Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/laz6NJbqmm6B2zEz6ZvFdja5oXo.roa
File: laz6NJbqmm6B2zEz6ZvFdja5oXo.roa (raw, json)
Hash identifier: h1PBfd1Hn6xKxAIf+HX/8y9rm1V/ABhOm/EeISCie40=
Subject key identifier: 95:AC:FA:34:96:EA:9A:6E:81:DB:31:33:E9:9B:C5:76:36:B9:A1:7A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15E0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/laz6NJbqmm6B2zEz6ZvFdja5oXo.roa
Signing time: Thu 18 Apr 2024 07:23:25 +0000
ROA not before: Thu 18 Apr 2024 07:23:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5600 (0x15e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 07:23:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=95ACFA3496EA9A6E81DB3133E99BC57636B9A17A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:13:d3:80:dc:9f:89:fe:a5:aa:be:70:cb:
e0:a8:c7:4f:72:6d:e3:6c:1d:28:e8:54:88:89:34:
dc:6a:b7:ba:a8:42:04:dc:e1:e7:ea:c9:9b:0e:a4:
88:65:82:4e:52:eb:ed:f0:7f:f7:4e:e0:f9:9a:81:
ba:11:d2:42:ad:e3:53:f2:0d:ec:26:9e:1f:1a:fb:
68:d6:24:66:e5:e4:a6:b1:6c:54:01:7b:a5:aa:40:
fe:b3:47:c6:e4:0a:a6:07:5c:63:ec:72:26:7c:1a:
3e:2e:44:16:d0:f1:86:ec:fd:17:60:e8:0d:d4:5c:
f2:ff:21:4c:2a:8e:21:4e:41:c1:80:5d:e0:cf:49:
63:dc:02:c8:3b:21:39:e1:14:90:29:63:7e:3f:b2:
f9:5b:37:aa:96:7b:09:8a:0a:9f:9e:96:91:2b:68:
cf:13:04:25:c7:d5:e4:42:bd:9f:b7:42:1a:fc:50:
92:7d:92:64:c4:5b:a1:fc:e8:2e:19:51:6f:19:0c:
c9:1d:fd:9a:f2:30:38:b4:57:09:68:4a:b9:5b:b6:
65:c8:ed:99:22:5b:e1:df:c8:a6:08:de:f6:8f:73:
57:11:ad:fa:be:b4:df:01:4f:0c:8e:9e:70:65:5c:
34:4d:70:fa:0e:13:08:b3:b6:f2:c6:df:1a:14:9e:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:FA:34:96:EA:9A:6E:81:DB:31:33:E9:9B:C5:76:36:B9:A1:7A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/laz6NJbqmm6B2zEz6ZvFdja5oXo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:14:88:01:45:da:a8:8c:63:6e:fd:c3:e2:34:33:6b:4c:23:
96:14:10:fd:9e:55:68:6b:c1:3e:1b:0b:9c:dd:48:16:7f:11:
ad:30:a9:58:b7:a1:90:31:e8:11:1f:92:37:d6:a8:f9:b2:4b:
b4:c9:b1:96:28:86:ae:a1:f1:b6:78:fd:87:39:15:72:ab:76:
f3:f1:22:ba:2a:a9:d5:2f:80:b9:9a:62:a4:8e:78:e2:18:a5:
46:1c:5e:af:a6:e8:01:3c:85:c6:9b:3f:17:a2:43:cd:a5:c1:
fe:db:5c:95:2c:d3:51:9a:16:f1:69:a4:44:6b:4a:f3:ed:d3:
bf:d3:9e:ad:5d:71:47:0a:51:db:45:4f:f9:1c:63:db:8c:97:
e1:1e:e8:68:94:a9:29:51:25:a4:44:90:34:3d:9d:f7:da:3f:
b7:15:76:cb:51:68:fd:ac:a0:39:c4:2a:5c:99:41:62:d2:c5:
ba:53:44:e3:70:0e:db:4f:6a:42:6c:9d:c8:0d:2a:d1:17:6c:
c3:d8:a8:28:a3:b1:1c:12:da:dc:9c:23:54:46:a1:b7:ed:2d:
b5:7c:0e:28:fb:3b:77:47:84:25:dc:bf:ee:b7:4f:a1:f4:34:
37:50:0f:de:e7:75:00:03:f8:7b:71:ca:a6:3a:a3:46:4a:76:
17:fc:91:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 08:03:28 2025 by rpki-client