Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/R7KMnPo2p1gjVEcz9IPvw-G8lHs.roa
File: R7KMnPo2p1gjVEcz9IPvw-G8lHs.roa (raw, json)
Hash identifier: +A98WwLLYbJZDnBRKfQkeCQu1c4eXtwdbyIiMh4ae1Y=
Subject key identifier: 47:B2:8C:9C:FA:36:A7:58:23:54:47:33:F4:83:EF:C3:E1:BC:94:7B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1270
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/R7KMnPo2p1gjVEcz9IPvw-G8lHs.roa
Signing time: Tue 09 Apr 2024 03:23:01 +0000
ROA not before: Tue 09 Apr 2024 03:23:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4720 (0x1270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 9 03:23:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=47B28C9CFA36A75823544733F483EFC3E1BC947B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:b6:a9:06:22:a9:c7:81:b4:f8:09:46:3b:
8d:64:18:42:1e:40:3f:8c:90:1b:27:3b:d5:10:3b:
cd:b1:21:7b:d0:80:0b:81:f8:b8:18:c9:ce:59:85:
4f:c9:74:1e:1a:52:5f:2d:a0:13:4b:7b:9b:65:de:
cc:62:af:10:1a:c2:16:c9:47:7f:a8:59:f0:7d:fe:
93:fe:6a:fc:1b:60:bd:ed:ec:59:68:16:cf:db:b0:
2e:67:e7:79:70:44:63:40:22:fc:bd:09:dc:9a:3c:
ff:2c:21:16:af:95:82:9c:03:36:ec:89:5c:ba:4b:
dd:9c:ed:85:e5:0f:f6:7a:57:8a:45:a1:d0:3f:2f:
7b:32:f0:4b:33:de:8c:ba:5b:f3:4c:78:01:04:c0:
cc:99:44:fe:84:2c:4e:23:d1:a3:20:0e:c9:8e:94:
ea:19:55:f0:2e:cd:bd:90:34:f0:1b:b1:0b:4c:6f:
d1:60:0f:df:5e:72:e8:f0:c6:a2:26:9a:1e:8f:30:
6d:43:f5:ae:21:24:66:e5:a4:2f:21:28:23:b5:a7:
65:f4:70:a6:c6:fe:de:bf:18:81:46:de:b8:52:5a:
fe:43:a2:de:e8:23:71:31:e4:ad:18:4e:44:11:81:
df:cf:e2:dd:0d:50:34:7f:e3:27:3d:67:40:86:39:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B2:8C:9C:FA:36:A7:58:23:54:47:33:F4:83:EF:C3:E1:BC:94:7B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/R7KMnPo2p1gjVEcz9IPvw-G8lHs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cb:75:16:26:61:b3:0f:cf:34:cb:d9:63:53:0f:83:48:e9:d2:
37:3d:ed:60:02:cc:5a:d8:0d:f7:30:d4:68:ff:fe:9a:32:8d:
52:21:42:6d:f4:1f:47:5c:f2:73:77:90:cd:09:c9:2f:e8:59:
fd:f1:11:ba:fb:2b:89:47:df:ff:2c:cc:86:58:b1:8a:49:a3:
15:00:1d:b4:72:42:ca:92:81:93:f1:22:3f:89:97:b1:55:f2:
a8:21:c0:36:4b:d9:0e:f1:22:04:95:fc:6f:82:90:3d:c5:a2:
b3:2b:4a:8d:fb:d9:53:07:9f:a3:13:fa:1f:52:6d:06:ec:c2:
90:21:41:e8:a1:de:0c:99:a3:97:8e:8e:15:70:83:56:ee:09:
d0:fe:3d:93:f4:b6:c6:d7:b7:f3:77:29:d1:0d:78:f0:20:8b:
1e:34:f4:74:d2:b8:b8:bf:c2:f0:a4:df:c9:33:a8:73:35:4c:
f4:f8:6b:c2:fb:b3:13:3d:e4:fc:25:19:64:09:2d:11:9f:a2:
58:f5:38:ee:6b:62:96:f6:58:e9:4e:79:26:13:19:13:e7:a8:
0a:0c:be:13:62:3f:70:e5:d5:72:1a:32:84:87:91:2a:4b:cb:
7b:39:18:14:9c:35:f9:0c:55:b8:f8:53:11:ea:a9:29:b9:79:
ba:dd:06:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:29 2025 by rpki-client