Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/uZUo7KH3dZrffHFhKUPTRrrIqMk.roa
File: uZUo7KH3dZrffHFhKUPTRrrIqMk.roa (raw, json)
Hash identifier: dUsRDjhm1ad2B2Q4Z+DFYnnG92GA9jt94oiR8UlLXm8=
Subject key identifier: B9:95:28:EC:A1:F7:75:9A:DF:7C:71:61:29:43:D3:46:BA:C8:A8:C9
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 10C8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uZUo7KH3dZrffHFhKUPTRrrIqMk.roa
Signing time: Thu 04 Apr 2024 17:22:45 +0000
ROA not before: Thu 04 Apr 2024 17:22:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4296 (0x10c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 4 17:22:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B99528ECA1F7759ADF7C71612943D346BAC8A8C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:9a:28:0b:29:7b:39:64:24:ee:e3:18:aa:
4f:7e:67:d6:7c:39:d4:04:85:b6:2a:7c:7c:34:55:
08:9a:c0:58:84:f6:74:88:63:14:d9:5f:cc:2a:64:
1e:89:8e:4a:3a:4e:d4:0c:b2:bd:1c:b9:a2:26:da:
56:b6:79:b6:81:fa:d3:aa:96:2e:ea:70:e3:9f:b4:
fe:57:38:6d:b7:2e:59:04:a6:cf:7c:72:4a:2c:6b:
d7:9d:8c:c4:60:be:13:5a:e2:9a:58:91:ad:e1:99:
c0:a2:d8:72:b8:81:2e:04:8f:56:68:0f:86:31:fc:
5c:62:08:d7:80:ed:ce:0d:ba:ee:cf:79:b0:90:aa:
9a:d7:09:68:e4:b9:2b:9f:a7:cb:e8:ed:a0:90:f0:
b3:d2:58:4c:30:66:c6:bd:90:95:11:e6:9d:46:b3:
49:ea:5b:f6:32:c0:8f:6c:a8:05:50:00:96:0e:21:
f8:a8:0e:10:2b:d4:f3:84:aa:af:7d:60:1e:47:77:
29:93:41:11:6f:e1:cc:58:14:4b:f4:41:4a:a3:66:
9b:0c:e9:50:47:14:c0:a5:15:ad:93:05:a3:67:a9:
17:3d:c6:eb:03:b4:c1:23:4e:e8:09:5b:14:97:53:
45:21:e0:68:bc:3f:32:11:af:b1:06:49:92:dd:7d:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:95:28:EC:A1:F7:75:9A:DF:7C:71:61:29:43:D3:46:BA:C8:A8:C9
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uZUo7KH3dZrffHFhKUPTRrrIqMk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:14:31:ff:d6:3a:f0:c6:aa:79:79:74:d3:08:f1:3f:25:56:
e4:b8:7a:a8:3f:d7:e9:22:4d:82:81:bb:2e:8f:de:e8:d5:2e:
b9:0f:a3:f4:01:08:a7:a9:62:f0:f8:32:01:04:93:08:00:8b:
d7:d8:e3:8a:fc:42:82:89:89:85:a3:0f:82:b7:fa:2d:a5:7b:
5f:22:b9:c7:1d:71:61:cd:ba:43:77:51:10:ec:cf:03:b1:77:
9e:72:de:fa:23:13:be:e8:28:8f:8e:24:d0:4e:c9:d7:6e:3c:
cb:03:31:fd:39:96:96:e7:d2:66:ce:0a:68:89:03:dc:19:f6:
cd:dd:4d:c6:53:65:99:7e:d1:09:c1:5b:70:56:6c:9e:f9:21:
8d:85:ce:8f:68:ca:b8:89:a2:9a:e4:f6:18:54:91:27:e5:0f:
b9:62:cb:55:29:6a:9c:cd:64:8e:eb:a6:fa:65:03:9a:e9:d9:
9d:91:61:e6:48:33:d2:fc:bb:c1:ba:69:24:e0:b2:22:4f:80:
b7:35:eb:93:15:4a:4f:71:34:a1:15:40:f7:75:a3:8f:3f:be:
6b:45:89:0e:88:73:e6:ae:cb:30:a6:7e:97:98:bf:fb:2e:c8:
f8:2c:08:31:d0:f6:c7:5d:4b:a2:81:77:4b:8a:73:3d:47:76:
85:50:a3:26
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDQx
NzIyNDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI5OTUyOEVDQTFGNzc1
OUFERjdDNzE2MTI5NDNEMzQ2QkFDOEE4QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLjpooCyl7OWQk7uMYqk9+Z9Z8OdQEhbYqfHw0VQiawFiE9nSI
YxTZX8wqZB6Jjko6TtQMsr0cuaIm2la2ebaB+tOqli7qcOOftP5XOG23LlkEps98
ckosa9edjMRgvhNa4ppYka3hmcCi2HK4gS4Ej1ZoD4Yx/FxiCNeA7c4Nuu7PebCQ
qprXCWjkuSufp8vo7aCQ8LPSWEwwZsa9kJUR5p1Gs0nqW/YywI9sqAVQAJYOIfio
DhAr1POEqq99YB5HdymTQRFv4cxYFEv0QUqjZpsM6VBHFMClFa2TBaNnqRc9xusD
tMEjTugJWxSXU0Uh4Gi8PzIRr7EGSZLdfYlJAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUuZUo7KH3dZrffHFhKUPTRrrIqMkwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3VaVW83S0gzZFpyZmZI
RmhLVVBUUnJySXFNay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAmxQx/9Y68MaqeXl00wjxPyVW5Lh6qD/X
6SJNgoG7Lo/e6NUuuQ+j9AEIp6li8PgyAQSTCACL19jjivxCgomJhaMPgrf6LaV7
XyK5xx1xYc26Q3dREOzPA7F3nnLe+iMTvugoj44k0E7J1248ywMx/TmWlufSZs4K
aIkD3Bn2zd1NxlNlmX7RCcFbcFZsnvkhjYXOj2jKuImimuT2GFSRJ+UPuWLLVSlq
nM1kjuum+mUDmunZnZFh5kgz0vy7wbppJOCyIk+AtzXrkxVKT3E0oRVA93Wjjz++
a0WJDohz5q7LMKZ+l5i/+y7I+CwIMdD2x11LooF3S4pzPUd2hVCjJg==
-----END CERTIFICATE-----
Generated at Sun May 18 10:58:18 2025 by rpki-client