Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/LQ5cBqBZKv-ydFzsLlMW1pohILg.roa
File: LQ5cBqBZKv-ydFzsLlMW1pohILg.roa (raw, json)
Hash identifier: e/61IMYX19WOVQ/h/XC/d2V9vnacKMzoNpZQ9NqmGjk=
Subject key identifier: 2D:0E:5C:06:A0:59:2A:FF:B2:74:5C:EC:2E:53:16:D6:9A:21:20:B8
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1610
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LQ5cBqBZKv-ydFzsLlMW1pohILg.roa
Signing time: Thu 18 Apr 2024 19:23:26 +0000
ROA not before: Thu 18 Apr 2024 19:23:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5648 (0x1610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 19:23:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2D0E5C06A0592AFFB2745CEC2E5316D69A2120B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:f5:5e:fa:9b:fd:0c:fb:a5:86:22:8a:56:
9b:4f:9e:e0:5c:b9:f0:12:9a:aa:fc:7a:1a:00:7a:
f9:75:3a:43:de:83:71:b8:77:56:10:22:91:94:94:
bf:47:b6:c7:4e:93:0b:0a:99:59:f0:ed:a0:c5:d6:
88:47:8a:62:06:3b:dd:de:33:40:4a:92:22:03:aa:
b8:14:67:0a:4d:59:72:57:ed:19:06:96:13:d3:da:
89:61:78:bb:fd:62:44:4d:6f:a5:15:bf:3e:2b:c7:
09:cd:36:15:43:ab:51:76:45:20:1a:cf:d3:42:8d:
d0:3b:89:7a:e7:4e:51:bb:b1:2d:39:48:e7:cc:2c:
b3:89:ba:9d:fd:bd:36:79:ec:96:36:cf:4e:3a:01:
95:69:f0:0d:e3:d4:7b:1e:82:73:71:6d:3a:52:2a:
3b:56:30:98:74:cb:b4:3b:08:98:51:7d:bd:78:64:
b9:66:8c:2a:39:42:67:23:00:25:e8:c1:f9:7e:7c:
2a:fc:df:a3:21:4c:4a:0b:53:4b:1f:ce:98:e2:c5:
33:bd:ad:a4:8d:8c:ae:aa:d9:39:dd:17:3b:90:43:
59:26:ef:26:a6:22:7b:41:43:57:02:3c:1b:7b:ab:
15:63:70:81:56:16:98:b7:c4:0d:cf:8b:45:96:32:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0E:5C:06:A0:59:2A:FF:B2:74:5C:EC:2E:53:16:D6:9A:21:20:B8
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LQ5cBqBZKv-ydFzsLlMW1pohILg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:36:38:fe:3f:f7:a3:93:85:11:9d:e7:6a:48:91:71:ea:a7:
de:03:4d:ec:06:f9:2d:2a:5b:e0:d1:34:ef:9d:08:3c:76:fc:
d8:a0:b5:d8:04:f5:9e:a4:50:82:b3:fd:6b:4e:a5:ae:20:cf:
bf:08:39:07:4f:b0:a4:8d:2b:42:6a:03:7b:67:3b:45:07:aa:
d8:88:2b:80:2b:cb:76:b8:f2:9a:ef:31:4e:e1:9e:f3:3a:ec:
7e:ab:37:15:7a:f9:95:f4:f7:c7:f0:fc:92:c0:dc:5e:15:21:
a1:8d:82:c3:1a:b7:95:d8:15:99:6f:96:e9:67:9e:91:13:d8:
3b:26:1a:b9:e1:54:e4:a2:a8:ac:56:cb:f5:9c:1e:9b:41:f1:
4f:79:58:56:96:8d:86:82:31:04:78:5b:cf:f7:b8:08:71:96:
46:a9:32:7f:76:d0:c6:3a:30:d7:0a:07:64:cc:39:b0:17:d6:
3c:09:87:0c:98:ef:4f:e3:ee:ee:f8:eb:16:56:35:e8:d0:c9:
4f:34:dc:d7:f3:2a:d4:97:ee:98:1e:7e:ed:ec:05:d3:b0:c1:
e2:20:7e:ae:54:94:9d:bc:e4:b6:39:70:b8:4d:eb:56:e0:b0:
9c:ac:64:ad:e1:52:fd:7e:7c:13:98:bc:db:ad:ca:1a:f5:84:
f8:a6:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:11:49 2025 by rpki-client