Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/7za7U0MB1LyHLo9OWcrcZkaJ6dU.roa
File: 7za7U0MB1LyHLo9OWcrcZkaJ6dU.roa (raw, json)
Hash identifier: Fr87owzA2CgmN+/CYlntHDtRnreNiU20/vP5AEoXt2g=
Subject key identifier: EF:36:BB:53:43:01:D4:BC:87:2E:8F:4E:59:CA:DC:66:46:89:E9:D5
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0DE0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7za7U0MB1LyHLo9OWcrcZkaJ6dU.roa
Signing time: Wed 27 Mar 2024 23:22:25 +0000
ROA not before: Wed 27 Mar 2024 23:22:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3552 (0xde0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 27 23:22:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EF36BB534301D4BC872E8F4E59CADC664689E9D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:f3:82:59:f9:40:e1:40:70:0d:fd:c7:b7:
80:33:14:ba:80:68:80:95:20:6d:44:ed:df:2a:c1:
32:11:62:97:0b:a2:9d:af:99:78:8c:cd:aa:22:f1:
9b:81:84:2d:d2:b7:34:d4:5b:74:ae:22:e3:71:52:
4e:1b:bd:f2:58:bb:87:de:cf:60:56:b9:3b:c7:e9:
9e:5c:cd:97:17:22:84:2b:9e:0e:dd:ca:4d:8b:0b:
7f:07:05:cc:cd:bc:89:ec:b2:29:6c:57:a9:32:d6:
99:e1:48:07:8a:16:cf:28:4b:1c:b8:d2:c9:54:eb:
cb:cd:28:b2:5a:44:3e:b6:f6:bb:6f:cf:2b:57:33:
d6:a6:fa:d7:64:15:fe:8a:e2:4e:3c:b8:08:5a:98:
c5:12:a2:2f:ac:52:f6:ce:91:8a:e6:5e:d3:92:2b:
54:67:b9:11:d9:6e:71:f0:b5:7b:79:13:3b:5a:3d:
68:74:3b:9c:3d:cd:a8:ea:5b:be:d2:7d:e8:ad:2e:
60:02:6e:ea:51:10:8b:11:dd:9a:47:bc:b2:90:e2:
4b:d9:55:65:59:d6:17:c4:99:ca:42:02:38:f6:25:
dc:73:3d:b2:83:f0:49:bb:91:0b:5e:e2:1c:da:38:
68:f6:6b:96:bb:db:7b:18:4f:37:94:b8:ee:c6:ce:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:36:BB:53:43:01:D4:BC:87:2E:8F:4E:59:CA:DC:66:46:89:E9:D5
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7za7U0MB1LyHLo9OWcrcZkaJ6dU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:1e:96:d7:d6:3d:45:37:cf:d9:e5:fa:03:4d:64:a3:e2:2a:
fc:4a:d7:ec:0e:b2:b5:bb:78:c9:6a:e4:d4:74:a7:26:0d:a4:
30:f6:8d:77:ef:cc:bb:f8:8a:1f:e4:4c:8e:03:87:96:8b:60:
65:55:60:55:df:54:ea:0c:f2:79:39:40:d1:41:b1:4a:86:ca:
3d:c6:a7:08:21:10:61:2a:bd:a1:77:0f:ab:04:29:dc:0a:a1:
a2:b2:b9:98:5d:30:8f:8b:f0:ad:d3:aa:3b:ee:2c:24:34:14:
ad:94:da:56:30:fb:c8:d0:67:c2:99:12:50:62:8c:a1:cb:72:
5c:1e:3b:01:7c:c3:ad:18:89:f3:aa:44:f2:f8:0b:4e:45:98:
3d:0d:5f:a5:1f:6f:f8:6e:19:37:a9:08:09:bd:dc:14:70:92:
ee:e6:52:db:2a:4c:03:a7:06:44:21:14:fc:d0:47:d7:7e:5a:
5c:8a:6b:2e:29:7c:22:59:d2:59:51:d7:2f:2d:fc:6a:c6:58:
43:51:3a:62:87:f0:f0:13:dc:68:e1:7c:b6:e2:e6:6e:64:7e:
a2:e3:cc:bf:a8:7f:ed:b1:72:98:3f:ec:0d:9f:0f:5c:86:e3:
41:db:5a:9e:33:2a:2e:b9:6f:9d:17:13:1e:c3:d6:1f:09:d3:
94:82:d4:bf
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMjcy
MzIyMjVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVGMzZCQjUzNDMwMUQ0
QkM4NzJFOEY0RTU5Q0FEQzY2NDY4OUU5RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9n/OCWflA4UBwDf3Ht4AzFLqAaICVIG1E7d8qwTIRYpcLop2v
mXiMzaoi8ZuBhC3StzTUW3SuIuNxUk4bvfJYu4fez2BWuTvH6Z5czZcXIoQrng7d
yk2LC38HBczNvInssilsV6ky1pnhSAeKFs8oSxy40slU68vNKLJaRD629rtvzytX
M9am+tdkFf6K4k48uAhamMUSoi+sUvbOkYrmXtOSK1RnuRHZbnHwtXt5EztaPWh0
O5w9zajqW77SfeitLmACbupREIsR3ZpHvLKQ4kvZVWVZ1hfEmcpCAjj2JdxzPbKD
8Em7kQte4hzaOGj2a5a723sYTzeUuO7GzubtAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU7za7U0MB1LyHLo9OWcrcZkaJ6dUwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzd6YTdVME1CMUx5SExv
OU9XY3JjWmthSjZkVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEADR6W19Y9RTfP2eX6A01ko+Iq/ErX7A6y
tbt4yWrk1HSnJg2kMPaNd+/Mu/iKH+RMjgOHlotgZVVgVd9U6gzyeTlA0UGxSobK
PcanCCEQYSq9oXcPqwQp3AqhorK5mF0wj4vwrdOqO+4sJDQUrZTaVjD7yNBnwpkS
UGKMoctyXB47AXzDrRiJ86pE8vgLTkWYPQ1fpR9v+G4ZN6kICb3cFHCS7uZS2ypM
A6cGRCEU/NBH135aXIprLil8IlnSWVHXLy38asZYQ1E6Yofw8BPcaOF8tuLmbmR+
ouPMv6h/7bFymD/sDZ8PXIbjQdtanjMqLrlvnRcTHsPWHwnTlILUvw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:00 2025 by rpki-client