Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ni6N465jr_a5Q7TYWc2ZfODf7Yk.roa
File: ni6N465jr_a5Q7TYWc2ZfODf7Yk.roa (raw, json)
Hash identifier: qKJH++snPp3OMgEgdsVEtRmvs3PWZIYfYGZz1yr4iEc=
Subject key identifier: 9E:2E:8D:E3:AE:63:AF:F6:B9:43:B4:D8:59:CD:99:7C:E0:DF:ED:89
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E3A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ni6N465jr_a5Q7TYWc2ZfODf7Yk.roa
Signing time: Thu 28 Mar 2024 21:52:34 +0000
ROA not before: Thu 28 Mar 2024 21:52:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3642 (0xe3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 28 21:52:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9E2E8DE3AE63AFF6B943B4D859CD997CE0DFED89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:6e:59:29:b5:a6:85:87:de:b1:a8:c4:bf:
35:c0:bc:4e:7b:92:34:95:b3:ba:2f:88:d8:f6:31:
29:00:65:be:2b:6f:b4:e5:cb:3d:e6:51:0e:b4:4c:
6e:0a:14:f4:1d:97:7c:32:0b:a1:36:e5:91:14:a6:
f5:60:d6:3a:f9:10:3c:66:23:4c:12:ad:41:de:9f:
a0:24:c5:a5:60:5b:2c:dd:fd:5b:e8:ae:26:41:d1:
cf:b8:eb:b6:49:65:b5:c7:8a:6d:28:f8:5d:74:06:
25:28:5a:37:9f:a6:06:2b:fb:a1:43:99:e2:51:e4:
5b:7f:b2:6b:c7:c2:a4:d2:9e:e4:6e:41:49:c0:d9:
b8:d5:e9:ca:95:25:38:b5:67:f9:e6:cd:98:ef:20:
da:d1:7a:21:4a:3c:1c:4e:e6:e3:f8:9a:15:08:9f:
75:52:a4:41:9f:91:40:37:29:b5:d2:ea:a8:ac:28:
fb:7e:01:38:ea:58:75:43:a8:c2:ea:9a:c5:4f:bf:
44:ea:15:18:92:24:bd:64:61:10:c8:88:5c:aa:54:
83:45:56:41:06:71:e3:4a:8d:fc:26:40:d9:41:2e:
0f:13:c9:6e:a3:49:05:66:30:25:6b:4c:2d:f4:30:
db:c7:5a:80:1a:4b:d9:0e:c0:33:db:94:8b:c5:0b:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2E:8D:E3:AE:63:AF:F6:B9:43:B4:D8:59:CD:99:7C:E0:DF:ED:89
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ni6N465jr_a5Q7TYWc2ZfODf7Yk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:48:67:2a:85:9c:f1:70:a5:9c:91:18:7d:4c:a0:45:80:20:
00:a5:0d:07:d6:1c:b7:dd:ec:13:f1:9b:b8:3d:e0:b3:85:87:
01:03:a8:dd:29:1b:ed:d7:5a:c2:f1:44:ee:3e:dd:50:cc:fa:
5f:f5:0d:46:55:14:ed:63:37:f1:f0:6e:62:d1:65:5c:83:ac:
60:f0:7f:28:df:3d:a3:bb:7b:0c:2d:9d:b9:4a:63:4a:c8:5f:
5f:e7:81:e8:47:1c:c1:92:26:63:d2:d5:bf:96:52:2b:80:33:
37:2b:9e:47:05:e2:34:17:64:57:24:ef:83:b1:33:b6:29:80:
88:76:7a:b0:5b:91:c1:f9:37:68:db:26:90:6b:5b:c9:dc:92:
2e:e4:55:99:bc:dd:50:03:8e:04:9a:e2:66:de:13:85:0a:1c:
1e:78:cd:1a:58:d7:ac:14:2a:cc:43:4e:07:ca:47:33:62:a8:
76:65:f9:f4:9b:37:9b:66:19:c4:ca:20:dd:16:65:9a:6f:eb:
82:53:d3:39:e7:5b:8a:bb:f1:7d:b2:21:80:1b:01:96:3f:79:
6c:ab:39:e9:1d:29:ae:26:e6:39:4c:fe:4b:1a:7f:56:5c:2e:
7a:86:04:7b:91:69:e9:40:3f:ff:4f:72:5d:4a:d4:69:44:8d:
cf:94:ad:d4
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMjgy
MTUyMzRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDlFMkU4REUzQUU2M0FG
RjZCOTQzQjREODU5Q0Q5OTdDRTBERkVEODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5xW5ZKbWmhYfesajEvzXAvE57kjSVs7oviNj2MSkAZb4rb7Tl
yz3mUQ60TG4KFPQdl3wyC6E25ZEUpvVg1jr5EDxmI0wSrUHen6AkxaVgWyzd/Vvo
riZB0c+467ZJZbXHim0o+F10BiUoWjefpgYr+6FDmeJR5Ft/smvHwqTSnuRuQUnA
2bjV6cqVJTi1Z/nmzZjvINrReiFKPBxO5uP4mhUIn3VSpEGfkUA3KbXS6qisKPt+
ATjqWHVDqMLqmsVPv0TqFRiSJL1kYRDIiFyqVINFVkEGceNKjfwmQNlBLg8TyW6j
SQVmMCVrTC30MNvHWoAaS9kOwDPblIvFC2DJAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUni6N465jr/a5Q7TYWc2ZfODf7YkwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL25pNk40NjVqcl9hNVE3
VFlXYzJaZk9EZjdZay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAGkhnKoWc8XClnJEYfUygRYAgAKUNB9Yc
t93sE/GbuD3gs4WHAQOo3Skb7ddawvFE7j7dUMz6X/UNRlUU7WM38fBuYtFlXIOs
YPB/KN89o7t7DC2duUpjSshfX+eB6EccwZImY9LVv5ZSK4AzNyueRwXiNBdkVyTv
g7EztimAiHZ6sFuRwfk3aNsmkGtbydySLuRVmbzdUAOOBJriZt4ThQocHnjNGljX
rBQqzENOB8pHM2KodmX59Js3m2YZxMog3RZlmm/rglPTOedbirvxfbIhgBsBlj95
bKs56R0pribmOUz+Sxp/VlwueoYEe5Fp6UA//09yXUrUaUSNz5St1A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:22 2025 by rpki-client