Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/cghanDCh12FyHZ5rnI-4Rsko_xk.roa
File: cghanDCh12FyHZ5rnI-4Rsko_xk.roa (raw, json)
Hash identifier: arqYCmlcBaWHn84jx5txqJDQVmRkHroSKd5A3vB83Zo=
Subject key identifier: 72:08:5A:9C:30:A1:D7:61:72:1D:9E:6B:9C:8F:B8:46:C9:28:FF:19
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 163E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cghanDCh12FyHZ5rnI-4Rsko_xk.roa
Signing time: Fri 19 Apr 2024 06:53:39 +0000
ROA not before: Fri 19 Apr 2024 06:53:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5694 (0x163e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 06:53:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=72085A9C30A1D761721D9E6B9C8FB846C928FF19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:fa:ed:2c:27:4e:a2:e4:ef:9f:9f:9b:01:
c1:11:9c:db:91:36:a0:44:31:65:b4:d6:cb:c4:83:
9f:d5:e0:57:f6:91:58:31:2d:f2:f9:2d:49:44:08:
24:b8:43:d6:0b:3d:26:03:66:8e:f5:e8:e5:07:3b:
88:e9:f7:ac:1c:6f:ea:c0:84:76:00:9f:68:90:47:
71:a3:5c:e3:65:09:1f:6f:72:47:06:94:42:41:df:
a2:a5:3e:c6:9e:50:04:27:09:48:ae:00:d3:3e:80:
22:e6:25:bc:28:0f:c9:c0:be:90:ce:c3:29:c7:96:
da:0f:0e:ec:22:38:34:09:03:2d:70:ad:31:9d:d7:
3c:38:26:82:db:1e:f6:f1:58:12:d8:ce:e8:01:20:
91:3a:8b:79:4c:16:c2:d7:97:c7:75:84:e0:8d:fd:
c4:32:35:35:4d:62:79:eb:7f:bd:f3:8f:18:3d:5f:
dd:90:ad:0e:10:4e:d4:98:a3:27:42:e9:8f:8b:82:
a4:10:49:30:a4:7f:d4:b6:9a:dc:d2:0b:64:04:bb:
b5:c7:c3:bf:16:ea:6f:f9:b0:1e:5c:d3:7f:f5:08:
43:f2:e7:44:5d:02:6b:94:8b:79:fa:ad:e0:b1:98:
e8:ba:50:3f:0a:07:96:6d:36:8b:ad:df:88:59:20:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:08:5A:9C:30:A1:D7:61:72:1D:9E:6B:9C:8F:B8:46:C9:28:FF:19
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cghanDCh12FyHZ5rnI-4Rsko_xk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:7b:38:2f:d6:8a:c2:f9:5e:25:8f:97:3b:bb:fe:7b:87:f1:
3f:9c:fd:12:c4:ef:2a:41:48:14:36:89:e9:08:a4:53:c7:ee:
cd:16:cf:26:71:5e:05:11:54:38:00:b0:c2:51:f3:cf:7b:d4:
7f:69:a2:dd:e8:74:da:44:44:20:d1:1d:3e:9a:00:ca:0f:e0:
42:f5:8b:f8:68:ba:d2:c1:57:36:ea:6b:3e:38:2d:27:47:1b:
4f:ee:ba:24:be:f4:b9:2f:84:8e:00:08:42:fd:dc:ac:3b:39:
fd:2f:55:05:30:62:e8:30:e5:6d:e0:2f:12:f2:7c:d3:39:ca:
93:d8:9e:d4:c0:62:f5:01:f5:a9:02:29:ed:93:fa:4d:5c:7a:
b6:38:04:c5:e7:03:5a:68:63:2c:98:6c:2e:e0:92:11:bf:95:
4a:0f:8c:e4:df:64:85:0e:b7:20:12:f4:32:d3:b9:2c:a1:ef:
c0:15:4f:ca:6a:f5:95:49:b7:1c:3a:46:12:f1:58:3c:c1:4c:
55:5f:df:dc:94:33:10:a1:43:18:25:6c:75:20:dd:5f:6e:64:
5d:8b:b2:0b:97:4b:eb:f8:4b:5e:93:9c:cb:b8:4a:52:52:af:
03:0d:1a:74:38:bb:30:00:21:4d:28:09:ae:d5:75:d0:6e:50:
13:09:33:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:58:26 2025 by rpki-client