Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/cbcD1iwf9dUWphD2GpGhe_HHpJw.roa
File: cbcD1iwf9dUWphD2GpGhe_HHpJw.roa (raw, json)
Hash identifier: KQSMmUB6AKIGfRSDaVm6I+JPEiVLN59cStmkdp6aeb0=
Subject key identifier: 71:B7:03:D6:2C:1F:F5:D5:16:A6:10:F6:1A:91:A1:7B:F1:C7:A4:9C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D42
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cbcD1iwf9dUWphD2GpGhe_HHpJw.roa
Signing time: Tue 07 May 2024 23:54:26 +0000
ROA not before: Tue 07 May 2024 23:54:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7490 (0x1d42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 23:54:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=71B703D62C1FF5D516A610F61A91A17BF1C7A49C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:5f:38:c8:62:88:88:e6:01:0f:51:e2:b8:
17:fb:6e:a2:67:ad:e4:c8:f4:04:d1:fc:a1:e6:f0:
2b:7b:3c:03:57:8d:33:99:e4:2b:ed:20:ca:76:5f:
be:98:aa:ec:9d:d1:0b:fe:ee:c0:4a:a0:4a:80:f6:
27:45:aa:d0:dc:e8:7f:2b:81:12:7f:07:98:91:d2:
86:9a:ff:50:6e:94:89:1c:6e:74:b9:36:aa:a5:1b:
b4:94:5a:10:71:9d:67:9f:9a:c9:68:35:1e:41:b2:
6b:84:3b:31:b6:07:ea:5e:4b:e9:ed:5e:fe:07:d9:
ec:6d:32:d1:59:af:9b:4a:e9:77:e4:fd:ed:38:cf:
08:ee:aa:74:04:9d:ae:e9:d9:77:ed:a4:a4:55:1b:
a1:32:6d:3f:4f:cf:3c:2d:bf:a6:3e:89:50:6a:00:
c7:36:c6:c6:ac:3c:5d:de:71:6d:02:45:f7:1e:9b:
e2:80:bc:ba:a2:44:c3:df:8a:e6:15:ad:6d:5c:42:
8b:d4:fd:11:02:63:c0:6f:1a:ce:f5:34:08:8f:38:
c9:ab:f2:be:50:ce:38:5f:f6:5f:61:34:8d:b6:b1:
cc:70:56:5f:7a:4c:da:96:2e:94:35:f4:e9:d7:97:
c4:f5:b4:67:7c:fd:3e:64:72:34:e0:f7:c3:50:b2:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B7:03:D6:2C:1F:F5:D5:16:A6:10:F6:1A:91:A1:7B:F1:C7:A4:9C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cbcD1iwf9dUWphD2GpGhe_HHpJw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
be:61:cc:da:97:76:7a:41:b9:b1:55:5d:fe:73:14:29:60:ff:
9f:af:af:65:5f:04:db:29:0d:9f:6c:92:58:f3:4b:da:ea:3c:
4a:b7:42:bd:0d:74:7a:3b:45:b7:cf:4c:da:47:e6:58:68:84:
e9:e8:b1:1e:36:4b:cf:25:c8:c5:91:02:f4:f2:b1:2c:12:5b:
e1:4a:fd:81:30:b0:d2:fa:9a:e6:ce:6f:e8:54:89:f3:1a:7f:
b7:a5:34:90:eb:b6:f1:7d:6e:66:a6:00:c2:56:fd:ff:0a:df:
e4:8b:23:9a:8e:79:41:e0:0d:1c:d4:8c:1b:36:b1:18:91:3f:
5c:d0:86:4d:9a:3f:67:24:19:e7:3e:19:1c:6e:b5:ed:bb:9a:
01:77:d8:a4:37:28:61:e2:c4:eb:d4:f5:65:c0:64:41:93:b0:
ce:3f:71:69:c3:45:2c:15:fe:0a:4b:76:e5:be:34:fa:44:f3:
cd:98:a7:9c:e2:53:c0:c3:59:25:22:a4:71:ab:5b:55:04:67:
8b:d2:58:ff:25:b4:17:1e:24:24:8d:d4:91:2d:b5:83:d1:4e:
8b:76:f2:4a:af:6b:1e:3a:06:ed:fc:7e:7c:c7:4b:e5:a2:f2:
c8:ee:1b:f9:16:c6:34:f5:55:bb:25:be:40:0d:f2:0f:d6:13:
ff:00:a2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:52:51 2025 by rpki-client