Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/keI0u-g0iwOYSKqtWMRqd9NjXpA.roa
File: keI0u-g0iwOYSKqtWMRqd9NjXpA.roa (raw, json)
Hash identifier: qLrZP0ydrfaCmBxyIeVegfJ3R1kJkznks+51o5dJFF8=
Subject key identifier: 91:E2:34:BB:E8:34:8B:03:98:48:AA:AD:58:C4:6A:77:D3:63:5E:90
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D04
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/keI0u-g0iwOYSKqtWMRqd9NjXpA.roa
Signing time: Tue 07 May 2024 08:24:56 +0000
ROA not before: Tue 07 May 2024 08:24:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7428 (0x1d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 08:24:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=91E234BBE8348B039848AAAD58C46A77D3635E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:17:f4:4b:44:aa:72:b7:c4:40:f2:0b:d6:
4b:01:7b:53:b8:8d:b1:84:7b:5e:d4:91:cf:15:8d:
1b:44:e2:10:d0:11:5a:25:60:45:60:00:cb:96:7a:
ca:c4:58:6c:96:37:39:e4:04:c7:c3:ee:2d:73:e1:
71:5d:94:58:99:6c:ce:8e:1b:20:57:fb:7a:64:7b:
23:c6:cd:ee:ea:9c:bf:ec:ac:fb:11:49:7a:8a:9f:
34:3f:61:6d:5d:82:91:63:b8:cb:36:8f:27:4f:d2:
63:b0:f5:c5:38:3b:d8:ef:31:ab:98:80:ad:c2:14:
43:ce:6e:e1:74:4e:72:de:9b:5d:88:9f:2a:e4:56:
e9:c4:cf:54:78:b2:d5:96:0c:4f:e2:4b:26:a2:62:
fd:39:bd:10:d3:a3:e8:ea:ca:f0:38:7d:aa:8f:5e:
7e:8c:7a:d5:01:e0:25:38:80:b0:be:37:a0:9c:40:
70:fd:ee:62:c5:31:3a:55:7a:31:41:91:41:e0:2f:
94:77:d0:9a:d2:db:ef:91:d4:6d:89:fc:c9:e8:94:
27:49:6f:9b:64:e2:2e:56:01:74:40:b2:2b:5e:a1:
9b:79:b8:47:bf:03:49:94:4b:6d:9f:26:02:ff:f6:
ad:7c:81:bf:ae:27:c7:b6:de:c9:e3:17:c0:18:48:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E2:34:BB:E8:34:8B:03:98:48:AA:AD:58:C4:6A:77:D3:63:5E:90
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/keI0u-g0iwOYSKqtWMRqd9NjXpA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:01:a0:e3:47:f4:93:9c:19:0e:3c:8c:d5:90:bb:03:ea:ac:
1c:24:9f:5c:08:0f:a8:fe:2d:87:06:96:c4:68:70:61:74:d2:
de:d3:b7:fc:94:6c:40:3f:41:92:e4:72:a9:85:4f:ba:52:a0:
6f:70:76:57:8c:f7:d1:13:20:af:f9:c5:c3:db:05:1b:a2:29:
1d:8f:d9:d3:e5:09:71:2c:7d:b8:3d:3e:21:1b:25:f6:5b:c5:
a4:f3:3c:8e:52:6d:84:6d:f4:3e:7f:5e:3a:a2:b4:1a:42:6e:
0e:7f:6c:6a:94:3c:50:58:0e:3e:ef:75:88:b6:4a:04:68:80:
28:de:f3:34:e6:2e:d9:2a:42:7b:ab:c4:d8:a8:41:00:d8:75:
ef:b4:be:22:4b:f4:1e:ad:9c:60:5b:36:73:a0:7d:84:cb:83:
25:34:ce:65:14:b2:b6:74:61:69:da:e9:6a:28:e2:a2:d3:46:
91:1e:4d:5e:13:65:70:0b:58:82:b0:53:e3:36:70:e1:8f:6f:
1c:ac:5e:6e:d8:56:02:a1:2b:72:f3:b5:62:2b:fd:55:a6:4d:
2e:32:bb:e4:80:9b:dd:85:a0:c6:24:ee:59:67:72:c4:2d:03:
2d:c7:da:79:3a:24:f9:39:f8:46:bc:60:43:49:c3:7f:07:43:
ea:73:56:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:48:17 2025 by rpki-client