Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/xdBJeJTOA3rzFfVGF1beYDWzHoQ.roa
File: xdBJeJTOA3rzFfVGF1beYDWzHoQ.roa (raw, json)
Hash identifier: Uuy/SCKvmpZ5DUVg7hGpY7OSF3UU+aulKad48nhYdfU=
Subject key identifier: C5:D0:49:78:94:CE:03:7A:F3:15:F5:46:17:56:DE:60:35:B3:1E:84
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1014
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xdBJeJTOA3rzFfVGF1beYDWzHoQ.roa
Signing time: Tue 02 Apr 2024 20:22:38 +0000
ROA not before: Tue 02 Apr 2024 20:22:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4116 (0x1014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 2 20:22:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C5D0497894CE037AF315F5461756DE6035B31E84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:bb:25:ad:10:cb:54:dc:57:0a:0b:d2:ff:
05:8e:43:dc:36:4a:13:49:70:9d:ee:13:bf:90:0f:
b9:34:5a:ae:4e:a4:ad:e4:d7:d4:10:1f:4d:57:ce:
4b:f0:8b:72:4a:b1:b8:a5:a9:2d:6c:d3:89:bc:c3:
d7:b6:f5:d5:0c:04:1c:62:d3:62:c6:27:a3:f2:58:
21:d8:2d:eb:a9:ba:02:06:4b:c7:b5:66:1b:4a:ee:
a4:e6:71:20:7f:ee:d4:d1:11:c3:46:89:f8:65:dc:
d8:f0:62:8c:60:20:be:47:41:ea:66:5c:23:eb:6e:
0d:7c:81:af:27:d9:f3:6d:a4:d9:05:1f:2e:50:a3:
e2:2e:b3:1f:8a:af:1e:d6:36:33:e4:39:5b:02:7c:
9f:1a:64:79:f3:86:73:43:af:b9:2f:05:8b:34:78:
8b:f4:3f:fa:80:25:fc:ae:8f:ca:f9:64:11:dd:f7:
6b:e2:b8:4e:d9:d0:73:09:a6:04:19:5a:d6:54:65:
ae:70:7f:17:d9:6f:70:c3:aa:4e:de:78:c8:27:ae:
53:37:b2:4c:4b:4a:2e:61:b2:cf:c3:fb:d7:92:86:
ed:be:70:80:b6:39:17:41:95:17:39:cd:a3:d8:2b:
43:ca:1d:48:5b:ac:ed:19:cd:fd:eb:f5:d9:41:4e:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D0:49:78:94:CE:03:7A:F3:15:F5:46:17:56:DE:60:35:B3:1E:84
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xdBJeJTOA3rzFfVGF1beYDWzHoQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:11:59:2b:6c:3f:21:29:2b:d9:80:f6:24:36:f5:ed:0e:f6:
0a:97:ed:ae:0a:0d:c5:5b:74:90:43:05:74:88:93:4b:60:f6:
01:ce:48:df:f1:b8:c8:0d:13:00:d6:8b:9b:a5:22:b1:e7:46:
61:2e:83:a1:f3:38:16:45:9d:4d:0b:1a:3d:3b:5c:b3:ad:86:
04:10:3d:29:44:a1:46:e3:03:fb:9a:d7:fb:0e:df:79:00:89:
28:fb:7e:e3:57:5d:08:df:32:5a:a5:f3:b0:54:f2:4a:25:ea:
ab:cd:82:f4:60:2e:62:4b:20:58:44:a8:75:ee:18:ff:17:d7:
05:f1:58:36:96:3b:ef:59:35:4c:55:0c:36:77:47:88:61:92:
16:fd:07:3a:46:50:bf:e3:d5:62:96:4f:8f:3b:34:90:84:7c:
0c:b4:3f:c5:47:20:6c:73:57:c3:ef:88:e3:97:13:f2:31:94:
d4:61:52:6e:0b:c7:f6:56:c1:6c:82:1c:79:c1:17:78:c4:80:
45:b3:7e:56:28:9b:77:bd:ae:0b:de:78:01:1e:42:35:57:6a:
de:a0:59:e5:f4:d9:05:ab:58:b6:dc:ed:4d:a4:51:ba:58:92:
79:01:4d:e2:6e:fb:af:02:86:d3:c8:0e:00:ab:85:eb:26:7b:
32:cb:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:57:42 2025 by rpki-client