Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/13VRM2yJRC8zyB-fJUkfpjJ3QJM.roa
File: 13VRM2yJRC8zyB-fJUkfpjJ3QJM.roa (raw, json)
Hash identifier: Qv2SQG5wKWNAeLVArIeoizznUnrAdJFvRHvMhC7bnkE=
Subject key identifier: D7:75:51:33:6C:89:44:2F:33:C8:1F:9F:25:49:1F:A6:32:77:40:93
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0DB6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/13VRM2yJRC8zyB-fJUkfpjJ3QJM.roa
Signing time: Wed 27 Mar 2024 12:52:25 +0000
ROA not before: Wed 27 Mar 2024 12:52:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3510 (0xdb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 27 12:52:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D77551336C89442F33C81F9F25491FA632774093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:6b:5c:07:97:0a:94:d9:16:54:c2:87:6d:
ba:07:22:9e:33:46:ee:d6:28:c6:d1:a1:f1:dd:53:
9e:ba:5a:f4:ad:02:4c:61:c4:a2:1b:f0:f0:f2:09:
06:73:32:30:27:59:24:6b:e1:4c:ab:52:1c:02:f4:
0f:11:7b:f4:8d:35:4c:f9:f3:1d:fd:c7:c0:b0:7b:
2b:c5:64:bf:25:e9:f9:64:52:6c:0c:1b:21:56:6b:
04:3c:4c:73:b6:f5:05:16:13:04:19:ef:6a:f1:fc:
04:d4:9c:5d:2f:b5:5a:0d:bd:60:ee:95:0d:bd:bb:
55:29:db:a0:18:29:fc:f3:b7:8e:2f:59:93:a0:a0:
0f:e8:be:a4:83:8d:53:93:05:72:81:6f:06:b2:29:
97:2f:af:4e:3a:d6:6c:b5:ec:95:50:7b:d3:09:99:
89:cd:78:01:c2:ee:e7:ff:1e:90:72:5d:c7:82:20:
12:eb:7f:8b:4e:7a:a6:e2:ab:2d:ec:18:36:48:02:
64:b4:50:49:d9:19:0b:f6:01:82:d7:66:b4:eb:83:
34:66:21:69:28:9e:8f:44:17:97:3a:4d:c1:1d:b8:
de:82:3d:55:f7:a5:28:c5:93:e5:cd:9a:dd:e9:44:
18:9e:50:63:72:b6:6e:f6:49:08:9d:d1:a3:c3:1b:
4c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:75:51:33:6C:89:44:2F:33:C8:1F:9F:25:49:1F:A6:32:77:40:93
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/13VRM2yJRC8zyB-fJUkfpjJ3QJM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:39:1e:95:3d:c7:60:4b:f1:5d:b8:9a:fb:e7:ac:83:4c:9b:
b1:c8:9b:aa:2d:47:0f:64:b8:46:e5:30:29:a7:b7:05:d7:88:
9f:99:83:d7:07:6a:a3:62:93:27:4f:f7:81:39:9a:bc:25:0f:
5b:71:23:ad:51:af:a5:6a:8b:b9:b5:15:29:76:6d:09:cc:93:
e5:8b:9a:c1:be:1f:c6:fb:66:8d:b2:f8:f3:b5:f4:bc:61:a8:
98:2d:cc:61:2b:dc:3d:57:e6:8b:27:94:10:bf:2e:62:3d:da:
7f:30:19:e8:e7:79:51:13:6f:b0:51:12:66:f1:15:49:c3:3c:
17:d7:bc:e6:55:30:c1:15:d1:91:68:9f:e3:b4:07:c9:92:26:
a2:e9:1c:a0:23:e2:99:38:58:05:a3:9c:da:be:6e:ba:5f:ff:
ca:aa:ad:ad:16:97:2a:51:97:f2:5f:45:3a:53:ec:97:ef:5a:
35:0c:40:8f:ea:fb:b0:b6:48:57:ca:ab:09:ce:1b:8f:cc:58:
d1:8f:ea:57:00:f2:6c:2d:a2:da:43:99:67:fa:14:d6:97:f7:
2b:ad:b7:29:45:19:06:44:8c:28:8f:26:6b:96:ca:32:bd:94:
83:83:b0:51:98:93:c0:98:46:07:df:94:98:51:28:c6:c4:43:
f2:bb:81:48
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMjcx
MjUyMjVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQ3NzU1MTMzNkM4OTQ0
MkYzM0M4MUY5RjI1NDkxRkE2MzI3NzQwOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9omtcB5cKlNkWVMKHbboHIp4zRu7WKMbRofHdU566WvStAkxh
xKIb8PDyCQZzMjAnWSRr4UyrUhwC9A8Re/SNNUz58x39x8CweyvFZL8l6flkUmwM
GyFWawQ8THO29QUWEwQZ72rx/ATUnF0vtVoNvWDulQ29u1Up26AYKfzzt44vWZOg
oA/ovqSDjVOTBXKBbwayKZcvr0461my17JVQe9MJmYnNeAHC7uf/HpByXceCIBLr
f4tOeqbiqy3sGDZIAmS0UEnZGQv2AYLXZrTrgzRmIWkono9EF5c6TcEduN6CPVX3
pSjFk+XNmt3pRBieUGNytm72SQid0aPDG0xpAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU13VRM2yJRC8zyB+fJUkfpjJ3QJMwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzEzVlJNMnlKUkM4enlC
LWZKVWtmcGpKM1FKTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAjTkelT3HYEvxXbia++esg0ybscibqi1H
D2S4RuUwKae3BdeIn5mD1wdqo2KTJ0/3gTmavCUPW3EjrVGvpWqLubUVKXZtCcyT
5Yuawb4fxvtmjbL487X0vGGomC3MYSvcPVfmiyeUEL8uYj3afzAZ6Od5URNvsFES
ZvEVScM8F9e85lUwwRXRkWif47QHyZImoukcoCPimThYBaOc2r5uul//yqqtrRaX
KlGX8l9FOlPsl+9aNQxAj+r7sLZIV8qrCc4bj8xY0Y/qVwDybC2i2kOZZ/oU1pf3
K623KUUZBkSMKI8ma5bKMr2Ug4OwUZiTwJhGB9+UmFEoxsRD8ruBSA==
-----END CERTIFICATE-----
Generated at Wed Mar 27 18:09:59 2024 by rpki-client on console-fra.rpki-client.org