Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vC_v3vR0aD5SFbR73zkXLRNQ0F4.roa
File: vC_v3vR0aD5SFbR73zkXLRNQ0F4.roa (raw, json)
Hash identifier: dXe0I+1n46JZ+Qa52Di9b5j4IH8+isXB63LZ+9nCEOk=
Subject key identifier: BC:2F:EF:DE:F4:74:68:3E:52:15:B4:7B:DF:39:17:2D:13:50:D0:5E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D9A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vC_v3vR0aD5SFbR73zkXLRNQ0F4.roa
Signing time: Wed 08 May 2024 21:54:22 +0000
ROA not before: Wed 08 May 2024 21:54:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7578 (0x1d9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 8 21:54:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BC2FEFDEF474683E5215B47BDF39172D1350D05E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:d5:f1:9c:11:1f:01:80:9d:7c:e3:2f:1d:
c5:69:96:b4:58:db:c1:ea:71:a7:8c:fa:a7:0d:c5:
4f:de:5a:34:43:dc:c9:ce:5e:e9:8f:56:f5:8c:09:
77:82:36:66:1e:86:fe:ab:3c:0f:d0:65:36:bf:07:
d8:25:2b:08:fe:1c:f5:64:d4:2f:f3:65:f8:16:d5:
7b:3b:64:5a:2a:f5:00:3d:b9:e3:d0:69:81:4f:15:
79:c0:a3:01:3a:f6:55:83:bd:c7:2d:34:b6:b5:b9:
4c:4c:87:39:80:bf:f0:13:74:28:7d:c6:15:0d:3a:
36:3a:25:db:f0:df:8e:96:75:3b:5b:32:60:20:c1:
fd:d5:7e:7a:96:62:00:f4:04:5d:af:7a:ff:4b:85:
08:a6:c2:f9:f5:25:d3:3e:d9:5e:15:8b:2d:49:a2:
d5:07:35:8a:e2:17:00:8b:af:20:8e:ff:d4:d3:f8:
1f:e9:d3:73:34:1d:c4:24:5c:6e:a9:44:4c:c5:0a:
77:dd:16:84:e2:57:c7:0e:5b:4a:cd:c9:fb:0d:70:
9a:76:b6:40:85:ce:14:58:e3:70:24:88:1b:fb:55:
34:8f:ab:75:7b:9a:82:c0:8c:30:33:bf:dd:33:91:
97:0c:0b:0b:96:b2:4d:fa:e6:4b:b8:e7:34:b1:ae:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2F:EF:DE:F4:74:68:3E:52:15:B4:7B:DF:39:17:2D:13:50:D0:5E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vC_v3vR0aD5SFbR73zkXLRNQ0F4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:80:ab:e1:19:9f:08:9c:2e:c3:c3:8f:e7:7b:f4:f2:80:63:
27:f7:c5:09:7e:3f:f5:d1:f2:5d:c8:d3:f3:97:d2:63:21:6e:
48:58:37:ec:e2:1b:cd:15:61:50:e9:8f:9c:fd:9c:6d:1f:34:
b4:9c:db:65:19:9e:9b:94:1c:81:f5:17:5b:a2:b8:43:94:0d:
38:3b:10:d0:d3:0c:a0:a1:24:69:de:1a:22:e6:47:be:e9:4c:
d7:69:80:25:9e:42:39:b4:24:7e:15:b1:ad:f2:27:e8:ea:d4:
2c:59:b5:db:b4:ab:74:4d:d1:ce:74:99:df:93:b0:9d:74:bc:
09:97:5a:9f:ce:7b:38:1e:ac:f6:77:fb:42:ef:7b:3a:f9:63:
d2:e6:55:0c:ba:a2:2d:bd:a2:f8:03:ba:aa:77:2c:a5:0e:be:
43:92:a8:29:e5:01:a4:d9:8a:ac:15:a8:19:0d:95:53:04:cc:
57:fb:66:16:d1:3e:5d:b8:f0:eb:59:cb:56:a0:d1:5e:bc:90:
b1:40:c5:7b:c1:29:3a:b3:3a:74:25:7e:6c:ab:63:45:b2:05:
9c:a2:80:be:70:11:ad:19:ae:36:09:07:19:f8:a1:5e:0d:c4:
75:27:65:72:92:c8:c3:10:82:e3:b4:81:1d:6c:12:cf:cc:07:
47:96:2e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 11:05:48 2025 by rpki-client