Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/9wM6DdOgmKu_cySMydg6S6HDg00.roa
File: 9wM6DdOgmKu_cySMydg6S6HDg00.roa (raw, json)
Hash identifier: 08UqqbPZCevhx9nHjFizmU1p0rkG8OYzHKSF95g+DDY=
Subject key identifier: F7:03:3A:0D:D3:A0:98:AB:BF:73:24:8C:C9:D8:3A:4B:A1:C3:83:4D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1450
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9wM6DdOgmKu_cySMydg6S6HDg00.roa
Signing time: Sun 14 Apr 2024 03:23:15 +0000
ROA not before: Sun 14 Apr 2024 03:23:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5200 (0x1450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 03:23:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F7033A0DD3A098ABBF73248CC9D83A4BA1C3834D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:e1:69:be:4e:26:52:91:78:23:e8:55:90:
94:49:ea:8b:b4:70:b8:1e:2e:b0:a8:bd:af:1b:3f:
20:68:41:61:5d:9f:cd:b4:c2:7e:8a:ab:95:f0:ca:
cc:8c:0a:a7:15:04:eb:9d:b6:d7:77:20:f1:cd:af:
c3:86:6c:0c:8d:da:99:3a:cc:d2:32:78:55:90:a5:
89:71:c6:00:eb:95:9e:bc:ae:94:f8:69:0a:9a:d9:
9a:ff:36:80:ff:39:49:d8:2b:e2:6d:f9:18:83:15:
df:c9:7a:2c:0c:5c:a6:6b:6b:72:c4:8b:08:6d:5c:
c7:fa:f4:fa:0d:41:28:f9:0e:e8:a0:33:e1:b4:4f:
db:e1:de:b4:13:06:08:d9:e4:c8:45:36:59:6f:bf:
7e:35:a9:9f:9b:0a:51:27:55:83:81:94:ba:7d:c7:
9f:c9:30:e0:d9:56:05:4b:cf:d3:33:7d:fd:5a:d5:
66:95:e9:f0:8f:83:3e:98:51:a7:6f:a3:26:52:a9:
a8:d1:e1:3c:49:05:29:4d:9a:8e:57:eb:92:ba:aa:
2a:74:4d:f3:4e:37:ed:35:99:29:09:e3:7d:21:66:
33:92:42:c6:01:cb:97:38:4d:22:1e:d3:f2:4b:f6:
c9:40:64:de:10:ab:b4:aa:9a:2c:32:d5:11:0d:5f:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:03:3A:0D:D3:A0:98:AB:BF:73:24:8C:C9:D8:3A:4B:A1:C3:83:4D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9wM6DdOgmKu_cySMydg6S6HDg00.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c3:26:4b:67:74:1c:73:86:5b:a6:26:fa:40:c5:fd:71:43:02:
31:2b:b4:1c:4d:8d:71:65:4c:e1:ea:29:7c:59:93:d8:a0:d3:
1e:81:20:6a:07:98:3c:f4:7b:8e:ec:86:42:77:3f:ec:ff:0c:
31:fc:67:cc:a6:3b:f7:7b:56:9d:50:43:9f:e5:ec:b3:1e:c1:
cf:8b:de:a6:31:51:12:b2:97:65:cb:0a:57:c4:ad:3f:e0:99:
31:e9:5d:69:94:35:4a:b4:0c:af:97:b9:da:72:8a:6f:62:e8:
70:29:5e:1e:60:64:f7:ae:35:e4:ad:ce:ce:ed:b2:0d:44:c6:
15:d1:48:6e:9a:3e:da:68:a9:34:c8:28:0e:33:61:af:01:e7:
3c:ce:7c:b9:78:2a:8a:4f:f3:ce:d8:f2:e8:d3:ef:1a:32:50:
f3:8c:a3:ee:ca:72:74:9c:7a:8d:cc:b6:63:6f:8f:5a:86:a8:
b6:5b:b8:4b:8d:46:9b:59:83:32:af:05:d4:96:7b:49:4f:a8:
d2:a4:90:9d:5c:35:a0:4c:78:0c:0f:1a:68:bb:3d:5e:35:1d:
83:be:9d:c6:53:73:2b:13:9d:32:2b:32:b0:12:2f:fa:8a:ad:
84:c9:1d:81:d6:60:71:37:5a:64:b7:43:94:0e:b5:90:3c:e2:
78:d7:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:46 2025 by rpki-client