Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ch5SSYDz4KzCf-BMS83D4XfRhEo.roa
File: ch5SSYDz4KzCf-BMS83D4XfRhEo.roa (raw, json)
Hash identifier: A8hM3lLynpyZJEbIf/ktbndopXmGD0Gw3Mo5hW+yr9w=
Subject key identifier: 72:1E:52:49:80:F3:E0:AC:C2:7F:E0:4C:4B:CD:C3:E1:77:D1:84:4A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C16
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ch5SSYDz4KzCf-BMS83D4XfRhEo.roa
Signing time: Sat 04 May 2024 20:54:52 +0000
ROA not before: Sat 04 May 2024 20:54:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7190 (0x1c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 4 20:54:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=721E524980F3E0ACC27FE04C4BCDC3E177D1844A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:ad:0f:03:78:2a:b3:58:49:df:c6:2f:e3:
32:39:5d:40:32:47:ba:20:63:fd:ee:e8:69:d5:80:
4b:36:0b:53:37:39:ff:02:c5:b4:bc:7a:22:0d:9c:
1a:58:28:64:14:76:03:ed:b4:26:c1:93:a6:e8:b9:
ae:65:38:15:db:83:cb:79:4e:c2:e6:ea:74:d1:73:
6e:70:2e:15:5b:7d:5d:eb:e5:f8:77:c2:4b:80:2f:
c5:bd:95:e4:2e:b2:81:b8:55:8b:43:ab:15:55:52:
45:5a:8c:33:a9:f9:f9:3a:d2:01:64:42:c1:f4:20:
a8:e5:66:84:a5:22:69:67:42:ff:01:e2:33:9e:71:
39:8a:b1:31:51:9a:83:6a:c8:92:ad:fa:95:1b:b8:
ff:3e:f1:a1:c6:d5:16:9d:5a:76:fb:a2:00:b2:db:
0c:41:bc:d7:48:6b:10:f3:6f:3e:e0:d7:f9:75:20:
14:c3:29:85:4a:bd:bd:61:2e:d9:b7:b8:b3:8d:ce:
1c:33:55:c6:e5:06:8e:7f:ef:68:d5:36:34:bd:0c:
33:42:1a:ab:60:72:f1:ac:7f:a5:1b:c1:ad:07:d3:
eb:56:5a:41:9e:be:f4:c3:32:d9:43:fb:20:7e:da:
44:1a:f0:33:00:2a:76:a6:47:cb:62:45:87:08:5d:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1E:52:49:80:F3:E0:AC:C2:7F:E0:4C:4B:CD:C3:E1:77:D1:84:4A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ch5SSYDz4KzCf-BMS83D4XfRhEo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:49:55:e3:f4:c7:83:ba:73:53:6d:7c:0a:3e:a6:31:30:e7:
4e:14:43:37:35:57:a7:e4:45:04:9d:21:ee:1a:05:b9:e7:19:
3b:3f:82:f2:f5:b9:4f:05:d3:96:e0:f4:fe:eb:c6:42:b3:67:
40:f2:45:2e:41:2f:f0:f0:9a:05:f6:3d:3a:fe:94:04:bd:fa:
b0:cd:e7:d6:f0:35:dd:cf:83:1b:a5:67:36:c5:23:3e:cd:b6:
92:e2:39:32:a8:f6:9b:cb:52:8c:d4:a7:c7:a6:1e:31:af:30:
23:1e:9a:7d:0d:c5:48:66:2e:10:39:0e:5f:1f:4b:99:e8:a6:
1b:09:92:66:f3:4c:42:5f:44:b2:06:06:0c:b2:c2:6d:94:83:
56:96:4c:ce:26:28:87:2a:89:51:ba:72:51:75:09:0c:4b:19:
7d:1e:3a:39:06:2f:05:20:2b:4b:db:08:58:a3:60:cb:dc:b2:
4e:4d:dc:b1:9a:92:16:d5:55:42:30:f1:0c:00:0e:e1:66:00:
4b:ec:4e:5b:0b:2d:20:5e:d5:f1:e5:90:6d:33:25:bc:90:98:
84:81:64:a0:c0:3c:51:76:46:8d:44:2e:f7:98:05:39:48:69:
c3:ce:ed:1e:0f:d8:9c:31:f5:55:a8:01:02:35:19:97:f5:c2:
c9:bd:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:02:21 2025 by rpki-client