Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/28l7O49mbw1m1pcGCuP6VKU9QO4.roa
File: 28l7O49mbw1m1pcGCuP6VKU9QO4.roa (raw, json)
Hash identifier: UoBbU+FwZJYfjKPn/pd7Br3kxaiEf/AZICEXE0dYAbg=
Subject key identifier: DB:C9:7B:3B:8F:66:6F:0D:66:D6:97:06:0A:E3:FA:54:A5:3D:40:EE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1142
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/28l7O49mbw1m1pcGCuP6VKU9QO4.roa
Signing time: Fri 05 Apr 2024 23:53:41 +0000
ROA not before: Fri 05 Apr 2024 23:53:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4418 (0x1142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 5 23:53:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DBC97B3B8F666F0D66D697060AE3FA54A53D40EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:0e:62:8f:1f:92:a3:01:55:39:ac:73:2c:
9b:a7:cd:6d:98:fc:25:7d:ea:8a:da:27:c1:51:e6:
4b:17:a6:46:ae:33:a1:a0:05:7b:0b:b7:34:1c:e5:
3a:7c:87:92:d3:36:e5:2e:9b:ae:a1:8f:af:7b:71:
d9:b3:13:a2:96:59:da:20:72:a4:2e:1a:c3:54:54:
6d:64:03:c7:d4:95:ff:28:8b:e6:37:94:49:91:5b:
5f:0f:aa:25:1b:6f:33:ec:8c:b4:cf:ef:22:75:62:
e9:3d:d1:f4:23:a0:62:26:18:a2:e1:11:5c:15:ef:
b0:ca:ea:cd:d4:55:6a:ee:c3:86:9d:ce:58:bd:83:
08:07:9c:4d:ee:a8:56:4e:98:14:7c:87:40:a3:bb:
2d:70:91:c1:1d:ad:b7:6d:f1:30:f0:95:c2:b1:67:
15:11:f3:86:9d:eb:52:d8:16:86:45:b7:83:7a:b7:
b3:98:b5:91:41:d6:7d:0e:f1:54:71:9c:ef:0a:79:
67:5e:0d:b9:0a:76:dd:e5:10:97:af:07:5c:12:75:
10:25:8a:35:3e:ac:fb:22:06:fc:53:0e:64:00:e5:
cd:4a:d1:3c:bc:dd:b0:76:91:e9:97:d3:4b:a3:97:
b6:81:89:4e:ff:d1:9b:07:83:53:ec:15:01:9c:fc:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C9:7B:3B:8F:66:6F:0D:66:D6:97:06:0A:E3:FA:54:A5:3D:40:EE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/28l7O49mbw1m1pcGCuP6VKU9QO4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:28:b7:a6:25:b0:7b:d2:8b:fc:8e:52:b9:d9:df:43:81:5f:
f2:19:d6:51:aa:70:1f:a9:2d:23:0c:4f:7a:82:15:68:28:46:
f7:c9:42:22:cb:8d:44:d7:60:ca:c3:a4:6a:a3:f2:0a:47:ea:
42:83:11:5b:4c:82:ad:63:cd:49:36:a9:3e:f5:a5:1d:2c:8e:
b0:2e:c3:47:f1:cb:17:8f:be:1c:a7:a1:44:64:dd:d7:87:22:
f1:03:db:b3:b0:bc:8f:e2:46:c3:3e:88:a4:1c:85:59:5b:2b:
23:6d:ee:4c:ea:15:e7:a0:4f:f2:6a:80:b8:4c:05:10:f7:3f:
cf:32:2e:89:cd:a9:35:9d:a2:4c:1f:d9:64:05:af:6e:bd:c6:
b2:e4:76:ff:00:1c:ab:f1:2e:da:36:9d:5a:30:1d:20:64:d6:
1a:68:5a:0d:ea:0e:0a:53:80:cb:16:9f:2f:50:b3:d2:36:76:
5a:b7:4e:cb:d3:e7:96:22:38:71:db:a3:85:ed:c6:fc:f5:d7:
a5:d8:9a:6c:e0:3a:b2:c4:7e:b1:ca:bd:35:a3:d7:83:c0:12:
af:73:1a:a6:1b:b1:9a:8a:bf:df:27:23:9f:fa:34:f9:de:c9:
01:1c:86:de:de:b9:6c:e8:6b:b3:1c:0a:76:e5:c7:7a:2f:c1:
e2:92:dd:18
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEUIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDUy
MzUzNDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKERCQzk3QjNCOEY2NjZG
MEQ2NkQ2OTcwNjBBRTNGQTU0QTUzRDQwRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+Ag5ijx+SowFVOaxzLJunzW2Y/CV96oraJ8FR5ksXpkauM6Gg
BXsLtzQc5Tp8h5LTNuUum66hj697cdmzE6KWWdogcqQuGsNUVG1kA8fUlf8oi+Y3
lEmRW18PqiUbbzPsjLTP7yJ1Yuk90fQjoGImGKLhEVwV77DK6s3UVWruw4adzli9
gwgHnE3uqFZOmBR8h0Cjuy1wkcEdrbdt8TDwlcKxZxUR84ad61LYFoZFt4N6t7OY
tZFB1n0O8VRxnO8KeWdeDbkKdt3lEJevB1wSdRAlijU+rPsiBvxTDmQA5c1K0Ty8
3bB2kemX00ujl7aBiU7/0ZsHg1PsFQGc/HLDAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU28l7O49mbw1m1pcGCuP6VKU9QO4wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzI4bDdPNDltYncxbTFw
Y0dDdVA2VktVOVFPNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAZCi3piWwe9KL/I5SudnfQ4Ff8hnWUapw
H6ktIwxPeoIVaChG98lCIsuNRNdgysOkaqPyCkfqQoMRW0yCrWPNSTapPvWlHSyO
sC7DR/HLF4++HKehRGTd14ci8QPbs7C8j+JGwz6IpByFWVsrI23uTOoV56BP8mqA
uEwFEPc/zzIuic2pNZ2iTB/ZZAWvbr3GsuR2/wAcq/Eu2jadWjAdIGTWGmhaDeoO
ClOAyxafL1Cz0jZ2WrdOy9PnliI4cdujhe3G/PXXpdiabOA6ssR+scq9NaPXg8AS
r3Maphuxmoq/3ycjn/o0+d7JARyG3t65bOhrsxwKduXHei/B4pLdGA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:42 2025 by rpki-client