Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/uIVwCYJIHaIMyJ2KdlDuugVc6EY.roa
File: uIVwCYJIHaIMyJ2KdlDuugVc6EY.roa (raw, json)
Hash identifier: hVh6ZBX+Oj4EJRzILOxy9wdK4TvNMEPVT/gz5qqm2cA=
Subject key identifier: B8:85:70:09:82:48:1D:A2:0C:C8:9D:8A:76:50:EE:BA:05:5C:E8:46
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E6E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uIVwCYJIHaIMyJ2KdlDuugVc6EY.roa
Signing time: Fri 29 Mar 2024 10:52:29 +0000
ROA not before: Fri 29 Mar 2024 10:52:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3694 (0xe6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 29 10:52:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B885700982481DA20CC89D8A7650EEBA055CE846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:17:74:df:cf:d2:9f:1d:bc:67:c7:2d:dc:
03:da:18:c3:e3:8c:90:00:76:4a:5a:71:de:f5:c8:
8a:87:54:24:ee:7e:c1:29:2e:e6:a0:04:dd:f6:70:
60:9c:21:1d:e1:a0:c8:ef:90:82:c4:26:5a:a1:2e:
0f:cf:37:59:b7:8d:bb:ef:50:c2:04:f6:f9:a9:c8:
a8:eb:0d:ab:58:2b:2a:4a:3f:fa:a9:78:32:d0:78:
35:f4:cb:f4:1f:f4:6a:78:b0:b0:bd:40:cb:e4:0a:
a6:b5:a1:a7:8a:b8:94:cd:46:d1:1f:f2:d1:67:c5:
ca:c9:e8:99:6b:ce:3d:ab:31:3a:5c:69:a7:a3:0f:
10:67:76:9e:18:8b:8b:54:72:b9:bd:82:ca:89:05:
28:3d:60:50:e3:aa:c8:10:ea:b5:2a:f6:63:3e:93:
14:7d:6c:52:29:29:65:3b:9f:5a:f1:f6:eb:90:e6:
7a:ee:44:4f:bd:87:f9:eb:4f:0a:19:67:8c:e4:59:
b0:b7:e9:23:f7:10:f7:1d:54:75:2a:a6:0f:25:da:
23:f0:f0:d4:13:4e:38:5b:27:61:19:62:0b:83:33:
3d:5f:ba:70:13:75:b6:9f:ec:6e:9e:ce:31:59:8f:
cd:0c:c1:48:b0:e6:3b:fe:0f:1e:f0:5d:ce:c9:d0:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:85:70:09:82:48:1D:A2:0C:C8:9D:8A:76:50:EE:BA:05:5C:E8:46
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uIVwCYJIHaIMyJ2KdlDuugVc6EY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:05:f7:90:6c:8a:07:8e:6b:31:6d:b8:09:6f:92:0b:e1:61:
ec:e7:41:6c:9e:76:8a:c8:62:3e:92:bb:a7:f3:5c:65:69:29:
e7:1f:7d:44:a7:3c:d5:22:85:de:20:27:f3:5d:50:f6:db:4c:
5a:57:6d:d5:47:4e:25:bd:5c:23:0a:fa:e1:9d:09:7d:18:e6:
09:4e:93:6c:a9:fd:80:25:ec:57:37:01:fe:9d:7c:24:88:85:
43:b1:d2:7b:15:02:6e:6e:da:a7:41:9c:ba:fa:bf:78:22:05:
d4:36:a8:47:90:2d:f1:5b:4e:e7:f0:3d:6e:8e:cb:7d:09:5e:
03:68:b0:48:2f:f0:fd:26:26:ea:0d:ae:df:e5:83:5f:4a:79:
64:a1:8b:cd:a4:73:7e:d3:f9:29:be:49:c3:dd:ee:3f:12:79:
f9:1c:52:c6:ee:3f:d6:2c:0a:f6:de:08:b7:a6:0b:77:21:e4:
b2:92:e4:82:f7:bc:97:d0:77:fd:a6:95:95:0d:74:42:9d:36:
0c:e3:c0:6f:3e:ad:75:23:15:da:21:42:72:a4:d2:fa:eb:4b:
88:5a:d0:44:33:38:52:b4:f8:a9:ea:50:75:04:f5:86:0a:15:
23:7e:88:bd:7e:0c:e2:48:33:65:f0:17:42:8c:0e:c5:cb:10:
1e:77:f0:99
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMjkx
MDUyMjlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI4ODU3MDA5ODI0ODFE
QTIwQ0M4OUQ4QTc2NTBFRUJBMDU1Q0U4NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/Bxd038/Snx28Z8ct3APaGMPjjJAAdkpacd71yIqHVCTufsEp
LuagBN32cGCcIR3hoMjvkILEJlqhLg/PN1m3jbvvUMIE9vmpyKjrDatYKypKP/qp
eDLQeDX0y/Qf9Gp4sLC9QMvkCqa1oaeKuJTNRtEf8tFnxcrJ6Jlrzj2rMTpcaaej
DxBndp4Yi4tUcrm9gsqJBSg9YFDjqsgQ6rUq9mM+kxR9bFIpKWU7n1rx9uuQ5nru
RE+9h/nrTwoZZ4zkWbC36SP3EPcdVHUqpg8l2iPw8NQTTjhbJ2EZYguDMz1funAT
dbaf7G6ezjFZj80MwUiw5jv+Dx7wXc7J0P+5AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUuIVwCYJIHaIMyJ2KdlDuugVc6EYwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3VJVndDWUpJSGFJTXlK
MktkbER1dWdWYzZFWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAJQX3kGyKB45rMW24CW+SC+Fh7OdBbJ52
ishiPpK7p/NcZWkp5x99RKc81SKF3iAn811Q9ttMWldt1UdOJb1cIwr64Z0JfRjm
CU6TbKn9gCXsVzcB/p18JIiFQ7HSexUCbm7ap0Gcuvq/eCIF1DaoR5At8VtO5/A9
bo7LfQleA2iwSC/w/SYm6g2u3+WDX0p5ZKGLzaRzftP5Kb5Jw93uPxJ5+RxSxu4/
1iwK9t4It6YLdyHkspLkgve8l9B3/aaVlQ10Qp02DOPAbz6tdSMV2iFCcqTS+utL
iFrQRDM4UrT4qepQdQT1hgoVI36IvX4M4kgzZfAXQowOxcsQHnfwmQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:17 2025 by rpki-client