Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/tXHOMrJqEy0LT3lirrvZcd-OmPA.roa
File: tXHOMrJqEy0LT3lirrvZcd-OmPA.roa (raw, json)
Hash identifier: V0UEHnHgjNl1EbBKtw5uMJlidfBnHHCw/hu+VuPYF9s=
Subject key identifier: B5:71:CE:32:B2:6A:13:2D:0B:4F:79:62:AE:BB:D9:71:DF:8E:98:F0
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1842
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/tXHOMrJqEy0LT3lirrvZcd-OmPA.roa
Signing time: Wed 24 Apr 2024 15:53:59 +0000
ROA not before: Wed 24 Apr 2024 15:53:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6210 (0x1842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 24 15:53:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B571CE32B26A132D0B4F7962AEBBD971DF8E98F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:15:cc:a8:ce:fe:46:04:4f:bb:8e:c7:fd:
bb:17:33:a9:23:15:11:c8:1f:6a:ae:a7:79:e2:83:
48:56:1a:e0:a2:88:35:74:ad:d6:2b:e2:cc:08:71:
ad:0e:9c:65:3f:3c:5a:87:a9:22:f0:0f:39:da:23:
d7:79:a8:30:1b:5b:1f:d2:b3:cd:b7:82:0e:6b:04:
39:05:47:05:2f:03:b7:f2:ac:d3:4a:f2:be:3e:4e:
03:d4:3d:23:eb:97:d6:d0:e0:75:c8:96:f5:2e:b7:
6f:38:fa:fd:c8:35:14:91:b0:a0:f6:a1:46:d1:80:
6a:64:7d:0c:27:6c:18:54:b8:1f:9b:cd:6a:33:68:
2c:c5:b7:03:c5:6a:85:33:22:60:55:46:3d:2b:ec:
e6:fb:25:3a:b4:47:b2:1c:20:dc:a5:d0:09:c2:ec:
11:d5:39:62:8c:a1:71:4a:67:f5:2c:76:f8:a1:4a:
1c:75:c3:02:9b:30:4a:c0:a9:3a:f4:f1:ff:4c:35:
e2:0e:23:7c:9f:31:56:12:d1:7a:45:ef:2f:c7:4d:
04:ae:a7:93:da:91:a8:b5:48:2a:41:8d:0f:3e:3d:
e5:e4:dd:78:27:6a:b5:09:12:18:9e:7b:b3:94:11:
41:62:72:ca:b5:c2:88:b4:bc:30:ea:75:e5:8d:23:
c1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:71:CE:32:B2:6A:13:2D:0B:4F:79:62:AE:BB:D9:71:DF:8E:98:F0
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/tXHOMrJqEy0LT3lirrvZcd-OmPA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:31:5b:34:be:0a:e9:aa:6d:c0:5a:ba:99:07:fa:ff:dd:6d:
50:1c:a1:88:45:15:81:81:1c:cd:de:ce:36:cd:20:16:c6:0e:
40:18:34:51:a1:a7:91:54:b8:f2:7a:27:fe:ff:87:fb:b6:cf:
17:97:18:5d:bc:4d:a5:ee:ec:c1:18:1c:04:43:74:1a:63:b2:
d5:95:44:40:d3:63:c1:3a:cd:1c:ce:6f:bd:6b:31:d9:0c:c1:
bf:d8:15:38:69:92:80:2e:ed:e1:7c:8b:86:1d:d9:0c:04:80:
b4:f4:1b:33:2d:fc:ee:fd:c3:d5:10:74:10:03:8e:83:32:cd:
b7:3f:d6:d5:d0:dd:f7:dc:aa:ab:8d:0a:31:7e:f0:94:77:a6:
20:a1:d9:be:11:88:00:e6:1b:30:99:f3:6b:4a:48:01:b7:1d:
f2:d9:af:86:d7:71:20:d1:a0:79:5a:07:ee:47:1d:0d:77:42:
c8:e0:89:73:81:6c:11:a0:09:d4:33:60:33:d0:81:c8:c6:83:
82:b6:97:8e:b3:81:cd:25:42:45:58:d5:e2:b3:b3:db:a3:79:
d7:a8:0f:0f:d0:15:0f:69:b5:47:0f:9c:29:04:24:eb:65:bc:
9f:93:b0:70:c8:97:7f:d5:e3:bb:9e:87:60:b7:47:64:e5:8a:
64:c0:43:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:48 2025 by rpki-client