Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/lfRtioNtqMbHRD_8tntMj58LG0A.roa
File: lfRtioNtqMbHRD_8tntMj58LG0A.roa (raw, json)
Hash identifier: 5XbGunV4wtdvGZl4xLIiAnfFcnmtTuv+OdliFuDPWHw=
Subject key identifier: 95:F4:6D:8A:83:6D:A8:C6:C7:44:3F:FC:B6:7B:4C:8F:9F:0B:1B:40
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D12
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/lfRtioNtqMbHRD_8tntMj58LG0A.roa
Signing time: Tue 07 May 2024 11:54:19 +0000
ROA not before: Tue 07 May 2024 11:54:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7442 (0x1d12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 11:54:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=95F46D8A836DA8C6C7443FFCB67B4C8F9F0B1B40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:29:c0:cf:aa:c2:05:ef:b9:d1:a8:ee:26:
44:75:08:83:7a:31:3a:78:b8:01:3d:75:8b:20:72:
be:5c:f9:ec:37:8e:8a:6c:2f:62:d2:35:5f:51:e6:
9e:22:ba:4f:77:83:65:23:ff:1c:ec:b0:b4:04:13:
35:84:6d:9a:92:84:56:0c:c1:91:a1:88:f8:b9:b4:
81:3e:02:53:5a:90:d9:73:2c:44:61:a8:3f:91:a1:
62:7c:aa:cb:e7:c9:5b:b1:2f:f4:9a:b2:b6:d3:c0:
ad:ef:07:73:ef:70:f6:41:d0:5a:d8:28:fb:f3:dd:
5c:f8:ad:c7:14:a8:d7:2e:cd:22:5f:26:7f:26:9a:
c7:42:15:06:73:24:7a:7e:8b:6d:fc:d5:a8:e9:27:
7c:24:b4:3c:07:96:fe:42:f9:bc:14:59:a3:08:ad:
d4:d5:4d:e5:3b:32:6a:2b:0d:82:48:6c:02:e4:67:
8f:87:e9:ee:48:eb:1a:a6:c8:b6:61:d8:5d:df:cb:
35:8a:1f:1a:7c:7d:4e:68:59:44:d4:47:62:68:03:
17:02:18:98:68:2d:34:ef:8b:36:36:d4:d9:70:54:
4a:7d:2a:e9:dd:f9:a6:62:77:0d:2a:37:2c:44:d5:
09:25:23:e7:97:93:37:ad:70:8d:3c:df:2a:c1:02:
e3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F4:6D:8A:83:6D:A8:C6:C7:44:3F:FC:B6:7B:4C:8F:9F:0B:1B:40
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/lfRtioNtqMbHRD_8tntMj58LG0A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d4:f1:74:89:07:0f:d2:cb:dd:de:ab:16:01:f4:0f:c7:4d:98:
5d:6b:ae:66:29:10:b0:fc:57:50:14:96:b1:73:e9:ea:e8:b6:
77:d1:e9:c9:4c:9f:a3:48:ec:54:54:ce:58:f6:1c:1e:50:3b:
cb:f0:99:4f:3b:b9:99:4c:ec:53:0a:8d:58:ce:43:6a:e9:68:
e3:ff:93:38:16:b3:6f:d5:d6:77:20:87:eb:50:aa:29:ae:d7:
d5:b2:f3:c8:2d:24:46:e8:5d:70:e0:42:06:4b:53:41:1d:4a:
e3:5e:47:34:1b:a9:27:a2:15:31:da:d3:7d:72:0a:fb:01:02:
b3:5f:71:58:a6:46:8f:a7:ac:72:89:5f:95:cb:d2:17:4f:11:
4f:70:3f:b4:fa:48:89:47:a2:ce:2e:97:7a:4d:bc:b4:9e:ca:
01:56:62:97:5c:24:d3:fc:7c:02:50:22:c9:ef:83:98:9f:64:
e3:48:ea:5b:22:ca:ee:32:14:fb:16:1f:bd:29:cc:5b:bf:55:
61:1a:05:6b:5d:cb:65:fa:a2:3c:d5:bc:9a:cb:27:b1:ff:c7:
f6:5e:27:87:29:db:89:a8:7c:5c:cb:1f:6f:84:26:ec:44:89:
25:20:01:87:fd:81:63:50:30:bd:b5:d8:dd:1a:9f:ed:3d:ba:
ad:59:fa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:39 2025 by rpki-client