Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/jlaVg7XF_Qj-OPK4g8ZoUK8HpnI.roa
File: jlaVg7XF_Qj-OPK4g8ZoUK8HpnI.roa (raw, json)
Hash identifier: jKkDtICbZ9JRxjo0aKkm196IjGhs0IV5MPfMe9k9Gow=
Subject key identifier: 8E:56:95:83:B5:C5:FD:08:FE:38:F2:B8:83:C6:68:50:AF:07:A6:72
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 139E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jlaVg7XF_Qj-OPK4g8ZoUK8HpnI.roa
Signing time: Fri 12 Apr 2024 06:53:12 +0000
ROA not before: Fri 12 Apr 2024 06:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5022 (0x139e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 06:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8E569583B5C5FD08FE38F2B883C66850AF07A672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:dc:33:37:42:76:06:1f:9b:c3:9f:b6:02:
55:85:41:f0:87:8c:c3:b4:de:3c:67:1b:fc:df:69:
6a:eb:af:e4:e1:1a:b7:b0:f4:97:46:7b:f2:e6:c9:
56:e8:26:a3:95:4d:22:36:c8:05:37:b8:f6:d9:07:
18:62:f4:0d:03:02:b5:5e:7f:9f:6d:9d:23:2b:23:
9c:a6:2c:31:7f:60:eb:01:44:1b:b2:2e:e5:b5:1b:
86:cf:c4:af:ee:17:8a:b7:9a:fe:e0:5b:2b:db:f3:
0b:5d:6b:ce:d7:a7:38:be:24:ce:b3:83:86:98:59:
4a:a3:b3:bf:08:35:d1:4b:77:a5:b9:6b:c6:da:59:
53:42:20:10:9e:54:84:af:77:f9:d9:94:f9:1b:3e:
2a:09:bc:49:46:da:5b:e5:17:4e:83:2b:e0:f8:30:
70:ea:47:a4:f7:f3:8a:51:fd:b2:2c:e2:c3:33:2e:
c1:bb:90:c4:23:42:51:fc:1a:13:63:d1:38:ec:97:
80:1b:29:51:92:85:7e:6f:d8:55:df:b1:fa:f0:21:
74:80:d3:bd:60:b9:45:e4:c9:b1:a4:a4:b0:d7:cc:
71:93:08:0d:c3:ea:0d:a2:4f:8c:6e:76:77:ea:ea:
18:2f:9c:a3:77:f6:a0:4b:23:78:c3:b5:23:1e:73:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:56:95:83:B5:C5:FD:08:FE:38:F2:B8:83:C6:68:50:AF:07:A6:72
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jlaVg7XF_Qj-OPK4g8ZoUK8HpnI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:e7:60:1b:6c:49:d3:b8:13:84:9c:60:6c:24:c1:ba:86:76:
8e:06:c0:c2:6e:29:dc:c4:6e:fe:cd:48:05:8e:27:31:6e:06:
55:e1:a9:0e:72:c8:b2:97:a2:4f:f5:92:32:25:dd:01:39:fc:
c5:e9:ce:1a:65:8f:13:fb:3b:3e:3d:a4:c5:79:cb:36:c1:d7:
f2:ec:6a:ac:e7:89:f1:07:74:21:bb:b4:87:79:49:51:fd:d8:
75:a4:90:c3:8a:0a:73:fc:17:90:7e:de:5a:02:49:56:e6:86:
a7:d8:68:22:be:93:0b:36:4e:63:1e:28:46:1a:19:07:3b:e0:
66:ed:44:88:5c:31:e8:dd:4a:ab:80:c0:9f:cd:e4:ef:15:ca:
11:9a:e3:89:74:6a:2d:35:20:58:16:3c:9b:ff:7d:79:65:1c:
8e:46:74:5a:53:4d:8b:64:9f:42:21:dd:2a:b3:94:e8:98:73:
f7:41:d5:1d:2c:5e:ac:79:57:9c:5e:06:ec:fb:ea:b3:43:54:
28:e5:af:13:e0:2c:b7:be:53:10:a1:6a:c9:1e:c0:37:3e:4c:
ce:2c:a9:2b:6f:19:4a:99:95:4d:9d:84:a5:a8:2c:21:7e:ea:
c9:62:00:be:85:7c:8b:bb:f5:f6:ee:34:76:09:91:17:25:3b:
d8:f8:e7:4a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICE54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTIw
NjUzMTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDhFNTY5NTgzQjVDNUZE
MDhGRTM4RjJCODgzQzY2ODUwQUYwN0E2NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKJdwzN0J2Bh+bw5+2AlWFQfCHjMO03jxnG/zfaWrrr+ThGrew
9JdGe/LmyVboJqOVTSI2yAU3uPbZBxhi9A0DArVef59tnSMrI5ymLDF/YOsBRBuy
LuW1G4bPxK/uF4q3mv7gWyvb8wtda87Xpzi+JM6zg4aYWUqjs78INdFLd6W5a8ba
WVNCIBCeVISvd/nZlPkbPioJvElG2lvlF06DK+D4MHDqR6T384pR/bIs4sMzLsG7
kMQjQlH8GhNj0Tjsl4AbKVGShX5v2FXfsfrwIXSA071guUXkybGkpLDXzHGTCA3D
6g2iT4xudnfq6hgvnKN39qBLI3jDtSMec6YXAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUjlaVg7XF/Qj+OPK4g8ZoUK8HpnIwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2psYVZnN1hGX1FqLU9Q
SzRnOFpvVUs4SHBuSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAxOdgG2xJ07gThJxgbCTBuoZ2jgbAwm4p
3MRu/s1IBY4nMW4GVeGpDnLIspeiT/WSMiXdATn8xenOGmWPE/s7Pj2kxXnLNsHX
8uxqrOeJ8Qd0Ibu0h3lJUf3YdaSQw4oKc/wXkH7eWgJJVuaGp9hoIr6TCzZOYx4o
RhoZBzvgZu1EiFwx6N1Kq4DAn83k7xXKEZrjiXRqLTUgWBY8m/99eWUcjkZ0WlNN
i2SfQiHdKrOU6Jhz90HVHSxerHlXnF4G7Pvqs0NUKOWvE+Ast75TEKFqyR7ANz5M
ziypK28ZSpmVTZ2EpagsIX7qyWIAvoV8i7v19u40dgmRFyU72PjnSg==
-----END CERTIFICATE-----
Generated at Sun May 18 15:49:02 2025 by rpki-client