Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/66ncAuyaMkUnHYf_LEISb4kw3xo.roa
File: 66ncAuyaMkUnHYf_LEISb4kw3xo.roa (raw, json)
Hash identifier: /tvYIGiVDBJXDqChD5zt3zyK4RD4vMLIRTHBdXQ9QYQ=
Subject key identifier: EB:A9:DC:02:EC:9A:32:45:27:1D:87:FF:2C:42:12:6F:89:30:DF:1A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1180
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/66ncAuyaMkUnHYf_LEISb4kw3xo.roa
Signing time: Sat 06 Apr 2024 15:22:54 +0000
ROA not before: Sat 06 Apr 2024 15:22:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4480 (0x1180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 6 15:22:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EBA9DC02EC9A3245271D87FF2C42126F8930DF1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:f7:69:20:05:6e:27:6c:00:ff:6f:f6:7d:
61:9f:b1:7f:97:06:15:ce:00:f0:ef:73:f7:30:d5:
d9:d4:05:af:86:5a:6c:c0:4a:e2:b0:09:f2:d9:6a:
59:97:6e:28:9e:2b:ca:19:eb:56:58:de:40:be:c6:
1a:71:fe:0f:e0:22:bb:b2:90:5a:fb:fb:ae:7d:25:
0d:9c:c1:8c:d1:b6:3a:a7:8c:77:19:60:a0:4f:a0:
ef:43:45:29:ea:aa:cf:0c:08:00:7b:c4:6d:be:7b:
a2:c3:89:c2:9b:71:61:dc:88:7b:a2:5c:4f:99:16:
c6:5a:04:d3:a6:61:92:54:72:96:3e:79:0d:5d:59:
42:29:f6:90:9d:85:e2:4e:63:af:7c:9a:f6:65:17:
c8:70:8e:98:6e:f3:b3:c6:1b:56:af:53:1a:1d:04:
76:08:ac:e1:29:e7:cf:e5:1c:7a:58:07:8c:44:7b:
cb:49:48:69:66:cc:d1:78:16:8d:ee:2b:47:7b:7d:
70:2b:c0:6d:70:ec:8d:4c:b7:0f:1c:5c:27:60:73:
66:11:62:0c:7f:e6:fe:ca:41:e9:17:af:68:ab:cd:
44:0e:57:b8:70:78:2f:60:27:df:d4:96:7a:46:45:
4f:89:99:ac:57:a0:d0:6b:4e:e7:34:2b:b3:88:b3:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A9:DC:02:EC:9A:32:45:27:1D:87:FF:2C:42:12:6F:89:30:DF:1A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/66ncAuyaMkUnHYf_LEISb4kw3xo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d3:48:55:4a:d1:82:cd:8b:f9:67:cd:cd:8d:45:f0:ad:06:67:
e7:da:5f:cc:e3:3a:88:ba:4b:a7:1c:78:5b:cd:fa:55:55:5b:
9a:5f:2a:3b:2f:42:a9:37:4e:e3:a8:ec:9e:84:c1:14:13:c2:
47:4f:bc:62:e8:70:c9:6c:b4:15:21:7a:40:7a:3c:b8:f8:c1:
f9:b4:37:99:29:3a:87:e5:a7:08:c7:d2:31:b0:f4:48:05:c7:
33:7f:36:0a:d5:ec:47:da:7a:34:d6:86:96:a0:e4:28:d5:0d:
ad:af:9d:00:c4:b9:3c:ea:68:f0:4d:64:69:8c:4b:cf:09:0a:
e9:06:a4:e8:7d:32:4a:a4:3e:29:c2:61:8c:8c:54:19:cd:ac:
5f:43:de:e2:a9:6b:2b:df:e0:8d:f1:cf:54:50:1a:b5:fc:2d:
e3:ab:2f:e7:3a:9c:c3:92:70:74:de:81:0e:ec:d1:94:0f:af:
19:f2:7c:e0:72:7f:74:01:f7:9d:06:f0:54:1b:e3:9d:01:cd:
4f:67:4c:63:fa:b5:eb:08:b6:0f:38:76:ed:82:27:c0:f8:c6:
a7:2f:b3:a0:b3:55:2c:50:d1:b5:4d:7c:2a:af:52:09:2f:e8:
16:71:d6:59:11:b9:52:f3:51:c0:93:9c:cc:c2:38:a4:f8:a3:
ac:82:d1:61
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDYx
NTIyNTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVCQTlEQzAyRUM5QTMy
NDUyNzFEODdGRjJDNDIxMjZGODkzMERGMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiXPdpIAVuJ2wA/2/2fWGfsX+XBhXOAPDvc/cw1dnUBa+GWmzA
SuKwCfLZalmXbiieK8oZ61ZY3kC+xhpx/g/gIruykFr7+659JQ2cwYzRtjqnjHcZ
YKBPoO9DRSnqqs8MCAB7xG2+e6LDicKbcWHciHuiXE+ZFsZaBNOmYZJUcpY+eQ1d
WUIp9pCdheJOY698mvZlF8hwjphu87PGG1avUxodBHYIrOEp58/lHHpYB4xEe8tJ
SGlmzNF4Fo3uK0d7fXArwG1w7I1Mtw8cXCdgc2YRYgx/5v7KQekXr2irzUQOV7hw
eC9gJ9/UlnpGRU+JmaxXoNBrTuc0K7OIs6OtAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU66ncAuyaMkUnHYf/LEISb4kw3xowHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzY2bmNBdXlhTWtVbkhZ
Zl9MRUlTYjRrdzN4by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEA00hVStGCzYv5Z83NjUXwrQZn59pfzOM6
iLpLpxx4W836VVVbml8qOy9CqTdO46jsnoTBFBPCR0+8YuhwyWy0FSF6QHo8uPjB
+bQ3mSk6h+WnCMfSMbD0SAXHM382CtXsR9p6NNaGlqDkKNUNra+dAMS5POpo8E1k
aYxLzwkK6Qak6H0ySqQ+KcJhjIxUGc2sX0Pe4qlrK9/gjfHPVFAatfwt46sv5zqc
w5JwdN6BDuzRlA+vGfJ84HJ/dAH3nQbwVBvjnQHNT2dMY/q16wi2Dzh27YInwPjG
py+zoLNVLFDRtU18Kq9SCS/oFnHWWRG5UvNRwJOczMI4pPijrILRYQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:01 2025 by rpki-client