84:45:87:ff:ca:a7:50:65:b9:6a:ce:04:13:15:a6:
89:2e:d4:44:a6:fa:23:78:29:6c:de:51:5c:9e:6a:50:a1:9f:
e8:f0:d0:e7:d4:16:be:4a:3b:44:fb:36:9c:5f:9f:1f:83:ca:
39:9b:ae:76:52:5b:50:42:30:45:28:89:8b:85:dc:b8:3f:50:
4a:c9:69:11:ef:f4:15:ad:e1:3b:df:3b:01:68:6d:fa:67:8e:
44:48:5e:5d:c0:be:ea:d1:2a:89:1a:02:db:72:cb:99:7b:48:
97:6a:05:c0:40:38:a2:f7:05:38:89:1b:b1:7d:6c:ba:77:e1:
fe:ed:31:18:b9:b7:65:6d:82:ab:67:05:b0:a2:70:d7:36:32:
a9:c4:97:c2:a9:e0:da:c3:10:d3:9d:d8:e9:cf:ed:48:14:2c:
eb:19:4e:7e:0d:d0:f6:41:70:86:fa:27:26:1c:da:4c:b2:c5:
19:d8:2c:b2
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTcw
OTUzMjNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZBRTc4M0FDRkQ1MTM1
RkM2REMyMEVFMzlGNkU1NTJEMDQyNjYwNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDd53ET7sA2LH0+Z1Qc1GJOXOoEw6ODJn37p1TLFUJadfH99BAZ
Gu+ydmulQ7Ri6GviaVTf6mfScgOeiThZ1hGCoO8JcgM4lkgRL5QMkkWKbXOrBieT
f2oNMJv0a4UXFPbCC2bTQln55mUu/TcJK9RrSToDNJPN+YW/pKf7Nvolccn2g+lR
j0XfRUEgGRHoonz5vMisrgnEwdO8hZ54OSxcNbysCZbZqf72y4F7rG0lvbUh3mHj
62QCnvs6fn0kmqolJTJWW9nx+bnc/PbDz1Klzg3s7O52UdXst/QDK3J979RlKGJT
nTiuDM3zcdhtpVddoAV0bGXLN09LgE6pIK97AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUaueDrP1RNfxtwg7jn25VLQQmYG0wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2F1ZURyUDFSTmZ4dHdn
N2puMjVWTFFRbVlHMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAfdsgNhM+K01Sd87h6X+hnZKg4POnYknD
iVQVSh97539oU8IABH3NkibbeAG5hBmVJ92xw4XkFlmRy8aeTx4xEI6RwBBy+dfM
qjZPhEWH/8qnUGW5as4EExWmiS7URKb6I3gpbN5RXJ5qUKGf6PDQ59QWvko7RPs2
nF+fH4PKOZuudlJbUEIwRSiJi4XcuD9QSslpEe/0Fa3hO987AWht+meOREheXcC+
6tEqiRoC23LLmXtIl2oFwEA4ovcFOIkbsX1sunfh/u0xGLm3ZW2Cq2cFsKJw1zYy
qcSXwqng2sMQ053Y6c/tSBQs6xlOfg3Q9kFwhvonJhzaTLLFGdgssg==
-----END CERTIFICATE-----
Generated at Sun May 18 10:55:54 2025 by rpki-client