Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/zrZZqRdhgpMBVxli0mMw_NVsm2c.roa
File: zrZZqRdhgpMBVxli0mMw_NVsm2c.roa (raw, json)
Hash identifier: et2/6XEmf+XDp1g0nm+qxjy2i9j11KZY3wgHt16jUmE=
Subject key identifier: CE:B6:59:A9:17:61:82:93:01:57:19:62:D2:63:30:FC:D5:6C:9B:67
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 11B0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zrZZqRdhgpMBVxli0mMw_NVsm2c.roa
Signing time: Sun 07 Apr 2024 03:22:54 +0000
ROA not before: Sun 07 Apr 2024 03:22:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4528 (0x11b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 7 03:22:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CEB659A91761829301571962D26330FCD56C9B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:9e:56:f2:2e:79:c2:8f:8d:f9:e0:43:3a:
cc:e0:ce:7c:fd:27:f8:ba:28:12:d3:0e:50:99:20:
23:dc:85:87:2a:08:00:b9:2e:b8:00:bc:ba:dc:db:
c8:f9:39:8d:a3:e2:af:64:88:6f:b7:56:45:dd:1d:
20:f0:7e:21:f2:8e:72:4d:96:cc:48:9c:27:a3:e7:
c5:41:21:79:a2:84:75:fa:27:bd:14:eb:2e:54:a6:
a8:ce:71:9f:95:15:b2:82:08:50:66:f4:32:ec:c9:
55:34:c2:de:9c:c8:3e:81:05:79:30:02:c0:43:29:
32:92:8d:77:60:de:2b:eb:dc:b4:14:b5:71:8b:e2:
a5:88:79:db:c7:86:9b:0e:56:d9:cb:4c:73:d9:0d:
4c:04:63:9b:56:a5:9a:74:90:ab:68:f5:b6:75:7b:
29:2d:67:b9:a1:6d:18:57:89:0d:c2:f7:70:b6:be:
fd:48:57:d4:59:07:76:15:d5:4f:fb:28:b1:8c:3d:
c2:09:c9:9d:d9:af:37:ee:a6:2a:b8:98:5e:11:a7:
df:76:fc:0e:90:02:c6:2c:d2:94:e2:cf:fa:01:86:
70:0d:63:5d:f7:15:80:f3:d2:35:37:06:06:95:68:
56:e3:4b:dd:46:ae:d5:90:38:2a:83:e5:d4:5a:8c:
80:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B6:59:A9:17:61:82:93:01:57:19:62:D2:63:30:FC:D5:6C:9B:67
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zrZZqRdhgpMBVxli0mMw_NVsm2c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:18:9c:d4:c6:47:f0:15:db:37:9e:15:e0:2c:7e:c4:6f:6b:
4d:52:3a:ee:92:34:a1:10:0c:0b:be:bf:a4:57:68:ed:f3:a5:
26:64:ee:d5:32:8c:1d:1e:df:4b:f8:d9:2e:c7:e3:88:0b:00:
64:9e:2e:0f:e9:68:b2:b0:d9:12:80:10:8f:fd:5b:7d:3c:bc:
ed:f0:87:cb:67:8e:e0:93:55:a0:74:56:5b:22:52:25:7e:82:
3b:95:46:ca:0f:bd:c0:fd:e9:dd:3f:f4:11:00:d3:d7:6a:17:
26:d2:84:40:83:cb:71:a6:9c:4c:a5:ab:b2:ed:2c:18:3c:79:
09:f2:4e:5c:8c:3c:03:15:db:e7:f2:7f:be:01:78:47:4c:9a:
6b:5f:4c:17:8f:5e:c5:92:dc:f4:d4:92:9e:a4:0e:e1:a5:5a:
a2:d1:3f:c3:95:64:d4:c9:58:cf:da:cc:2f:1e:bb:39:57:c5:
57:22:3e:9c:e2:53:f4:28:d4:ae:61:de:2f:1e:c6:c6:ad:93:
81:4a:ee:f8:cd:7e:a8:24:40:f1:41:e3:94:a3:20:5f:88:26:
99:9b:8a:f8:19:50:3a:aa:0a:0b:f3:1e:49:e4:e1:c5:b3:3c:
3d:5c:4a:e6:2e:b2:0a:bf:40:11:4c:19:08:2b:39:08:80:95:
8d:e3:99:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:49 2025 by rpki-client