Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/DgxvyhYiu6K_FoO2eAnwPpv8sF0.roa
File: DgxvyhYiu6K_FoO2eAnwPpv8sF0.roa (raw, json)
Hash identifier: vnPbl5pgh7sc5k+PrABiacIUKT9R2cZ3UhAGCGDOkU8=
Subject key identifier: 0E:0C:6F:CA:16:22:BB:A2:BF:16:83:B6:78:09:F0:3E:9B:FC:B0:5D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F82
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/DgxvyhYiu6K_FoO2eAnwPpv8sF0.roa
Signing time: Mon 01 Apr 2024 07:52:39 +0000
ROA not before: Mon 01 Apr 2024 07:52:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3970 (0xf82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 1 07:52:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0E0C6FCA1622BBA2BF1683B67809F03E9BFCB05D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:cc:05:dd:8e:b9:2f:ea:55:a9:aa:9e:c0:
90:cf:30:86:62:ca:ae:58:17:a2:60:4f:19:6c:96:
c1:6f:c9:d6:4f:87:3e:55:38:f8:37:61:55:d9:95:
30:88:13:e9:f7:13:2e:84:54:33:22:a9:6a:dc:6f:
ff:dc:7a:b1:36:4b:3a:47:f3:39:31:92:fb:1d:56:
82:ed:25:23:07:b1:f0:68:28:30:9f:fe:0b:4f:10:
fb:be:25:cc:c3:43:92:c7:bd:27:2b:d7:3b:09:ef:
c0:ab:4b:65:34:4e:14:cb:91:0a:71:06:f5:60:45:
6a:db:b6:3b:36:6c:cd:51:e2:c4:c3:fa:ef:06:97:
ee:fa:80:44:d6:65:77:cb:40:d9:ee:27:c9:94:31:
28:66:10:ee:21:9e:1a:db:13:15:7c:69:ab:d7:8a:
de:dc:4f:24:f8:ed:e7:4f:ce:d9:17:7b:2f:a0:61:
3d:de:ec:4a:45:99:5a:74:1c:d4:68:fa:d5:9f:1f:
42:72:3f:04:ce:27:83:9f:4c:35:24:7a:87:ad:ec:
1d:d5:7a:55:d8:c6:3f:f9:2d:74:42:0b:95:dd:25:
6a:c4:2c:af:11:34:fc:fa:20:8a:5d:f8:a3:4b:d8:
17:95:2e:a7:ef:0e:6a:b0:f2:af:8e:ae:ef:ee:6c:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0C:6F:CA:16:22:BB:A2:BF:16:83:B6:78:09:F0:3E:9B:FC:B0:5D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/DgxvyhYiu6K_FoO2eAnwPpv8sF0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:2c:0c:ce:42:60:85:16:bc:4e:ad:00:33:99:54:8c:ae:28:
22:6c:64:4a:b6:2d:cf:3f:43:f1:4b:58:4a:85:82:78:f6:c4:
b9:2e:4a:29:dc:e1:99:87:85:50:11:8b:ea:f3:d1:3a:44:a6:
2d:3a:b1:ae:ad:6a:4e:cc:9a:03:0e:1d:64:c6:26:bd:80:32:
62:83:63:67:37:81:6b:c3:c1:48:1b:a1:7e:9a:9f:d7:77:35:
f1:96:46:b9:8e:82:32:c2:8e:b5:11:e4:61:f9:df:85:d8:56:
a5:0d:4b:36:80:4c:9c:40:cc:5c:85:b6:fc:fc:95:cb:b5:0a:
f0:2e:74:a6:bc:4e:95:5d:8f:be:1e:5f:55:77:e6:49:28:0d:
05:7b:42:22:de:84:ff:64:63:a7:d6:c5:f9:39:cb:c2:69:e5:
14:a8:85:29:63:48:3b:10:d7:03:50:06:c1:5f:1c:9f:38:a4:
9d:45:55:ee:39:b2:55:72:be:85:6f:aa:0e:7c:7a:9f:17:19:
c7:c9:16:34:b6:e0:7a:8f:60:da:b3:3f:d2:67:c7:e7:81:82:
a3:ca:83:37:98:a0:c5:cf:56:03:05:25:3f:cd:72:48:30:62:
02:02:51:1d:9f:12:15:e3:dd:e3:b0:2a:d8:f5:df:fb:35:fb:
f4:d7:95:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:49 2025 by rpki-client