Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/gVOX2iT49jOaXa_MdZ_5WWYCTiU.roa
File: gVOX2iT49jOaXa_MdZ_5WWYCTiU.roa (raw, json)
Hash identifier: env349q914/Qbf/Z/+RroCQ1uxaJBQnxofsIL2YmmIQ=
Subject key identifier: 81:53:97:DA:24:F8:F6:33:9A:5D:AF:CC:75:9F:F9:59:66:02:4E:25
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B46
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/gVOX2iT49jOaXa_MdZ_5WWYCTiU.roa
Signing time: Thu 02 May 2024 16:54:08 +0000
ROA not before: Thu 02 May 2024 16:54:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6982 (0x1b46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 16:54:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=815397DA24F8F6339A5DAFCC759FF95966024E25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:db:8f:ec:db:7b:b0:06:88:4d:c4:d5:85:
34:9b:05:c4:e4:1b:b7:f8:24:de:42:f6:96:70:44:
05:7f:17:1c:94:02:d5:11:50:26:3f:57:f4:29:db:
54:52:a0:fc:ad:9d:d9:ac:b6:a4:cb:18:ad:cc:7a:
ff:08:e3:41:4a:0d:62:b4:bc:c8:73:05:05:d4:c2:
73:f2:13:9b:7d:85:ea:9a:d1:f2:5b:a6:e8:cc:ea:
8a:b1:93:1e:8b:44:78:45:ba:40:c3:0a:c0:42:06:
73:4a:3a:53:44:44:94:1c:9e:c6:fd:9a:0d:9f:61:
90:c9:5c:34:8d:13:fa:64:5d:d8:eb:30:86:5d:91:
07:7b:7d:73:69:23:86:e0:f4:b5:18:d1:7b:02:35:
a6:7a:af:e9:1f:75:f9:3b:b1:b5:fd:ba:56:d8:0e:
de:e9:d1:7c:aa:7e:fe:c9:f0:9c:99:fa:47:01:db:
5f:61:ac:23:85:09:ca:6b:b6:b2:df:0a:52:4b:69:
7a:11:06:46:5b:78:97:50:00:ac:30:6b:f7:8a:67:
32:81:2e:71:98:8e:1d:0c:83:79:17:e3:d9:88:3e:
7a:d4:ab:80:9c:a4:4d:68:04:2a:23:0f:a3:88:08:
5d:56:74:be:fc:82:64:8f:b4:c9:d5:d7:3c:bf:e3:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:53:97:DA:24:F8:F6:33:9A:5D:AF:CC:75:9F:F9:59:66:02:4E:25
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/gVOX2iT49jOaXa_MdZ_5WWYCTiU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:db:2d:43:9e:5f:d4:4a:d5:e7:bb:47:b7:1b:2f:27:b6:6a:
b4:8c:f7:e5:b7:5d:2c:16:5f:3b:30:9e:ec:fb:7d:2f:38:4a:
48:54:6d:e3:16:b5:82:e1:b2:71:4f:c9:f1:5d:ec:90:8d:ae:
b7:41:66:a2:93:39:7b:0a:e0:6f:77:69:a3:f7:b8:07:81:de:
10:55:35:c3:d8:e8:a1:80:5c:b9:60:f1:e9:0e:a0:31:cf:08:
e8:94:30:11:1c:d4:9c:c8:fd:41:af:fc:92:f2:fa:2b:be:b2:
2e:05:1b:21:c8:aa:d7:44:40:29:ca:d1:e9:f8:49:20:9f:3d:
6a:7b:af:bf:85:e9:02:73:ba:84:13:a7:65:9c:3c:a7:cf:37:
d9:3e:1c:31:33:6c:43:f7:f1:59:71:c9:1c:16:87:b0:28:09:
4e:10:17:98:40:0c:9e:ba:5d:e4:6a:75:35:f6:24:da:59:0f:
78:e0:5f:85:99:72:82:96:c8:05:fd:f1:c3:bc:45:25:9d:9b:
4d:02:cd:dd:cc:2b:2d:78:52:93:8d:78:ae:0c:a2:68:68:26:
53:77:64:fa:21:a1:c9:f4:a5:2e:fd:fb:e2:12:2e:e4:d3:25:
aa:87:e8:a0:fd:9e:16:96:cd:66:84:b3:9a:08:fe:a3:b9:e0:
c2:1f:cd:90
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICG0YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDIx
NjU0MDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDgxNTM5N0RBMjRGOEY2
MzM5QTVEQUZDQzc1OUZGOTU5NjYwMjRFMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC26duP7Nt7sAaITcTVhTSbBcTkG7f4JN5C9pZwRAV/FxyUAtUR
UCY/V/Qp21RSoPytndmstqTLGK3Mev8I40FKDWK0vMhzBQXUwnPyE5t9heqa0fJb
pujM6oqxkx6LRHhFukDDCsBCBnNKOlNERJQcnsb9mg2fYZDJXDSNE/pkXdjrMIZd
kQd7fXNpI4bg9LUY0XsCNaZ6r+kfdfk7sbX9ulbYDt7p0Xyqfv7J8JyZ+kcB219h
rCOFCcprtrLfClJLaXoRBkZbeJdQAKwwa/eKZzKBLnGYjh0Mg3kX49mIPnrUq4Cc
pE1oBCojD6OICF1WdL78gmSPtMnV1zy/420HAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUgVOX2iT49jOaXa/MdZ/5WWYCTiUwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2dWT1gyaVQ0OWpPYVhh
X01kWl81V1dZQ1RpVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAa9stQ55f1ErV57tHtxsvJ7ZqtIz35bdd
LBZfOzCe7Pt9LzhKSFRt4xa1guGycU/J8V3skI2ut0FmopM5ewrgb3dpo/e4B4He
EFU1w9jooYBcuWDx6Q6gMc8I6JQwERzUnMj9Qa/8kvL6K76yLgUbIciq10RAKcrR
6fhJIJ89anuvv4XpAnO6hBOnZZw8p8832T4cMTNsQ/fxWXHJHBaHsCgJThAXmEAM
nrpd5Gp1NfYk2lkPeOBfhZlygpbIBf3xw7xFJZ2bTQLN3cwrLXhSk414rgyiaGgm
U3dk+iGhyfSlLv374hIu5NMlqofooP2eFpbNZoSzmgj+o7ngwh/NkA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:18 2025 by rpki-client