Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/pupPvVEovzwnp6JDmysWCais4uE.roa
File: pupPvVEovzwnp6JDmysWCais4uE.roa (raw, json)
Hash identifier: BVJjWO0GQGL13d33Uww1BAAVWkcqu+8oNYy+wg8t0ts=
Subject key identifier: A6:EA:4F:BD:51:28:BF:3C:27:A7:A2:43:9B:2B:16:09:A8:AC:E2:E1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E20
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/pupPvVEovzwnp6JDmysWCais4uE.roa
Signing time: Thu 28 Mar 2024 15:22:53 +0000
ROA not before: Thu 28 Mar 2024 15:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3616 (0xe20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 28 15:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A6EA4FBD5128BF3C27A7A2439B2B1609A8ACE2E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:85:82:71:90:23:5a:bf:9a:b3:1b:68:dd:
be:99:3a:a0:d1:ce:45:12:21:21:0f:f4:8e:30:6f:
ab:34:a6:2f:d3:dd:bb:07:e9:99:7c:34:4a:2d:e2:
3a:1e:63:ee:ba:25:be:fb:b0:48:2c:eb:d0:e0:7e:
67:78:7d:fe:b5:55:5e:3f:d8:fe:4a:7d:2c:9e:43:
21:36:29:e0:0e:8a:df:64:b1:44:fc:c2:d6:78:e8:
50:49:f2:5f:d4:b8:72:7c:8d:e7:1f:2e:0a:5a:3e:
1c:c7:98:39:54:fc:44:92:2b:bf:4b:32:32:3a:4a:
7b:a9:ae:1b:60:05:7c:f3:ff:8a:a4:a6:33:90:7c:
a2:e6:83:cf:46:2d:5a:49:dd:6e:54:75:7d:cb:04:
bd:20:60:8d:f2:c5:35:96:23:0d:5c:32:f2:42:ac:
77:c0:25:c4:04:f7:09:28:16:41:23:4f:6f:7f:d4:
7d:f2:9b:f7:ff:2b:97:ee:7f:68:6b:7f:85:3b:d1:
2e:c1:38:9e:24:f7:27:60:5e:55:03:73:47:63:d6:
b2:fb:f1:4a:6a:3a:2c:b7:42:81:30:31:34:b5:6f:
7a:31:ef:a3:f2:18:fd:78:8b:a8:e2:de:7b:a1:3f:
77:dc:2c:87:6f:58:4f:39:eb:e4:84:da:0c:37:e0:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:4F:BD:51:28:BF:3C:27:A7:A2:43:9B:2B:16:09:A8:AC:E2:E1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/pupPvVEovzwnp6JDmysWCais4uE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:dc:c9:2e:7c:bc:6f:a2:c4:b8:cb:1a:6d:8c:aa:da:49:a4:
82:a9:f5:82:db:16:62:9f:88:51:f1:29:cc:17:25:43:bd:d8:
42:35:84:bc:f6:58:22:e7:8e:be:7f:23:0a:39:46:64:e7:c8:
53:24:17:aa:9a:7d:f4:44:14:ba:28:29:a3:28:38:65:27:41:
e4:bb:07:e6:6f:57:66:08:27:d0:73:41:a5:d3:d2:50:24:81:
03:e4:a3:a4:60:f3:02:96:c3:fc:26:e7:0b:3d:73:b0:a3:75:
f3:a7:23:dc:62:36:a7:59:af:a9:32:7d:d9:b5:09:e8:67:a5:
6b:e8:e3:a5:b5:1f:1e:9c:40:83:17:cb:16:ca:9e:bd:b9:8b:
ff:4f:cd:53:ce:36:09:9c:97:a4:42:c9:75:17:df:6c:ec:3a:
fa:6f:86:8b:e8:5c:5a:98:0b:8e:a0:06:76:14:8b:f0:6d:b1:
97:65:bc:a8:66:12:98:16:7c:30:7c:2f:c7:24:52:17:3b:15:
ba:97:d4:34:eb:fa:eb:c0:06:78:71:6c:7f:0a:c4:5e:ed:97:
eb:ca:b7:96:9a:d0:4f:e9:f6:73:23:a0:1d:a2:49:86:03:f1:
85:17:0c:27:ed:1f:d1:29:c5:47:2b:8b:ac:c4:32:e7:2e:4f:
49:14:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 18:51:06 2025 by rpki-client