Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/nM7nOhvvHdfhr4CO2d_E51taw38.roa
File: nM7nOhvvHdfhr4CO2d_E51taw38.roa (raw, json)
Hash identifier: fiouYjv/H8lpxwDNS7tVy1wCKY8S3VAR9XhkFhEICzA=
Subject key identifier: 9C:CE:E7:3A:1B:EF:1D:D7:E1:AF:80:8E:D9:DF:C4:E7:5B:5A:C3:7F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1532
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nM7nOhvvHdfhr4CO2d_E51taw38.roa
Signing time: Tue 16 Apr 2024 11:54:17 +0000
ROA not before: Tue 16 Apr 2024 11:54:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5426 (0x1532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 11:54:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9CCEE73A1BEF1DD7E1AF808ED9DFC4E75B5AC37F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:29:e5:9a:ad:90:d0:46:b6:f7:b8:7b:81:
f6:3a:7f:09:64:fd:9a:4c:33:66:80:09:75:5f:85:
fd:84:3f:33:e2:3a:75:e2:6f:7b:eb:68:c8:66:e3:
ad:94:8d:d2:66:3d:b7:c2:ce:e3:32:e4:54:17:fe:
39:36:5f:e2:19:6a:0a:5e:9d:19:c5:a1:ab:3f:c6:
b4:59:d7:c9:8f:d4:fe:45:ce:99:b5:14:46:ad:07:
36:e0:96:6d:44:03:d8:63:6c:0c:dd:43:9c:e6:b6:
70:51:59:9c:e5:2e:1e:38:83:1e:68:b0:07:21:da:
c9:9b:1c:ab:c5:17:ea:cd:98:ce:2f:17:41:59:c2:
97:84:b3:02:f9:f3:04:e5:ea:53:28:dc:5f:20:f6:
bc:60:42:5e:e4:10:7f:49:a7:f9:89:93:ff:4d:7f:
29:8c:e4:e5:b2:40:e6:40:1c:e3:20:83:9a:5f:9b:
b4:62:68:f1:7c:cf:0e:4a:d8:75:42:3c:a5:e9:11:
51:2c:ff:6d:4c:95:44:ea:92:74:d6:1c:55:24:90:
e2:42:e6:da:a7:ff:95:76:15:4b:2e:8a:5d:21:ac:
b9:5a:78:2e:2c:c6:38:17:1a:25:c6:a2:76:4c:c3:
c5:1b:fa:1d:69:b7:db:0d:50:c8:2a:1d:6e:38:c5:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CE:E7:3A:1B:EF:1D:D7:E1:AF:80:8E:D9:DF:C4:E7:5B:5A:C3:7F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nM7nOhvvHdfhr4CO2d_E51taw38.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:a7:c2:ba:22:35:09:db:f2:ae:43:1a:ca:42:ee:30:cf:94:
b8:b8:49:a2:32:c1:49:da:54:8d:5a:51:2c:d9:29:1f:98:1f:
df:3e:a1:29:32:8f:10:89:26:3f:cd:bd:71:b7:eb:04:27:20:
c4:6b:e7:ac:7d:28:fb:85:9f:59:38:c7:72:d9:b1:7f:24:84:
34:3b:3b:9d:53:86:c6:a0:e9:ba:85:fd:c2:e8:f4:7a:63:82:
2d:1d:22:b5:05:de:69:c5:d4:33:eb:d2:a6:9c:32:74:10:7d:
a5:2e:fa:bf:f4:3b:4d:24:a6:a6:9b:3a:4a:ab:78:1d:b8:df:
21:66:2a:83:b9:d4:70:bc:04:5f:b9:f2:de:01:de:33:bf:f2:
54:20:d7:72:a7:19:48:0e:8e:32:e4:0f:9d:25:b2:ad:90:45:
b7:2a:8f:e2:e4:3b:59:97:4d:93:c8:33:a1:34:46:20:29:63:
1e:10:b5:08:39:4e:dc:0d:a6:cc:12:45:e8:63:36:14:8f:4b:
88:39:2b:4d:76:66:8c:bf:fa:d8:31:e3:73:1e:e9:84:d5:a6:
48:1f:b0:90:13:e8:13:91:71:06:7e:5e:e5:c1:fd:bf:22:5d:
c2:20:07:4f:51:ce:65:88:a2:9b:b0:da:c6:7b:7a:07:db:71:
46:67:71:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:52 2025 by rpki-client