Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/RFatuXkAk1qV7vh2r5rrgv5Gl9o.roa
File: RFatuXkAk1qV7vh2r5rrgv5Gl9o.roa (raw, json)
Hash identifier: T9BTQ1cSAYKT6rJ8DswklUaWQsADBBLAlg0V4yekVDk=
Subject key identifier: 44:56:AD:B9:79:00:93:5A:95:EE:F8:76:AF:9A:EB:82:FE:46:97:DA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BB8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RFatuXkAk1qV7vh2r5rrgv5Gl9o.roa
Signing time: Fri 03 May 2024 21:24:13 +0000
ROA not before: Fri 03 May 2024 21:24:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7096 (0x1bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 21:24:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4456ADB97900935A95EEF876AF9AEB82FE4697DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:92:f1:5d:8a:af:eb:03:6b:d8:a3:24:ad:
c0:d2:b2:00:23:3b:ae:2c:0f:80:1b:66:dd:c7:4b:
ce:5d:66:05:e7:55:2b:84:06:99:d3:7b:ea:34:aa:
ce:cb:31:2d:1c:fe:d0:48:32:0c:1d:0b:08:c5:15:
5c:e1:ef:67:51:eb:81:49:a3:fa:0f:94:e6:2f:19:
c0:e0:1e:5a:d8:19:bf:d8:dc:1e:67:cc:ff:eb:84:
d8:d5:bc:65:a9:e4:ff:4b:2f:7f:17:54:32:f1:14:
d8:11:e4:3a:7e:ef:5b:83:98:54:ed:00:7f:e0:da:
59:27:47:24:66:e1:eb:89:52:82:60:28:a1:78:a8:
b6:f7:8f:b7:02:6d:e0:5c:68:bd:ad:a2:d0:53:1b:
06:35:99:3f:5f:b5:8f:02:bc:53:6a:49:dd:10:82:
60:dc:a5:b0:4a:9c:ab:c0:5e:9f:3e:42:8c:de:58:
74:27:10:11:16:2c:34:69:de:2f:1e:31:03:90:f8:
89:43:44:ce:f5:e6:31:2b:a7:52:8d:8f:fb:d4:c5:
c4:35:93:2c:05:b6:04:bf:9c:cd:26:cf:e4:17:52:
8a:7a:a1:28:fe:ac:46:95:f3:37:98:ff:e9:67:50:
11:ee:ff:9e:a0:44:e1:75:3a:a3:be:ed:4c:70:6c:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:56:AD:B9:79:00:93:5A:95:EE:F8:76:AF:9A:EB:82:FE:46:97:DA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RFatuXkAk1qV7vh2r5rrgv5Gl9o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:ca:b2:f6:5a:b8:9d:40:32:d0:60:21:c9:1c:c8:7c:6a:e4:
00:a6:f4:01:1e:92:46:48:d6:d6:b6:44:29:e6:43:e9:09:35:
fe:1d:99:89:4e:80:d0:90:f2:50:f1:6a:e0:23:7e:dd:51:72:
a3:89:38:f5:93:07:db:81:47:e8:ef:ea:f5:e0:c9:da:3c:ce:
3c:7a:05:49:7c:a8:16:86:b9:1e:5b:fc:34:7a:22:01:b7:e1:
46:eb:e7:cc:73:84:7f:4a:6e:63:d9:cd:8d:2b:d7:b2:60:ea:
5c:37:f2:0b:ce:4e:45:90:75:ca:8c:40:b8:49:cb:c9:22:98:
7e:da:e4:0d:48:e8:1e:64:4c:cf:99:d1:16:76:12:df:f8:e0:
01:77:52:99:e7:b0:f9:44:ff:b5:4d:55:e6:4d:05:99:4a:d7:
74:d3:46:36:0e:39:40:91:50:8f:b5:73:e8:59:1f:77:05:b1:
2a:b6:3d:6c:ad:4c:ec:b7:dc:47:de:aa:e4:f7:00:14:0d:41:
a7:46:39:98:c1:b2:12:02:b4:7c:a0:d0:81:d5:ba:c3:ac:2e:
20:5f:0b:73:cd:56:ab:6b:08:58:a8:14:b8:01:95:84:9a:ba:
c7:49:0a:2d:74:df:a7:c4:e4:30:fa:62:4d:2e:c5:fa:e7:27:
05:87:ab:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:07 2025 by rpki-client