Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/uCYDh8v_T4WPWYhCbkXBjFhPaIs.roa
File: uCYDh8v_T4WPWYhCbkXBjFhPaIs.roa (raw, json)
Hash identifier: q5rhJ2vt8kzzszs7umki+dKIOOAzZz15xQpwpJ5YIdM=
Subject key identifier: B8:26:03:87:CB:FF:4F:85:8F:59:88:42:6E:45:C1:8C:58:4F:68:8B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1678
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uCYDh8v_T4WPWYhCbkXBjFhPaIs.roa
Signing time: Fri 19 Apr 2024 21:23:30 +0000
ROA not before: Fri 19 Apr 2024 21:23:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5752 (0x1678)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 21:23:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B8260387CBFF4F858F5988426E45C18C584F688B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f4:06:41:b0:fb:55:c2:c0:56:aa:40:59:06:
70:5b:eb:a4:02:90:5b:68:66:a5:7c:f0:95:1d:3a:
76:25:33:eb:f2:71:1b:f9:fa:ce:da:af:7f:31:ac:
fc:37:11:02:59:34:a2:67:f5:c7:81:8d:4e:fe:41:
20:16:92:b7:a8:10:96:65:27:d5:04:ba:4b:01:b8:
d1:63:e2:e9:93:ca:3f:e8:02:ab:6a:92:c2:aa:bd:
f3:73:c1:98:7c:09:11:3b:68:bc:f3:c4:9a:25:ca:
d7:01:a1:da:0a:29:c6:2b:de:04:70:f6:dd:6d:1a:
5f:60:a2:c7:a4:0e:ec:9c:1d:c4:de:6d:9c:a7:d8:
4a:fa:b7:87:ca:90:88:1c:75:0d:b6:93:44:c7:80:
70:6d:9b:f2:cd:03:7a:2b:66:bb:21:8e:10:e8:6c:
96:34:53:ea:94:e1:6d:81:12:a9:1c:d5:79:a2:ee:
67:da:1e:8f:98:37:6e:dc:85:8f:50:da:d3:79:a3:
a5:17:7b:74:7e:7c:6e:a9:fe:84:2d:a1:7b:5c:03:
1e:a8:db:06:75:b8:51:32:b8:39:a4:3e:c6:09:15:
33:be:74:63:8d:39:4e:98:f7:69:4c:3a:87:b4:4e:
6b:f0:a2:1c:52:c4:13:ee:d3:bf:49:6b:88:c4:25:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:26:03:87:CB:FF:4F:85:8F:59:88:42:6E:45:C1:8C:58:4F:68:8B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uCYDh8v_T4WPWYhCbkXBjFhPaIs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:fa:35:cd:03:67:ba:7c:21:78:99:96:de:dd:c8:ba:3f:64:
81:12:82:52:1d:23:81:47:5f:5b:9d:41:5f:e7:e4:75:e1:f0:
e2:ba:3f:cb:79:59:bd:ba:54:24:b0:6b:32:e5:62:71:5b:1d:
a7:a7:2b:cb:a2:fc:b2:05:cb:c9:dc:a9:ee:05:95:9e:45:ea:
a4:0d:6e:19:24:a3:42:d3:38:2d:63:74:74:c5:9b:15:a4:ee:
2e:8d:5f:00:a0:5f:95:de:dd:c6:fe:cd:6d:17:52:6f:b4:01:
b2:74:0a:80:bb:77:9f:1d:08:99:5c:b1:55:6f:82:1c:38:c8:
92:b4:45:aa:1c:c7:56:a6:6b:c6:fc:c6:14:6e:7a:a4:dc:43:
08:cf:57:88:b9:7c:36:38:59:8f:fe:5c:e6:63:6b:c4:71:37:
6f:4b:4c:b8:4f:fa:db:77:61:29:b3:cd:4e:9d:12:0c:7f:f9:
e8:76:aa:9e:6c:c7:44:af:bb:9e:9e:80:e5:e6:f5:fc:b6:d2:
62:18:eb:be:44:45:8a:88:b2:3b:8e:51:78:1a:37:b0:5a:26:
22:2e:63:72:9e:4b:8a:d6:78:6b:f5:f3:2c:f7:79:17:e3:00:
75:3c:3d:aa:f2:f9:ac:ec:0e:e9:cc:39:97:2c:ba:d9:b2:d7:
6f:df:0f:b1
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFngwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTky
MTIzMzBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI4MjYwMzg3Q0JGRjRG
ODU4RjU5ODg0MjZFNDVDMThDNTg0RjY4OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDb9AZBsPtVwsBWqkBZBnBb66QCkFtoZqV88JUdOnYlM+vycRv5
+s7ar38xrPw3EQJZNKJn9ceBjU7+QSAWkreoEJZlJ9UEuksBuNFj4umTyj/oAqtq
ksKqvfNzwZh8CRE7aLzzxJolytcBodoKKcYr3gRw9t1tGl9gosekDuycHcTebZyn
2Er6t4fKkIgcdQ22k0THgHBtm/LNA3orZrshjhDobJY0U+qU4W2BEqkc1Xmi7mfa
Ho+YN27chY9Q2tN5o6UXe3R+fG6p/oQtoXtcAx6o2wZ1uFEyuDmkPsYJFTO+dGON
OU6Y92lMOoe0TmvwohxSxBPu079Ja4jEJZp1AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUuCYDh8v/T4WPWYhCbkXBjFhPaIswHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3VDWURoOHZfVDRXUFdZ
aENia1hCakZoUGFJcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAFfo1zQNnunwheJmW3t3Iuj9kgRKCUh0j
gUdfW51BX+fkdeHw4ro/y3lZvbpUJLBrMuVicVsdp6cry6L8sgXLydyp7gWVnkXq
pA1uGSSjQtM4LWN0dMWbFaTuLo1fAKBfld7dxv7NbRdSb7QBsnQKgLt3nx0ImVyx
VW+CHDjIkrRFqhzHVqZrxvzGFG56pNxDCM9XiLl8NjhZj/5c5mNrxHE3b0tMuE/6
23dhKbPNTp0SDH/56HaqnmzHRK+7np6A5eb1/LbSYhjrvkRFioiyO45ReBo3sFom
Ii5jcp5LitZ4a/XzLPd5F+MAdTw9qvL5rOwO6cw5lyy62bLXb98PsQ==
-----END CERTIFICATE-----
Generated at Sun May 18 11:07:54 2025 by rpki-client