Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/xA5deozXGwEXlW0U2t8kIP3ZmGE.roa
File: xA5deozXGwEXlW0U2t8kIP3ZmGE.roa (raw, json)
Hash identifier: uzShEGFUt6tuAZtDlhBD2yDu8yLIJMxMsfwCkIvT9Fw=
Subject key identifier: C4:0E:5D:7A:8C:D7:1B:01:17:95:6D:14:DA:DF:24:20:FD:D9:98:61
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F60
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xA5deozXGwEXlW0U2t8kIP3ZmGE.roa
Signing time: Sun 31 Mar 2024 23:22:43 +0000
ROA not before: Sun 31 Mar 2024 23:22:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3936 (0xf60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 23:22:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C40E5D7A8CD71B0117956D14DADF2420FDD99861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:24:81:58:89:e3:32:f9:a0:7f:5b:1f:32:e2:
0b:d6:0a:bc:b7:2e:a5:b9:83:71:14:a8:a3:b1:58:
43:d1:63:e1:f3:b7:a6:60:b8:4b:52:b9:19:9a:11:
70:27:b5:fa:9a:a4:aa:bc:2e:bf:ff:8d:95:2a:7c:
70:45:9a:cf:b7:64:37:b6:66:76:f3:3a:a2:33:3e:
57:27:4b:fc:32:2f:28:84:81:a8:d2:91:04:a0:19:
8d:55:2f:3b:b6:00:88:e1:19:9d:d6:10:52:9b:fd:
e7:76:3e:53:9d:a2:9b:cd:9e:4e:d0:1d:2d:5c:2f:
cd:b6:75:34:90:12:b2:16:86:31:e3:a1:92:ce:5a:
59:22:bb:c0:dd:7f:ea:80:06:a1:3e:44:40:ac:34:
2b:ad:f4:6f:ca:52:54:cd:22:6e:b8:d9:13:5b:c1:
a4:c1:c2:18:e8:4e:8a:64:b6:7a:5a:b6:99:22:6e:
ec:f7:8e:bd:c2:87:11:ec:e7:ad:14:d4:db:13:7b:
c4:dc:54:b6:cd:47:2c:76:30:ec:03:81:e6:92:68:
7a:09:02:a8:1b:d1:5c:ff:49:eb:6d:7f:2e:6d:1b:
44:6c:82:d4:30:22:4c:8a:2a:20:38:fc:3c:0e:b1:
65:e8:a6:be:ed:09:1e:2c:76:28:9c:42:3b:40:bd:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0E:5D:7A:8C:D7:1B:01:17:95:6D:14:DA:DF:24:20:FD:D9:98:61
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xA5deozXGwEXlW0U2t8kIP3ZmGE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:4c:e5:a4:61:1e:61:e6:ba:29:a7:ac:15:97:f5:c7:3e:68:
a1:d9:36:d6:73:22:61:ce:9b:53:08:7b:0a:ee:b3:ea:a9:e4:
e4:67:9f:62:6f:74:cb:c4:4b:37:29:d9:8c:1d:f4:44:6c:8e:
0f:0e:2f:e1:e9:79:a4:e8:21:b0:ad:ae:32:93:74:99:fd:32:
a9:dc:67:b1:ae:bb:b8:e2:2b:61:71:a2:64:73:0f:8b:e7:31:
31:e6:22:4a:79:79:44:82:2e:46:62:e4:02:ae:c4:1b:c7:8e:
ec:1e:cd:31:83:21:64:ba:1f:55:27:38:97:e8:75:df:cd:c8:
46:a5:2c:ad:89:29:6f:cb:71:d0:c1:f8:5f:01:35:b3:d1:7f:
0f:7f:33:ad:a6:93:90:f7:c2:d1:ae:a1:c1:00:88:c2:c9:11:
76:91:72:5a:e9:44:83:1d:b6:0c:28:6a:02:bb:dc:d7:7b:53:
fd:4b:f9:d0:e6:a5:2f:f9:4a:86:cd:99:c8:a6:15:7f:3c:38:
fd:5a:21:f8:74:a1:4f:67:49:79:e6:4a:2b:cf:8e:a5:28:77:
32:cb:6a:d1:46:80:cb:c8:53:47:5b:50:f2:d8:bd:1f:66:71:
60:9f:3d:e1:9a:91:54:45:7f:36:fc:c5:58:f2:0b:ac:1f:2c:
94:55:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 18:50:52 2025 by rpki-client