Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/f0Mp47Fiwra5g19MO-5On70Bmp8.roa
File: f0Mp47Fiwra5g19MO-5On70Bmp8.roa (raw, json)
Hash identifier: 7z5l4Sbm3eNbmqKgeqN0CEkZyOcwvhBfo6D/qOFOMIA=
Subject key identifier: 7F:43:29:E3:B1:62:C2:B6:B9:83:5F:4C:3B:EE:4E:9F:BD:01:9A:9F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15E4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/f0Mp47Fiwra5g19MO-5On70Bmp8.roa
Signing time: Thu 18 Apr 2024 08:23:25 +0000
ROA not before: Thu 18 Apr 2024 08:23:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5604 (0x15e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 08:23:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7F4329E3B162C2B6B9835F4C3BEE4E9FBD019A9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:52:98:f3:ff:5c:27:90:36:55:e9:bf:54:
ab:ff:60:e0:78:88:89:cb:b4:67:c7:a8:41:9b:0c:
8e:ab:5e:15:d4:11:1e:6f:bb:83:8a:7d:a9:ac:18:
cf:a4:2c:e4:f1:cc:2f:93:73:e3:88:13:9f:f0:7e:
9b:e6:94:32:6a:a4:5c:25:c4:12:08:6e:aa:10:c3:
65:5d:f4:1f:50:b3:03:17:c6:93:c6:c4:fe:94:7e:
0c:3e:a1:03:11:d7:a4:4a:03:93:b0:06:5c:18:78:
b6:73:b6:0e:51:19:d5:1c:ec:94:d8:f7:ad:ab:61:
33:f5:52:f5:22:80:e9:11:92:57:05:6f:20:56:c1:
48:31:f6:1d:f8:b2:69:3b:80:77:67:91:c1:2e:f8:
04:91:4a:48:76:c8:81:5a:f9:7c:14:31:35:48:0f:
2a:d4:54:83:48:fd:8c:2c:07:ec:52:39:11:24:57:
c1:74:37:1e:da:d4:1d:47:d8:c0:17:61:18:6f:dc:
bf:dd:93:03:6d:e1:cc:d5:70:47:c4:84:58:98:0b:
21:eb:57:f0:cc:28:9c:3c:85:3f:af:50:de:cc:30:
89:0c:df:0a:54:9f:c5:b8:98:ed:63:66:ce:1a:be:
12:67:4b:a3:f9:45:e7:ff:d7:fa:bc:23:e8:b5:e2:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:43:29:E3:B1:62:C2:B6:B9:83:5F:4C:3B:EE:4E:9F:BD:01:9A:9F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/f0Mp47Fiwra5g19MO-5On70Bmp8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:6c:20:55:cd:36:ef:7b:9e:0a:ad:58:d5:e4:bd:b8:a4:38:
2d:e9:d0:77:90:aa:ad:1d:d9:ae:d6:33:12:3a:6c:96:3c:b4:
aa:8c:5d:8e:22:6e:11:0f:6f:bb:71:59:f9:10:8c:fe:bf:1c:
69:4c:f8:d3:9e:cd:e6:e5:65:5f:6a:4a:b2:03:9e:50:43:da:
e9:ec:27:5c:48:ce:25:93:45:a7:2b:b1:69:c5:c6:e9:41:0c:
b5:eb:0a:81:4f:f2:81:a7:b6:38:bb:44:48:81:dd:c1:2c:23:
48:93:7f:f8:26:00:b2:f9:13:30:f8:66:69:2b:da:f0:0f:72:
56:d1:ee:01:c4:48:ed:06:ac:83:11:2c:8f:f6:b6:c9:e1:cc:
03:75:46:30:c7:3b:93:e2:45:05:d8:ac:c6:b7:68:f5:f5:6a:
f9:03:bb:e3:84:bd:11:cf:ef:a3:9b:b2:e8:b6:7b:cf:84:bb:
23:96:63:8e:fd:c0:2f:ef:4d:52:6c:3d:58:76:78:79:50:27:
ba:d7:19:72:18:3c:86:9d:66:e0:f5:83:c1:59:f1:ee:f8:48:
12:46:c4:68:0d:b6:7c:09:5e:ba:c6:aa:52:cd:b1:cf:ec:ed:
90:17:b4:78:d5:57:4f:a2:da:df:1d:9c:aa:1a:e4:08:4c:64:
e4:bc:c9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:32:15 2025 by rpki-client