Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/xr7jqZFOmsLBoh_bHGXSYmXgm-s.roa
File: xr7jqZFOmsLBoh_bHGXSYmXgm-s.roa (raw, json)
Hash identifier: fMJr1SA0fxEAYSnSnA+sJUW/yuCA1QQM/0/mz2UvbZA=
Subject key identifier: C6:BE:E3:A9:91:4E:9A:C2:C1:A2:1F:DB:1C:65:D2:62:65:E0:9B:EB
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EEC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xr7jqZFOmsLBoh_bHGXSYmXgm-s.roa
Signing time: Sat 30 Mar 2024 18:22:31 +0000
ROA not before: Sat 30 Mar 2024 18:22:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3820 (0xeec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 18:22:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C6BEE3A9914E9AC2C1A21FDB1C65D26265E09BEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:06:31:a9:0d:c6:05:c5:24:5d:56:fd:37:
26:eb:8f:7f:b8:a2:3d:92:a8:30:12:fa:4e:bb:79:
c7:fa:11:20:b4:ea:e2:3e:bf:af:d1:58:05:2f:dd:
ac:37:8a:34:46:e7:a6:ad:d9:de:65:ab:b1:76:5f:
e2:5d:f7:f4:7f:7b:da:dc:f5:17:b2:c7:08:64:ce:
7d:6a:df:9e:90:f7:14:f4:98:e7:d3:4e:9b:1e:22:
36:db:0b:09:c8:a4:be:b5:b4:68:1d:63:23:90:07:
43:7e:ca:d8:f3:12:ce:11:58:94:fb:25:65:ba:65:
03:f8:6f:9a:1c:bc:75:41:16:9b:7e:ca:86:3e:51:
8c:6e:75:4b:b7:0e:c8:c9:88:f7:b9:20:6c:bd:d6:
af:77:dd:e3:ec:66:bb:a6:ee:5c:a6:43:51:83:e1:
1e:66:53:89:1b:bb:9b:f8:85:fc:fe:fa:71:7c:69:
10:b8:ac:e2:dc:63:d8:c8:83:2d:9b:c8:54:b6:0c:
62:8e:77:93:09:6a:e4:78:3a:fa:8c:44:94:96:77:
ad:50:dc:46:8d:17:0d:ef:09:6e:d9:cb:75:8f:9c:
b4:3a:4b:f4:29:46:23:25:82:3a:ff:67:e6:1d:04:
56:05:3c:28:18:70:4d:25:e0:3d:d2:fc:b4:f7:37:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BE:E3:A9:91:4E:9A:C2:C1:A2:1F:DB:1C:65:D2:62:65:E0:9B:EB
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xr7jqZFOmsLBoh_bHGXSYmXgm-s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d1:16:46:f6:b0:a2:7f:83:cb:1b:92:9b:63:5d:eb:e1:0b:97:
cf:69:19:33:3c:6a:fb:1b:c8:98:8d:b2:98:f5:45:e2:79:7d:
00:6b:aa:93:87:87:90:d6:07:49:17:71:7b:68:77:0d:4d:37:
24:95:e6:4e:4a:30:26:1d:4b:d9:49:16:ea:33:c9:f0:48:d2:
a6:fd:0a:7f:61:7a:ac:c8:2f:96:70:35:11:f1:b0:36:47:d1:
3f:b5:90:3c:e9:14:f7:2f:08:66:50:d9:66:b6:9a:ba:aa:c2:
01:42:30:6d:26:40:55:ad:ea:7b:6b:87:b8:94:e1:37:49:e2:
33:1b:5c:e2:4f:b2:6d:65:4e:6a:ba:fb:47:1d:b9:83:05:35:
60:c9:8d:31:f4:f1:c7:2e:61:3a:af:4d:b5:a5:a6:65:2b:53:
21:e2:d1:4f:d1:dc:b9:a0:87:4b:df:84:09:d5:1a:f5:f9:76:
c1:44:b6:74:31:b3:d9:d0:f8:b5:08:57:99:33:98:2f:03:d0:
b2:79:53:a0:63:a6:ba:86:af:2a:21:f2:ff:67:92:d5:74:00:
a1:26:2e:83:94:66:c3:fe:78:f9:97:52:04:09:85:82:cd:18:
9d:59:bb:f2:32:b1:6a:58:a6:76:f8:10:91:3b:b5:79:94:e8:
64:06:2d:60
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMzAx
ODIyMzFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEM2QkVFM0E5OTE0RTlB
QzJDMUEyMUZEQjFDNjVEMjYyNjVFMDlCRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTQwYxqQ3GBcUkXVb9Nybrj3+4oj2SqDAS+k67ecf6ESC06uI+
v6/RWAUv3aw3ijRG56at2d5lq7F2X+Jd9/R/e9rc9Reyxwhkzn1q356Q9xT0mOfT
TpseIjbbCwnIpL61tGgdYyOQB0N+ytjzEs4RWJT7JWW6ZQP4b5ocvHVBFpt+yoY+
UYxudUu3DsjJiPe5IGy91q933ePsZrum7lymQ1GD4R5mU4kbu5v4hfz++nF8aRC4
rOLcY9jIgy2byFS2DGKOd5MJauR4OvqMRJSWd61Q3EaNFw3vCW7Zy3WPnLQ6S/Qp
RiMlgjr/Z+YdBFYFPCgYcE0l4D3S/LT3N6RHAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUxr7jqZFOmsLBoh/bHGXSYmXgm+swHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3hyN2pxWkZPbXNMQm9o
X2JIR1hTWW1YZ20tcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEA0RZG9rCif4PLG5KbY13r4QuXz2kZMzxq
+xvImI2ymPVF4nl9AGuqk4eHkNYHSRdxe2h3DU03JJXmTkowJh1L2UkW6jPJ8EjS
pv0Kf2F6rMgvlnA1EfGwNkfRP7WQPOkU9y8IZlDZZraauqrCAUIwbSZAVa3qe2uH
uJThN0niMxtc4k+ybWVOarr7Rx25gwU1YMmNMfTxxy5hOq9NtaWmZStTIeLRT9Hc
uaCHS9+ECdUa9fl2wUS2dDGz2dD4tQhXmTOYLwPQsnlToGOmuoavKiHy/2eS1XQA
oSYug5Rmw/54+ZdSBAmFgs0YnVm78jKxalimdvgQkTu1eZToZAYtYA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:03 2025 by rpki-client