Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vtKazlUTvIcURldwHsSwBM_-lcE.roa
File: vtKazlUTvIcURldwHsSwBM_-lcE.roa (raw, json)
Hash identifier: gd87ZQ4jrz1pH2KyLU9lS3av1HF4cHou1bBkBJZnMyw=
Subject key identifier: BE:D2:9A:CE:55:13:BC:87:14:46:57:70:1E:C4:B0:04:CF:FE:95:C1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E9E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vtKazlUTvIcURldwHsSwBM_-lcE.roa
Signing time: Fri 29 Mar 2024 22:52:30 +0000
ROA not before: Fri 29 Mar 2024 22:52:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3742 (0xe9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 29 22:52:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BED29ACE5513BC87144657701EC4B004CFFE95C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:d5:87:af:25:3a:bd:74:be:ca:bb:ac:f7:
70:cb:0b:d6:8d:5d:1b:96:b6:48:6d:20:46:19:c3:
b0:24:aa:0a:11:1d:8f:91:2f:3a:fa:4d:49:c7:d9:
cd:93:fd:72:dc:de:e1:ba:5b:b6:de:f0:c7:d2:c1:
08:d8:a4:2d:c3:25:b2:e8:e4:1c:f3:a3:9a:f0:ee:
ad:7b:69:34:22:11:4c:61:9e:f2:c5:28:6d:f8:87:
52:22:44:b7:5b:6c:ae:4c:0d:3c:e2:83:64:77:3f:
7b:88:7c:91:c8:5c:75:e6:87:34:65:e3:6c:c7:7c:
dd:91:f5:a0:6f:1d:55:80:73:7a:d3:5a:03:0c:cb:
07:73:44:47:26:47:b2:17:7b:1a:a5:3d:4b:50:6e:
89:cb:eb:72:72:10:57:fa:69:81:0f:63:b4:59:db:
53:ad:ec:7b:a9:f1:46:2a:b6:b0:ab:2c:6f:9e:5d:
79:0d:c9:cb:6c:fb:16:ab:3d:2a:cd:6b:64:ce:de:
dc:3e:b0:72:79:d4:21:8f:c4:14:fc:77:39:c7:e3:
d1:92:aa:5f:c5:74:6a:52:66:f7:8c:2c:b4:21:20:
ab:d0:2c:2a:51:50:f4:b2:a1:7a:90:78:74:25:80:
8a:40:29:10:5b:32:4a:42:81:81:30:ea:3e:d5:d7:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D2:9A:CE:55:13:BC:87:14:46:57:70:1E:C4:B0:04:CF:FE:95:C1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vtKazlUTvIcURldwHsSwBM_-lcE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:02:0c:c7:60:30:74:4e:e0:5e:8a:96:2c:74:55:cf:aa:2d:
da:48:01:12:84:67:7b:97:5f:17:f5:96:b1:f2:bb:cb:73:d7:
a5:9f:1e:63:b5:9e:81:48:db:bc:e8:76:f5:de:fb:80:1d:61:
48:4d:97:8d:04:8c:da:3c:fa:c4:8d:7c:9e:e4:09:97:2e:89:
7e:bf:fe:b8:fb:c2:3c:1c:6a:28:58:bc:ce:b2:86:93:8b:c7:
42:e5:06:ce:cf:f0:51:df:87:13:2a:08:59:21:43:7b:7a:21:
9f:7b:27:3e:e0:38:ec:a0:6a:14:7f:cd:f4:c1:e1:d0:f1:68:
68:22:0b:0e:12:08:48:42:1e:be:ee:ba:b9:29:b6:62:4c:e9:
a2:fc:5a:bf:dc:90:ed:c9:ed:8c:17:f1:76:35:b7:51:cb:9f:
ae:df:76:22:98:d0:79:b2:2e:5a:57:d8:3b:b8:38:9a:9e:fa:
ab:58:ed:14:23:2c:9c:9a:b9:83:f2:6d:da:06:09:ed:50:9d:
cf:1f:84:27:59:75:f8:07:22:31:51:3b:36:ec:86:ef:d3:79:
7c:ce:fb:86:6a:32:81:aa:34:65:e6:0f:fb:bb:a1:1c:10:a7:
0b:b1:70:a3:8c:7f:ef:a1:ba:5b:4c:cd:50:e7:77:21:6e:94:
ca:7b:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 11:05:54 2025 by rpki-client