Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/9WxeqmPrhcvTBMp9t1FrrLvClgk.roa
File: 9WxeqmPrhcvTBMp9t1FrrLvClgk.roa (raw, json)
Hash identifier: Izzy3QSCVTmcmNew2E28cgg+3Yzwz359F97XfgGWNqU=
Subject key identifier: F5:6C:5E:AA:63:EB:85:CB:D3:04:CA:7D:B7:51:6B:AC:BB:C2:96:09
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A80
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9WxeqmPrhcvTBMp9t1FrrLvClgk.roa
Signing time: Tue 30 Apr 2024 15:23:59 +0000
ROA not before: Tue 30 Apr 2024 15:23:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6784 (0x1a80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 30 15:23:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F56C5EAA63EB85CBD304CA7DB7516BACBBC29609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:73:a6:c2:3c:57:55:ce:fc:b6:0c:8f:79:
f9:bd:d1:a2:26:f8:16:29:22:39:cc:79:d6:b9:1f:
a3:c6:da:e7:1c:70:01:6f:3a:df:f1:05:8b:ef:24:
ac:c9:78:f9:0a:a6:6b:7f:ed:e8:a1:2b:a6:2f:3f:
b0:50:37:37:80:1e:5d:70:ed:0b:1b:c9:a4:f1:7c:
f0:86:ea:03:17:ce:e2:11:1a:dc:57:05:cd:e3:a0:
d2:64:9d:f2:c8:ec:a9:04:d0:6b:5c:8c:d5:ee:b2:
64:3c:d7:31:2f:df:7f:0a:a7:71:7d:f6:10:54:18:
c4:86:f1:64:5d:33:0d:d1:08:bb:ff:ab:55:ee:a8:
ab:60:e3:61:d2:18:f4:32:bc:22:e0:27:28:3d:1e:
49:b2:49:a1:8c:7d:49:93:78:e8:3d:ac:6a:be:ec:
fe:fc:d3:a1:f7:0d:b2:8f:95:7b:ed:6a:e5:02:78:
2f:0e:80:7f:7c:71:11:86:74:f9:8e:30:80:92:b5:
b7:77:9a:39:fd:10:6e:cd:be:86:01:a0:df:28:fa:
d0:ef:aa:04:0d:26:f9:f4:58:82:62:30:98:16:98:
2a:82:02:d3:0f:3a:ac:d2:90:62:33:cd:50:39:b1:
19:26:f6:d9:fa:84:78:6b:2c:3c:bc:17:48:b8:95:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6C:5E:AA:63:EB:85:CB:D3:04:CA:7D:B7:51:6B:AC:BB:C2:96:09
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9WxeqmPrhcvTBMp9t1FrrLvClgk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:2c:35:e9:01:a1:5e:03:cc:df:29:0c:1a:02:d0:a5:c9:40:
e8:10:17:8a:e3:db:83:66:a6:47:c1:5e:e3:24:35:3f:09:e2:
70:73:bf:02:2a:28:59:71:7f:89:68:8d:27:82:56:bb:08:83:
d0:54:09:21:1c:6b:07:96:89:f4:d0:6b:f4:cd:d6:01:d9:1e:
a2:df:33:99:6b:a2:15:fd:c9:33:19:f8:12:f8:17:b9:ca:c3:
2d:97:b7:e9:98:99:7a:09:3b:8b:f0:0f:a1:12:88:de:4b:60:
70:cd:ee:74:15:54:56:a5:4f:a5:46:d1:fd:5d:40:85:06:c2:
45:5a:d7:5e:0e:db:25:28:12:0a:f0:75:91:c9:97:ba:10:e5:
d6:f4:64:9b:81:40:a8:cb:04:4f:ea:b7:ec:b7:1f:65:16:8e:
35:7c:0f:81:06:69:18:e9:f0:b0:a2:08:d9:02:4a:75:c5:7c:
48:29:bc:e9:0c:07:c1:02:ce:52:24:66:e6:a5:44:ca:ef:86:
ad:c7:88:34:75:64:57:aa:df:09:60:a8:75:79:f6:46:4e:c8:
ef:19:c8:61:3f:e4:bc:d9:22:bc:5a:8f:ee:d2:8d:a6:c9:71:
95:8f:e4:42:90:fa:d1:64:32:33:58:73:7d:e9:0d:77:dd:b1:
c9:53:03:a2
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGoAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MzAx
NTIzNTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEY1NkM1RUFBNjNFQjg1
Q0JEMzA0Q0E3REI3NTE2QkFDQkJDMjk2MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyJHOmwjxXVc78tgyPefm90aIm+BYpIjnMeda5H6PG2ucccAFv
Ot/xBYvvJKzJePkKpmt/7eihK6YvP7BQNzeAHl1w7QsbyaTxfPCG6gMXzuIRGtxX
Bc3joNJknfLI7KkE0GtcjNXusmQ81zEv338Kp3F99hBUGMSG8WRdMw3RCLv/q1Xu
qKtg42HSGPQyvCLgJyg9HkmySaGMfUmTeOg9rGq+7P7806H3DbKPlXvtauUCeC8O
gH98cRGGdPmOMICStbd3mjn9EG7NvoYBoN8o+tDvqgQNJvn0WIJiMJgWmCqCAtMP
OqzSkGIzzVA5sRkm9tn6hHhrLDy8F0i4le+fAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU9WxeqmPrhcvTBMp9t1FrrLvClgkwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzlXeGVxbVByaGN2VEJN
cDl0MUZyckx2Q2xnay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEASSw16QGhXgPM3ykMGgLQpclA6BAXiuPb
g2amR8Fe4yQ1PwnicHO/AiooWXF/iWiNJ4JWuwiD0FQJIRxrB5aJ9NBr9M3WAdke
ot8zmWuiFf3JMxn4EvgXucrDLZe36ZiZegk7i/APoRKI3ktgcM3udBVUVqVPpUbR
/V1AhQbCRVrXXg7bJSgSCvB1kcmXuhDl1vRkm4FAqMsET+q37LcfZRaONXwPgQZp
GOnwsKII2QJKdcV8SCm86QwHwQLOUiRm5qVEyu+GrceINHVkV6rfCWCodXn2Rk7I
7xnIYT/kvNkivFqP7tKNpslxlY/kQpD60WQyM1hzfekNd92xyVMDog==
-----END CERTIFICATE-----
Generated at Tue Apr 30 20:56:57 2024 by rpki-client on console-fra.rpki-client.org