Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/kKNY8Elx1115-hRu_uLyPEnuUzM.roa
File: kKNY8Elx1115-hRu_uLyPEnuUzM.roa (raw, json)
Hash identifier: HOAEeWbog+2KbebchZA0rQhSUk7s0TFCO+Kimb117J8=
Subject key identifier: 90:A3:58:F0:49:71:D7:5D:79:FA:14:6E:FE:E2:F2:3C:49:EE:53:33
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16C2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kKNY8Elx1115-hRu_uLyPEnuUzM.roa
Signing time: Sat 20 Apr 2024 15:53:31 +0000
ROA not before: Sat 20 Apr 2024 15:53:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5826 (0x16c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 15:53:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=90A358F04971D75D79FA146EFEE2F23C49EE5333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:b8:b3:5d:10:89:73:c9:c8:36:e6:41:4a:
06:0f:27:e1:b2:3b:49:c3:88:fe:69:a1:c3:87:6c:
56:96:e6:d1:ad:4f:76:51:8f:c2:19:ff:16:ee:c5:
b8:00:83:97:3d:9b:b8:de:8c:a5:f1:06:d8:aa:75:
b3:5d:7d:8d:7a:57:18:56:9e:b9:4f:ce:58:c3:f3:
a6:0c:43:ca:72:18:0c:50:29:a9:18:a5:44:0e:97:
d9:b2:f6:b0:50:08:3a:55:df:77:03:d9:64:aa:28:
54:48:d6:17:f0:57:2c:04:a9:d0:d9:9e:43:e6:1e:
43:db:ab:f6:6b:0e:99:a9:a0:1c:78:75:92:6b:92:
52:73:48:50:67:6d:dd:63:ff:48:14:d9:c5:e3:80:
c8:e0:0d:c5:84:72:4b:96:b9:f6:5c:87:6e:cd:66:
2e:9d:3a:1b:3a:6f:24:bd:e9:60:ff:e0:56:39:c6:
36:68:6d:84:42:81:39:98:d7:d1:e9:b8:11:46:c5:
c4:77:a7:fd:8a:92:93:45:d5:ce:86:ca:50:95:fb:
00:72:1e:9a:41:3a:1e:99:03:64:43:c9:2b:ee:06:
55:d9:42:0f:a1:7d:fa:9e:5a:82:5d:f5:af:7a:ce:
17:00:0a:81:32:50:04:1c:15:9f:00:ea:69:68:4d:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A3:58:F0:49:71:D7:5D:79:FA:14:6E:FE:E2:F2:3C:49:EE:53:33
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/kKNY8Elx1115-hRu_uLyPEnuUzM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:10:f3:e0:f1:97:76:de:2b:da:c5:5d:9b:2e:d9:64:de:27:
88:4d:d2:b7:89:3d:49:e1:98:a5:ac:45:39:c1:2f:0e:35:49:
34:6f:de:b4:c1:30:54:56:7a:7c:c0:19:fc:92:e9:17:bd:e1:
55:36:b2:55:3d:4d:5c:0e:02:9d:f7:2d:e7:70:36:e3:ef:28:
5c:69:8a:ec:42:75:e3:f7:e5:38:f0:60:fa:84:ef:4d:e9:47:
a1:80:cc:36:44:b6:3c:91:05:ff:bd:f8:cf:1f:a5:3f:11:39:
e5:a2:25:be:7f:77:f4:7c:c4:e6:f3:f6:71:06:78:53:be:3e:
00:e8:8c:bc:13:3e:65:5d:35:07:45:96:42:89:6e:8e:2f:ed:
e0:d7:b8:8f:27:22:11:3e:3d:67:15:1c:de:68:9c:fe:a7:13:
c5:65:7f:7c:fd:3e:4e:22:bc:b3:f4:e7:bc:73:35:77:58:3c:
be:da:6e:21:58:2f:87:a3:17:b8:5a:76:f7:59:06:ea:10:59:
ad:87:0b:69:45:eb:0e:f0:ca:8a:65:b5:d9:cc:ed:74:63:f1:
6e:a3:65:f3:e1:5c:19:aa:95:51:cd:5c:5d:b9:21:c2:9e:1b:
2d:17:d4:f3:da:9a:b7:e4:99:bb:d8:0a:c0:7f:4e:92:c8:26:
66:07:f4:90
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFsIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MjAx
NTUzMzFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDkwQTM1OEYwNDk3MUQ3
NUQ3OUZBMTQ2RUZFRTJGMjNDNDlFRTUzMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY2rizXRCJc8nINuZBSgYPJ+GyO0nDiP5pocOHbFaW5tGtT3ZR
j8IZ/xbuxbgAg5c9m7jejKXxBtiqdbNdfY16VxhWnrlPzljD86YMQ8pyGAxQKakY
pUQOl9my9rBQCDpV33cD2WSqKFRI1hfwVywEqdDZnkPmHkPbq/ZrDpmpoBx4dZJr
klJzSFBnbd1j/0gU2cXjgMjgDcWEckuWufZch27NZi6dOhs6byS96WD/4FY5xjZo
bYRCgTmY19HpuBFGxcR3p/2KkpNF1c6GylCV+wByHppBOh6ZA2RDySvuBlXZQg+h
ffqeWoJd9a96zhcACoEyUAQcFZ8A6mloTVUHAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUkKNY8Elx1115+hRu/uLyPEnuUzMwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2tLTlk4RWx4MTExNS1o
UnVfdUx5UEVudVV6TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAChDz4PGXdt4r2sVdmy7ZZN4niE3St4k9
SeGYpaxFOcEvDjVJNG/etMEwVFZ6fMAZ/JLpF73hVTayVT1NXA4Cnfct53A24+8o
XGmK7EJ14/flOPBg+oTvTelHoYDMNkS2PJEF/734zx+lPxE55aIlvn939HzE5vP2
cQZ4U74+AOiMvBM+ZV01B0WWQoluji/t4Ne4jyciET49ZxUc3mic/qcTxWV/fP0+
TiK8s/TnvHM1d1g8vtpuIVgvh6MXuFp291kG6hBZrYcLaUXrDvDKimW12cztdGPx
bqNl8+FcGaqVUc1cXbkhwp4bLRfU89qat+SZu9gKwH9OksgmZgf0kA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:52 2025 by rpki-client