Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ghc-afhm-BS2wNHFhc2umbeViRU.roa
File: ghc-afhm-BS2wNHFhc2umbeViRU.roa (raw, json)
Hash identifier: CQGmp+qDlt/5S4JJ6p7WootIuHqcBAxYnccGiupvLWY=
Subject key identifier: 82:17:3E:69:F8:66:F8:14:B6:C0:D1:C5:85:CD:AE:99:B7:95:89:15
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B44
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ghc-afhm-BS2wNHFhc2umbeViRU.roa
Signing time: Thu 02 May 2024 16:24:07 +0000
ROA not before: Thu 02 May 2024 16:24:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6980 (0x1b44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 16:24:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=82173E69F866F814B6C0D1C585CDAE99B7958915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:2d:8d:61:68:da:74:54:56:cd:09:5e:10:
bc:84:a0:18:66:31:58:95:27:03:98:c4:0f:71:63:
60:f5:31:a6:48:83:de:cf:eb:b3:9a:4e:1e:5a:1e:
27:a4:51:60:3e:2a:88:9a:33:10:94:86:b2:f7:9d:
24:8e:04:e6:9a:56:cd:32:56:c3:51:4b:cd:16:56:
98:84:13:4b:51:39:7e:d9:69:ab:b2:08:99:85:7b:
ae:23:01:4b:7a:b3:a8:5b:4e:da:f8:45:8a:64:de:
85:8c:5b:d3:9a:40:77:24:be:b4:b2:b8:d0:c0:96:
8a:48:4e:7d:69:46:25:7f:7d:d4:d8:5a:f4:6c:57:
48:a0:f4:50:8f:28:a9:0a:41:66:d0:35:2a:dd:eb:
ce:cc:f3:80:8b:14:38:f5:7c:d7:87:e6:fb:c7:8d:
dc:81:14:8d:aa:7d:98:29:c6:74:7d:ab:c0:05:57:
7a:e0:ed:64:6f:57:a7:ea:66:75:fe:7f:fb:b7:4a:
f3:7c:80:f5:e6:8e:47:5e:72:4b:a7:3e:c2:34:1a:
67:fe:5f:06:e5:34:dc:1d:38:d7:53:10:c7:03:17:
77:65:e9:af:36:73:fb:98:94:5b:5a:96:ab:06:70:
05:15:b2:03:4c:dc:e6:50:d9:f0:f5:0f:f2:c0:83:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:17:3E:69:F8:66:F8:14:B6:C0:D1:C5:85:CD:AE:99:B7:95:89:15
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ghc-afhm-BS2wNHFhc2umbeViRU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:52:72:87:ce:d0:74:1c:24:d6:f4:b5:52:f4:da:95:1f:ac:
f9:87:4c:69:f8:43:e0:92:9e:d2:5b:6f:13:5e:1b:06:ed:c8:
63:8e:a2:3e:57:1b:9e:d4:76:03:51:e4:ce:74:68:4a:72:ca:
8a:7e:cf:5b:b1:91:49:ab:41:df:88:15:81:07:f3:c7:26:3a:
1d:41:f9:09:6b:48:78:8f:95:f7:e9:f1:d1:5b:fa:eb:fc:bd:
8c:63:32:c7:34:83:62:31:f7:e3:bc:de:02:7c:9b:8f:87:ac:
13:76:00:6d:f3:04:a4:b6:d7:96:3c:41:66:b1:4f:f7:11:e7:
81:18:73:8b:3f:76:71:96:b0:9a:c7:25:59:b0:6d:1e:27:d5:
0c:57:73:e4:15:eb:36:bf:b2:d8:72:6c:34:cd:b8:28:1d:80:
f1:cf:0f:7b:f8:54:8b:99:14:09:03:09:1f:57:c9:75:88:b5:
bf:0d:ab:b3:99:b1:6e:64:1d:9b:72:48:bc:8b:c9:07:9f:26:
b3:58:1e:20:84:93:bb:97:92:ed:48:eb:eb:fc:eb:d9:c8:f3:
df:74:17:cb:1a:cb:47:ba:ea:22:07:a9:18:e6:96:06:a7:dd:
91:60:7a:b5:fb:a6:93:d0:45:a7:9b:22:7b:85:63:03:99:0f:
4d:76:96:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:20:25 2025 by rpki-client