Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/c18Y9UyEtwlCnbezliQksKzu9RU.roa
File: c18Y9UyEtwlCnbezliQksKzu9RU.roa (raw, json)
Hash identifier: fzBZ7SPJKNiXsgPJNJHVXgRD+TV8RzFztTQhkn+Xb1A=
Subject key identifier: 73:5F:18:F5:4C:84:B7:09:42:9D:B7:B3:96:24:24:B0:AC:EE:F5:15
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 149C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/c18Y9UyEtwlCnbezliQksKzu9RU.roa
Signing time: Sun 14 Apr 2024 22:23:16 +0000
ROA not before: Sun 14 Apr 2024 22:23:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5276 (0x149c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 22:23:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=735F18F54C84B709429DB7B3962424B0ACEEF515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:98:f6:a2:44:1a:6e:3f:4c:2e:24:13:67:
4b:07:62:5d:c5:4f:79:33:c6:83:7f:2f:68:a6:89:
8c:94:58:e8:00:7f:88:f5:2d:52:b3:b0:30:2a:8e:
58:70:ad:3d:a6:48:70:e3:61:19:ed:61:fe:7a:45:
ec:e4:fe:86:02:48:8e:7b:b4:2c:33:f9:29:7b:c4:
af:eb:f1:d9:86:25:49:84:e4:65:7a:4b:81:b6:23:
66:a5:fc:42:66:05:bb:e1:28:09:1c:5d:4e:44:4f:
f7:a6:93:44:e8:21:8a:cf:68:4b:5b:48:bd:4c:e4:
f4:d2:5f:5e:fa:e6:81:c4:1e:53:78:5a:6b:90:10:
7d:c3:df:d2:96:17:3e:95:3a:fb:95:56:1e:df:ed:
95:0d:ee:8c:f3:df:bd:13:ac:35:2e:3c:ce:35:eb:
7a:24:db:d4:da:b5:33:3a:71:43:e0:24:cf:3e:4a:
d3:cf:ad:db:31:a6:5f:f0:eb:83:bb:22:c9:ea:94:
9b:0f:5d:e0:11:61:df:cf:2b:5d:b0:ad:5f:4c:5e:
8b:32:a6:97:b4:fa:3e:8b:cb:7e:88:af:ad:d2:f4:
00:07:3c:2e:5f:30:01:58:18:e6:ff:55:af:24:38:
10:60:c5:66:69:3d:f3:ac:72:d4:e0:56:af:ff:23:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5F:18:F5:4C:84:B7:09:42:9D:B7:B3:96:24:24:B0:AC:EE:F5:15
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/c18Y9UyEtwlCnbezliQksKzu9RU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:ea:d7:3e:49:e6:27:f8:30:e6:61:7c:2c:0f:5e:eb:bc:9f:
d9:95:e9:b4:04:63:c4:ed:fa:6f:3b:7d:59:ee:17:9a:41:79:
63:50:1d:d0:20:51:a1:bf:38:fe:c8:39:24:07:e4:fd:35:1f:
29:cc:26:91:9f:ea:aa:ed:0b:d0:5e:43:2f:e9:d2:c6:d4:9d:
2e:0a:fd:c2:f9:b1:ee:9a:57:aa:70:fa:a8:d9:85:ee:9e:8b:
99:4f:31:1a:15:1e:9b:f0:92:5a:d6:d3:ba:e8:12:0e:95:1a:
28:11:cb:4b:f8:9a:56:77:a4:fb:b6:49:58:f0:97:14:be:0c:
0a:b3:64:6c:4d:f1:0f:27:1a:ca:7b:11:73:05:ff:27:05:f4:
18:c5:1b:7a:83:0e:cd:10:65:80:16:45:d0:3b:42:d1:b3:b9:
92:d2:56:b6:d4:23:66:bc:9b:28:97:08:6d:ba:2d:75:47:1d:
9f:c8:b9:b4:bd:e5:69:02:ba:ea:f3:47:9c:bc:86:6e:a9:54:
15:c9:00:05:27:5b:a8:ef:f3:98:70:78:07:09:74:54:2b:7e:
c6:1e:79:e7:d0:32:59:f5:3e:0b:e4:9b:0f:1e:44:4b:64:5c:
0f:3e:f9:cb:04:97:1b:c7:30:d1:bd:66:8f:1d:59:17:e1:b7:
bd:60:cf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 20:28:33 2025 by rpki-client