Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/CQvDYUej77om6d4DvHNNzPV_-ME.roa
File: CQvDYUej77om6d4DvHNNzPV_-ME.roa (raw, json)
Hash identifier: OfNXTSulAM5urvbGxq2dvHARJJ7TVSt9mcA1N2ZJyTU=
Subject key identifier: 09:0B:C3:61:47:A3:EF:BA:26:E9:DE:03:BC:73:4D:CC:F5:7F:F8:C1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16D0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CQvDYUej77om6d4DvHNNzPV_-ME.roa
Signing time: Sat 20 Apr 2024 19:23:32 +0000
ROA not before: Sat 20 Apr 2024 19:23:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5840 (0x16d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 19:23:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=090BC36147A3EFBA26E9DE03BC734DCCF57FF8C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:36:1c:3b:a1:a0:c2:99:81:89:8c:8a:aa:
63:2d:38:dc:69:29:bc:f7:d5:1c:b7:91:96:a5:82:
74:71:32:a1:28:11:e7:a8:dc:0f:42:f7:51:3e:35:
cd:a0:84:57:d2:07:4d:ae:88:13:f0:43:08:92:82:
8c:4f:52:51:6d:60:12:f6:46:0a:f0:37:38:33:9f:
0a:7d:f9:c5:48:27:89:dd:16:9a:2d:45:bd:b9:e4:
31:ab:5d:af:1a:7f:7b:16:fc:46:62:81:16:2e:ab:
f8:7a:49:1d:d2:6b:89:1a:88:3a:56:e4:2c:cd:22:
f4:0a:76:b6:94:a0:fb:ea:4e:8d:fb:2b:6a:b3:7e:
ac:00:7d:86:e5:73:72:de:70:a1:fe:dc:3a:2d:c4:
e6:20:72:cc:cd:d0:1c:80:6e:a3:78:6f:7e:b1:20:
ac:1e:4e:e2:5c:86:28:4b:0e:81:c4:c0:ce:e2:bd:
42:b3:b8:ed:55:8b:a8:03:f9:05:e3:61:60:2b:fb:
c7:de:8e:6c:d1:b4:a5:06:6d:68:56:4d:13:68:21:
5c:11:71:0e:b6:df:de:b1:c9:58:db:7c:8d:35:ef:
28:cd:d1:06:fa:9e:25:26:2b:d1:d0:a5:d5:f0:00:
3a:dd:16:db:f4:20:4c:29:bc:5f:a0:f2:1b:1a:85:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0B:C3:61:47:A3:EF:BA:26:E9:DE:03:BC:73:4D:CC:F5:7F:F8:C1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CQvDYUej77om6d4DvHNNzPV_-ME.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:a8:7d:04:7e:f0:d1:3d:23:35:1e:43:78:fd:d1:57:b8:ba:
f8:5f:da:1a:5a:df:71:87:ef:80:f6:b6:8a:49:09:23:ed:e4:
b9:3a:09:77:9c:ed:18:8c:21:83:99:5d:31:0b:d9:fa:a3:58:
b5:7b:c8:50:76:96:97:de:c7:70:14:80:c7:8b:5a:55:7d:5c:
cd:fb:c6:07:80:44:0e:4a:a9:16:7a:52:80:f5:2d:35:e0:07:
28:17:4c:27:bd:01:31:05:3f:8b:5d:c7:d8:a9:3e:37:8d:1d:
4c:35:bf:c2:06:0b:d8:bb:eb:5b:5c:a8:fc:95:f8:f0:21:3c:
26:eb:53:fc:21:9f:54:bb:15:81:7e:9b:70:d7:18:8c:e7:fd:
c1:b0:e2:64:0c:98:9d:b4:07:81:6f:63:8c:06:68:57:32:ba:
32:c1:e6:ba:4c:a7:9e:7f:97:cc:6f:7b:8c:36:17:fe:c1:39:
c9:72:a3:1b:2a:f3:07:88:5c:4d:bf:4b:20:0b:12:43:bd:39:
37:b2:b7:fe:74:4e:e8:84:16:5c:c8:f9:6e:92:9c:72:5d:34:
b7:8c:8a:52:3b:a6:3c:e0:e2:5a:05:76:48:6c:27:3c:c3:98:
be:ba:00:61:2c:25:76:55:32:e0:77:a5:16:67:44:92:39:7e:
25:66:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:28 2025 by rpki-client