Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/b0IG2jmHr3iatWohdUi7ddBC1hY.roa
File: b0IG2jmHr3iatWohdUi7ddBC1hY.roa (raw, json)
Hash identifier: EN0jotqrASPfDrNquVNKgsnCc4Bv8lJvelTzad43CoA=
Subject key identifier: 6F:42:06:DA:39:87:AF:78:9A:B5:6A:21:75:48:BB:75:D0:42:D6:16
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 162E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/b0IG2jmHr3iatWohdUi7ddBC1hY.roa
Signing time: Fri 19 Apr 2024 02:53:27 +0000
ROA not before: Fri 19 Apr 2024 02:53:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5678 (0x162e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 02:53:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6F4206DA3987AF789AB56A217548BB75D042D616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:71:37:48:23:bc:00:d8:94:38:bc:54:a9:
3a:aa:4e:47:c3:54:3e:ea:cc:21:6b:50:b4:37:52:
8d:1a:86:d0:a8:c2:7f:41:af:96:f4:eb:7b:62:e2:
a7:e0:1f:09:f2:18:7c:9c:88:31:7b:89:9a:6e:3d:
b8:a6:d2:cc:48:a2:b8:e8:15:47:e1:03:a2:80:bb:
80:b1:ad:4a:2b:95:65:98:5e:f2:55:08:59:90:17:
35:2a:29:09:8c:cc:93:b0:29:a0:9b:74:10:f8:1d:
34:61:f3:ef:10:9a:33:a5:fc:34:00:5c:29:19:8a:
63:29:ec:55:3b:c1:e6:4b:b7:a0:d0:34:3f:86:d4:
93:c9:6b:08:b5:f1:7f:00:c7:b7:5e:5e:8c:9a:84:
58:eb:eb:5d:be:10:da:e8:5f:df:c2:0b:cc:5e:b7:
06:fe:ae:4d:3a:7d:5c:2e:97:b5:1c:73:85:b1:6f:
c6:7c:16:03:26:5d:e6:4a:0e:85:5d:1c:94:a5:76:
3b:7d:70:0d:ad:54:c1:16:84:5e:0f:f7:06:6a:e7:
29:1d:65:30:68:46:ba:4e:0d:de:ea:c2:e1:e1:ab:
e7:e2:8d:2d:0a:e5:ca:86:6e:ec:5d:7f:72:27:39:
3d:ce:de:63:59:c3:b4:7d:ae:d5:26:a2:9d:9f:9d:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:42:06:DA:39:87:AF:78:9A:B5:6A:21:75:48:BB:75:D0:42:D6:16
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/b0IG2jmHr3iatWohdUi7ddBC1hY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:c0:dd:5d:30:ed:de:e8:34:56:08:19:a7:d9:61:c0:09:34:
e7:17:22:92:e1:5b:4e:46:00:56:89:54:b3:71:6d:25:53:6e:
57:a6:90:4b:da:73:99:98:3f:e5:46:7b:f7:02:ec:7e:9f:7b:
9b:1e:4e:ea:82:36:14:81:f3:2e:9c:64:32:a5:9a:94:f6:b1:
8e:90:b0:84:bc:8d:e9:62:d7:3c:e5:c6:67:a9:17:bc:7e:f0:
05:96:29:af:b8:06:2d:d7:da:df:20:f2:5b:bd:b9:63:9d:01:
df:23:73:fd:1a:14:7f:2a:a2:70:9f:5c:63:5f:c8:10:d9:d8:
17:4f:26:81:30:9e:00:72:23:66:7f:52:4a:f6:30:51:1b:21:
0b:68:45:80:ff:62:20:95:b5:06:24:88:80:3e:b7:93:cc:8a:
63:12:b2:70:44:94:22:ad:49:99:d2:86:c1:31:37:6b:cb:44:
32:ab:27:1a:e1:68:c0:a9:45:41:d5:a4:87:2a:f6:63:9d:97:
0e:c2:8b:9b:21:ce:7e:5e:18:60:75:2e:1a:cc:04:3a:86:3c:
92:b0:a2:31:c1:47:63:dd:5e:af:c5:60:3e:c8:22:e6:75:51:
b9:09:52:d8:d4:52:27:20:30:4b:55:7f:43:42:f2:73:64:10:
6d:86:29:a8
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFi4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTkw
MjUzMjdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZGNDIwNkRBMzk4N0FG
Nzg5QUI1NkEyMTc1NDhCQjc1RDA0MkQ2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvInE3SCO8ANiUOLxUqTqqTkfDVD7qzCFrULQ3Uo0ahtCown9B
r5b063ti4qfgHwnyGHyciDF7iZpuPbim0sxIorjoFUfhA6KAu4CxrUorlWWYXvJV
CFmQFzUqKQmMzJOwKaCbdBD4HTRh8+8QmjOl/DQAXCkZimMp7FU7weZLt6DQND+G
1JPJawi18X8Ax7deXoyahFjr612+ENroX9/CC8xetwb+rk06fVwul7Ucc4Wxb8Z8
FgMmXeZKDoVdHJSldjt9cA2tVMEWhF4P9wZq5ykdZTBoRrpODd7qwuHhq+fijS0K
5cqGbuxdf3InOT3O3mNZw7R9rtUmop2fnZN5AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUb0IG2jmHr3iatWohdUi7ddBC1hYwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2IwSUcyam1IcjNpYXRX
b2hkVWk3ZGRCQzFoWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAocDdXTDt3ug0VggZp9lhwAk05xcikuFb
TkYAVolUs3FtJVNuV6aQS9pzmZg/5UZ79wLsfp97mx5O6oI2FIHzLpxkMqWalPax
jpCwhLyN6WLXPOXGZ6kXvH7wBZYpr7gGLdfa3yDyW725Y50B3yNz/RoUfyqicJ9c
Y1/IENnYF08mgTCeAHIjZn9SSvYwURshC2hFgP9iIJW1BiSIgD63k8yKYxKycESU
Iq1JmdKGwTE3a8tEMqsnGuFowKlFQdWkhyr2Y52XDsKLmyHOfl4YYHUuGswEOoY8
krCiMcFHY91er8VgPsgi5nVRuQlS2NRSJyAwS1V/Q0Lyc2QQbYYpqA==
-----END CERTIFICATE-----
Generated at Fri Apr 19 05:03:20 2024 by rpki-client on console-fra.rpki-client.org