Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/dE9KCKcL2zpxtGBiWFZXQ24QOcU.roa
File: dE9KCKcL2zpxtGBiWFZXQ24QOcU.roa (raw, json)
Hash identifier: sn6WWNZAw8aD/cx3YNPN4k+yobYNFKxsZAiyEh2hT4w=
Subject key identifier: 74:4F:4A:08:A7:0B:DB:3A:71:B4:60:62:58:56:57:43:6E:10:39:C5
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1482
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/dE9KCKcL2zpxtGBiWFZXQ24QOcU.roa
Signing time: Sun 14 Apr 2024 15:54:11 +0000
ROA not before: Sun 14 Apr 2024 15:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5250 (0x1482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 15:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=744F4A08A70BDB3A71B46062585657436E1039C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:2e:05:ca:c5:b5:8e:b5:26:52:1c:97:36:
3c:a2:91:0a:8e:8f:f8:a9:a8:17:97:29:89:3d:5b:
56:17:85:db:1b:e1:18:ee:ca:67:0f:b0:a8:ea:07:
c4:19:c5:2e:c4:a5:2c:1f:7a:04:86:35:94:16:ba:
97:0b:c5:e8:8f:b2:82:c9:a2:41:c9:49:0d:72:52:
fb:a7:a2:f2:de:b2:e1:df:71:15:02:9c:36:95:7c:
f3:37:f4:c0:c2:29:bc:9f:18:7b:80:ed:25:ce:d0:
b7:8d:01:12:71:2d:25:a5:24:ed:24:87:3a:a1:b8:
fe:3e:53:f7:e4:99:ff:1a:cb:13:43:38:3f:ba:e1:
7b:0a:55:d8:fd:2c:2d:ba:fc:93:dc:da:6a:1a:e7:
ad:8d:7b:47:3b:9f:3f:77:43:96:29:22:be:ef:2d:
ce:66:2d:a2:f8:7b:85:f2:3b:38:9b:f3:d2:29:b5:
d6:ec:32:f3:56:ac:fe:fa:c4:43:42:36:06:eb:19:
be:18:03:f3:c2:5c:b0:a0:20:7d:6f:79:97:52:4b:
f5:28:81:89:8a:18:99:76:19:49:cc:d6:7a:b6:27:
4c:67:61:cc:7c:86:87:18:8c:83:bd:a2:55:9c:41:
0e:dc:95:76:b7:a0:83:32:dd:79:9b:9f:58:85:41:
91:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4F:4A:08:A7:0B:DB:3A:71:B4:60:62:58:56:57:43:6E:10:39:C5
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/dE9KCKcL2zpxtGBiWFZXQ24QOcU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:b2:a0:4e:69:8f:f0:35:b3:7d:04:7d:d4:67:8b:64:cd:84:
eb:9b:28:36:f5:74:ba:2a:3d:ab:eb:0a:c3:4c:03:b0:37:37:
c1:d1:5a:46:b6:67:cc:a6:33:88:02:16:e6:c0:d7:ce:d3:95:
e9:42:a2:6c:c9:d4:c3:39:c4:1e:47:9f:83:2a:74:66:46:78:
ac:75:d3:b0:f3:65:17:79:0b:e9:35:11:e1:20:92:24:8a:54:
74:ab:74:3f:2f:ea:d9:ae:b0:51:3d:ef:26:bc:2d:e9:21:0f:
cb:e7:18:af:10:f4:fb:a7:6e:f1:8e:6e:06:62:9f:2d:31:49:
aa:b6:6e:e5:ce:fa:d2:24:de:0a:c6:ef:f3:98:77:1a:15:a5:
46:e4:e9:58:3e:dd:1a:cf:29:c9:e9:61:7f:84:03:96:cb:13:
e1:b1:24:21:cc:8b:15:ac:42:68:54:c3:09:fa:ed:b4:a7:13:
9e:69:52:07:e1:94:f9:24:2b:55:3f:2e:72:1f:91:c1:75:a5:
af:02:31:3c:5f:90:bc:da:f3:2b:c7:28:0e:cf:fc:4a:70:a8:
5c:a7:b8:4e:01:6a:ab:dd:0d:05:1d:46:91:69:a3:6a:13:04:
0e:a0:13:97:5c:52:ea:8a:2e:96:9b:a8:2c:5a:ed:10:af:06:
31:a5:e3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:22:38 2025 by rpki-client