Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/mVhegn1PGEJWY9SAFb2Jplp4Pv0.roa
File: mVhegn1PGEJWY9SAFb2Jplp4Pv0.roa (raw, json)
Hash identifier: YFmfvyeuRmcqhxwH3qMZSOZnjgpku6wIqaikG3uxNDs=
Subject key identifier: 99:58:5E:82:7D:4F:18:42:56:63:D4:80:15:BD:89:A6:5A:78:3E:FD
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1660
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/mVhegn1PGEJWY9SAFb2Jplp4Pv0.roa
Signing time: Fri 19 Apr 2024 15:23:27 +0000
ROA not before: Fri 19 Apr 2024 15:23:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5728 (0x1660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 15:23:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=99585E827D4F18425663D48015BD89A65A783EFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:28:51:fd:cb:33:30:c0:cf:8c:36:db:48:
5a:ad:5c:8c:49:c5:73:da:4d:11:c8:da:13:94:38:
d0:3d:61:72:ab:99:60:b2:d7:ad:e9:ab:3e:94:66:
92:e4:89:79:0e:28:db:de:6a:9c:15:96:78:19:8a:
61:94:14:77:10:06:31:71:b8:88:42:dc:e2:01:f1:
60:9b:08:b2:a2:6a:41:64:a7:dc:fd:73:55:8e:81:
56:13:24:9b:c4:f9:f2:87:16:25:64:ff:b3:31:6b:
50:62:e7:b5:91:a3:f4:2d:82:22:b2:cf:7a:a2:1e:
7c:43:5d:e6:e6:48:c3:02:1c:40:fd:8a:11:ac:f2:
3b:12:52:6e:0c:92:0f:0e:ec:7c:7f:e6:4f:23:48:
3a:9f:e6:bd:07:2d:e4:c9:bc:80:6f:97:d7:83:b3:
a2:eb:ef:df:dd:e2:2c:71:e1:3e:99:5a:7d:a8:61:
3e:42:ca:e1:e9:3c:7b:a8:ab:5a:a1:b9:9c:ca:46:
03:54:ef:a3:e4:c2:60:90:38:ea:90:c7:6e:17:ab:
38:12:47:f7:43:09:22:b0:0d:28:5a:76:92:e4:26:
56:97:71:4c:88:b9:ac:ca:a2:0d:ce:ca:8a:aa:57:
d0:be:db:4b:7e:b7:72:21:be:e5:c1:5f:13:7d:c2:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:58:5E:82:7D:4F:18:42:56:63:D4:80:15:BD:89:A6:5A:78:3E:FD
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/mVhegn1PGEJWY9SAFb2Jplp4Pv0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:21:f1:63:8f:c9:3e:26:a9:0f:d0:19:da:d6:b8:65:9d:6b:
0b:ae:1b:fc:d6:3e:a4:2f:66:55:a2:da:47:b1:1a:74:6a:ea:
78:8f:d1:f9:3c:94:1a:3a:2a:2b:ad:95:b9:48:a9:7e:7f:f1:
a7:e2:25:46:a9:d8:c8:da:38:c1:33:c9:95:ee:fd:89:ab:8a:
f4:bc:ea:2d:f2:91:b5:dc:1d:77:de:48:60:de:82:ce:de:3c:
d5:86:f3:db:18:bf:6b:89:a9:70:9f:ae:a8:e0:d4:16:ee:ba:
fe:64:bc:bd:d2:61:35:f9:ce:a7:54:83:77:ac:7b:19:35:67:
55:6a:26:9b:c5:72:8e:81:29:67:87:64:2c:88:6e:aa:59:09:
0d:16:97:0b:45:5d:1d:ce:44:3e:e1:8d:b7:84:43:50:92:35:
65:0a:26:a4:11:ab:27:e8:b2:79:5c:18:41:4d:c5:14:48:61:
2b:1b:ce:d1:73:3b:1c:28:f4:c3:4e:e2:e2:38:ee:92:d3:eb:
87:84:39:ee:1c:9d:28:4c:fc:27:7f:36:47:61:cf:2c:11:a6:
94:d6:61:a4:1b:b9:e4:74:1b:8f:a4:b0:40:30:3c:e1:da:5c:
ef:a9:5b:5b:b5:42:f4:50:cb:d2:ca:eb:ed:d6:95:56:78:d5:
9a:58:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:58:27 2025 by rpki-client