Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/_9qMqB_KwSDQZDC55KBt11LK5Ks.roa
File: _9qMqB_KwSDQZDC55KBt11LK5Ks.roa (raw, json)
Hash identifier: dUWMNPuo9Dl7W0W1xvsafTs4Nt/48BnbhjawAMxg6SU=
Subject key identifier: FF:DA:8C:A8:1F:CA:C1:20:D0:64:30:B9:E4:A0:6D:D7:52:CA:E4:AB
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E54
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_9qMqB_KwSDQZDC55KBt11LK5Ks.roa
Signing time: Fri 29 Mar 2024 04:22:28 +0000
ROA not before: Fri 29 Mar 2024 04:22:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3668 (0xe54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 29 04:22:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FFDA8CA81FCAC120D06430B9E4A06DD752CAE4AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:22:dd:bd:02:53:e9:ec:48:f8:c7:ea:90:
75:29:43:09:32:77:8d:0c:ad:c1:1f:e5:ba:0f:d9:
5a:6e:60:71:b7:0a:38:64:01:f4:bf:e8:cf:ac:3d:
fe:e9:99:38:e7:c2:d6:da:d6:84:9f:79:03:80:cc:
5a:1c:fd:e2:d0:c5:28:9d:49:86:bb:50:b1:1b:05:
19:dc:f6:4b:48:89:21:22:19:db:df:0d:31:d9:9a:
25:c0:85:e2:aa:6b:f4:41:ae:70:69:16:36:48:fa:
d9:06:5a:4c:59:2b:41:93:e9:d7:23:5e:fc:1a:33:
48:a1:3d:02:50:1d:68:30:83:48:b0:f7:a5:34:7c:
82:9b:78:dd:09:35:78:ea:45:17:e6:90:04:4b:23:
09:9e:28:07:2d:c7:d6:a1:ab:9f:6e:c1:27:c9:d1:
46:f7:76:ef:cc:04:d5:ad:31:c7:c2:29:75:69:68:
d4:54:a7:d6:e8:25:2b:0e:ac:a6:13:99:be:7e:f7:
3f:8a:80:20:c9:98:01:bc:b9:ce:cd:cf:b0:9a:94:
1c:2d:9f:89:37:db:3c:fe:67:0b:6a:0b:6e:c0:f0:
2b:2b:ea:9a:62:32:d4:e7:7e:46:ad:34:20:76:21:
e1:d2:8a:2b:a8:6f:02:31:23:b4:9a:3c:c4:ec:f3:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DA:8C:A8:1F:CA:C1:20:D0:64:30:B9:E4:A0:6D:D7:52:CA:E4:AB
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_9qMqB_KwSDQZDC55KBt11LK5Ks.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:fe:78:78:fa:a0:7c:d5:96:21:09:e6:71:e4:f4:3b:e0:ab:
b5:81:20:e3:da:86:74:66:df:41:b6:ff:6f:f3:03:7e:39:9c:
79:1c:89:cb:09:1b:6e:50:64:22:62:6b:a1:09:b0:d6:66:3b:
e0:14:cd:08:f8:19:af:d8:76:86:8f:9b:65:66:84:8a:e3:b0:
bd:2f:b4:b5:42:4c:fb:9e:4c:d3:84:40:e1:d7:4e:e5:2c:04:
7c:16:7e:e7:98:6c:87:2b:d9:b8:bd:4c:60:a6:b0:1d:c9:64:
d5:1f:58:c1:1c:5a:e2:8d:5a:8d:dd:e7:cd:c9:b4:49:62:bc:
63:78:b2:83:53:cf:76:b2:81:98:4f:e7:92:bb:72:dd:5f:af:
e6:7f:3a:03:30:c0:5a:a9:55:ac:23:cf:51:d9:05:cd:6b:fd:
59:c7:95:f4:f6:63:3e:0e:7e:bc:58:a9:57:05:2b:fa:bb:1e:
8f:39:66:4a:1f:85:31:49:3c:8a:1b:89:2c:65:2f:1f:bf:4a:
29:78:44:c3:6a:19:fc:72:25:06:f2:89:b8:d0:be:b1:1f:2a:
a5:2a:6a:32:03:79:fa:7a:40:c6:b5:44:07:de:a9:e1:74:5b:
45:70:5d:d8:a4:39:9e:8a:2f:da:ae:bb:0d:c3:7e:96:34:1a:
69:e6:16:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:46 2025 by rpki-client