Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/tFUYN4qoNgRJ6bQuDbuNYKJEfeU.roa
File: tFUYN4qoNgRJ6bQuDbuNYKJEfeU.roa (raw, json)
Hash identifier: J4WAppOm+FPcX3Bchxmhfqxvr3VhbudxdmJC6ZWgoAk=
Subject key identifier: B4:55:18:37:8A:A8:36:04:49:E9:B4:2E:0D:BB:8D:60:A2:44:7D:E5
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1640
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/tFUYN4qoNgRJ6bQuDbuNYKJEfeU.roa
Signing time: Fri 19 Apr 2024 07:23:28 +0000
ROA not before: Fri 19 Apr 2024 07:23:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5696 (0x1640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 07:23:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B45518378AA8360449E9B42E0DBB8D60A2447DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:30:cd:ff:d4:cd:8b:f3:66:45:4c:29:0a:df:
fc:72:ef:cf:07:37:34:1c:3a:d7:36:5a:11:d0:bb:
a1:d6:c2:76:6b:d7:d0:e8:af:70:04:85:71:39:ca:
98:da:a5:c8:7d:c6:74:38:98:05:c0:93:2a:b3:1d:
e3:9a:65:97:ec:9c:7d:f4:4c:f4:3e:ed:d3:86:eb:
04:f9:81:9b:cc:9b:25:88:20:c2:76:de:af:b0:b6:
ad:ea:d4:00:dc:ed:19:27:17:23:e8:c1:57:24:c1:
63:86:62:9f:93:c2:48:9a:d4:b2:40:bc:d6:04:99:
f6:54:25:5e:28:19:d2:0b:ca:86:1f:5b:f2:7f:6c:
85:a2:66:b7:39:c5:84:be:11:fe:2d:f9:29:eb:33:
c2:3a:c7:ac:e1:01:da:92:27:f5:cd:c2:f1:33:39:
c9:60:65:7c:b6:ab:a5:3b:f7:c6:96:aa:28:db:a3:
d4:40:56:d5:46:be:ca:bf:1d:89:cd:82:83:0f:19:
6d:13:91:63:d7:76:aa:b4:ff:71:87:2b:c3:95:a5:
61:a0:05:a5:42:81:33:9a:f7:7e:9a:a8:65:b4:60:
91:fc:46:9a:85:ff:80:9a:a3:37:7d:78:d8:6b:51:
b0:81:74:3b:95:34:44:da:a9:4a:2f:29:71:5a:c6:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:55:18:37:8A:A8:36:04:49:E9:B4:2E:0D:BB:8D:60:A2:44:7D:E5
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/tFUYN4qoNgRJ6bQuDbuNYKJEfeU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c6:bc:d6:6b:a0:2b:28:74:b3:a0:f1:6a:81:db:bf:6d:ec:cb:
11:3a:8c:4a:95:b1:32:d2:52:c3:23:89:ea:98:05:d2:70:06:
20:64:3d:3c:7d:bb:6d:0a:47:51:df:c6:14:f7:4a:89:a5:f9:
c2:f9:ab:72:af:fd:65:93:f7:bb:37:98:01:40:2c:5f:76:2e:
25:e9:69:7d:9c:eb:27:f6:d5:9c:03:65:25:42:60:81:f3:28:
56:07:f4:d5:4c:21:42:04:4b:52:6c:17:cd:59:30:24:dd:2f:
8a:9f:87:4a:7d:a8:0b:2f:19:25:ca:79:de:fc:b7:64:a8:e7:
16:79:2c:f2:5a:48:7d:14:df:c4:52:35:7a:96:f5:7a:9e:c7:
0b:92:cf:5e:b7:8c:82:a2:18:bb:76:aa:19:91:ad:2d:7a:6f:
1c:20:d0:6f:29:65:c2:df:86:f1:c6:fb:75:cb:cd:f7:24:c3:
bd:aa:e1:bf:ca:ab:f2:ac:cd:a3:91:e2:94:53:05:75:48:9a:
90:d5:22:41:f7:e9:e7:67:4e:e0:8d:45:b7:0b:62:d8:58:73:
31:80:11:0d:30:b9:07:b4:37:df:e5:46:bd:39:c5:14:bd:3d:
05:2d:69:93:70:38:f0:49:28:47:78:c0:a5:d6:39:64:fb:a7:
33:d7:a3:f0
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTkw
NzIzMjhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI0NTUxODM3OEFBODM2
MDQ0OUU5QjQyRTBEQkI4RDYwQTI0NDdERTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRMM3/1M2L82ZFTCkK3/xy788HNzQcOtc2WhHQu6HWwnZr19Do
r3AEhXE5ypjapch9xnQ4mAXAkyqzHeOaZZfsnH30TPQ+7dOG6wT5gZvMmyWIIMJ2
3q+wtq3q1ADc7RknFyPowVckwWOGYp+Twkia1LJAvNYEmfZUJV4oGdILyoYfW/J/
bIWiZrc5xYS+Ef4t+SnrM8I6x6zhAdqSJ/XNwvEzOclgZXy2q6U798aWqijbo9RA
VtVGvsq/HYnNgoMPGW0TkWPXdqq0/3GHK8OVpWGgBaVCgTOa936aqGW0YJH8RpqF
/4Caozd9eNhrUbCBdDuVNETaqUovKXFaxpnXAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUtFUYN4qoNgRJ6bQuDbuNYKJEfeUwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3RGVVlONHFvTmdSSjZi
UXVEYnVOWUtKRWZlVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAxrzWa6ArKHSzoPFqgdu/bezLETqMSpWx
MtJSwyOJ6pgF0nAGIGQ9PH27bQpHUd/GFPdKiaX5wvmrcq/9ZZP3uzeYAUAsX3Yu
JelpfZzrJ/bVnANlJUJggfMoVgf01UwhQgRLUmwXzVkwJN0vip+HSn2oCy8ZJcp5
3vy3ZKjnFnks8lpIfRTfxFI1epb1ep7HC5LPXreMgqIYu3aqGZGtLXpvHCDQbyll
wt+G8cb7dcvN9yTDvarhv8qr8qzNo5HilFMFdUiakNUiQffp52dO4I1Ftwti2Fhz
MYARDTC5B7Q33+VGvTnFFL09BS1pk3A48EkoR3jApdY5ZPunM9ej8A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:42 2025 by rpki-client