Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/a7z8iva8oewO1v6kXZANlpNXJ60.roa
File: a7z8iva8oewO1v6kXZANlpNXJ60.roa (raw, json)
Hash identifier: Qo7FhpHYNxr68u3k+ah+tJ0HOwrpZctS7FW4L41TKx0=
Subject key identifier: 6B:BC:FC:8A:F6:BC:A1:EC:0E:D6:FE:A4:5D:90:0D:96:93:57:27:AD
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 109A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/a7z8iva8oewO1v6kXZANlpNXJ60.roa
Signing time: Thu 04 Apr 2024 05:52:49 +0000
ROA not before: Thu 04 Apr 2024 05:52:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4250 (0x109a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 4 05:52:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6BBCFC8AF6BCA1EC0ED6FEA45D900D96935727AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:ea:a7:a3:75:1d:4f:58:11:5c:b8:e5:7b:
06:9b:21:2d:50:53:79:c3:ce:3f:72:4f:54:4f:48:
5c:60:c0:7d:9b:3d:41:b1:9d:d1:13:90:75:42:16:
0b:1c:2b:d0:d0:65:c0:fa:87:b0:3e:49:d7:33:ae:
99:a1:f4:b7:64:8a:e7:b2:28:6d:ad:a8:89:a7:db:
71:c9:cb:37:e4:b5:cb:19:d2:2e:c7:a5:ad:00:d6:
8a:c9:cf:95:55:56:99:77:c2:7b:78:33:43:2b:07:
da:1c:3b:3b:73:5c:e1:36:67:39:17:c0:59:fc:99:
a6:3c:2b:c4:58:3f:45:cc:7c:61:bf:b3:2a:a4:0f:
97:08:9b:02:b6:05:85:0f:82:70:be:73:ce:5e:19:
8b:05:3e:91:07:63:de:c8:3f:94:49:45:d5:be:ab:
f6:4d:f2:5a:dd:84:a5:83:df:ae:0c:e4:30:53:60:
03:44:55:da:24:36:1e:4c:34:0b:6e:fa:08:f2:d0:
5f:f6:11:16:1a:cd:29:4d:d6:96:ab:f8:2d:6c:55:
e3:af:1b:f6:01:9c:15:42:af:e7:f7:aa:17:85:d4:
33:ca:d6:96:b6:96:b5:e7:f5:e9:51:01:67:5a:c0:
68:d2:90:5b:03:ec:06:a0:4b:1a:91:f6:1a:55:32:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BC:FC:8A:F6:BC:A1:EC:0E:D6:FE:A4:5D:90:0D:96:93:57:27:AD
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/a7z8iva8oewO1v6kXZANlpNXJ60.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:65:52:47:dc:19:64:c8:f0:a1:38:a0:5e:37:1a:86:4e:0a:
01:51:29:14:df:e3:ad:e3:d9:0c:9a:07:75:61:4e:f0:1c:bc:
90:1f:60:4e:ee:bc:26:6c:b6:6e:bf:38:fb:14:97:d7:c4:ef:
5e:8b:5d:8a:3d:e4:f2:a9:e5:01:7d:ad:37:3d:22:de:c5:7d:
d3:d9:d0:ba:28:5e:d1:8a:63:e4:2f:ae:49:15:e2:2a:a6:1b:
4e:32:f5:20:8b:b5:f9:d8:f8:b0:f1:f6:66:19:74:d9:e2:57:
1d:d8:76:66:04:32:0a:65:e2:3e:83:cc:78:66:51:59:91:f4:
21:fa:b8:36:d1:64:d6:fe:71:e2:eb:5e:c5:9d:4e:32:f9:f6:
0e:df:97:e3:b0:02:32:50:2b:60:06:20:8b:13:af:3e:bb:71:
c7:8d:9c:64:93:1a:c8:9e:7e:a5:c0:1d:b1:4d:59:aa:db:0e:
2d:5b:a1:df:d0:53:6b:a6:84:00:ca:0a:2d:9c:8b:63:2c:31:
07:49:ae:8f:c2:31:e6:e1:eb:b5:f0:3d:6c:37:bd:68:20:6e:
01:df:ce:ef:2e:29:f9:b4:32:c8:90:3d:23:85:31:55:3e:8d:
57:5d:00:16:5f:65:94:70:04:bc:92:f9:d6:0d:76:17:89:7a:
f2:84:6c:9d
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDQw
NTUyNDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZCQkNGQzhBRjZCQ0Ex
RUMwRUQ2RkVBNDVEOTAwRDk2OTM1NzI3QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHFOqno3UdT1gRXLjlewabIS1QU3nDzj9yT1RPSFxgwH2bPUGx
ndETkHVCFgscK9DQZcD6h7A+Sdczrpmh9LdkiueyKG2tqImn23HJyzfktcsZ0i7H
pa0A1orJz5VVVpl3wnt4M0MrB9ocOztzXOE2ZzkXwFn8maY8K8RYP0XMfGG/syqk
D5cImwK2BYUPgnC+c85eGYsFPpEHY97IP5RJRdW+q/ZN8lrdhKWD364M5DBTYANE
VdokNh5MNAtu+gjy0F/2ERYazSlN1par+C1sVeOvG/YBnBVCr+f3qheF1DPK1pa2
lrXn9elRAWdawGjSkFsD7AagSxqR9hpVMo03AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUa7z8iva8oewO1v6kXZANlpNXJ60wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2E3ejhpdmE4b2V3TzF2
NmtYWkFObHBOWEo2MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAumVSR9wZZMjwoTigXjcahk4KAVEpFN/j
rePZDJoHdWFO8By8kB9gTu68Jmy2br84+xSX18TvXotdij3k8qnlAX2tNz0i3sV9
09nQuihe0Ypj5C+uSRXiKqYbTjL1IIu1+dj4sPH2Zhl02eJXHdh2ZgQyCmXiPoPM
eGZRWZH0Ifq4NtFk1v5x4utexZ1OMvn2Dt+X47ACMlArYAYgixOvPrtxx42cZJMa
yJ5+pcAdsU1ZqtsOLVuh39BTa6aEAMoKLZyLYywxB0muj8Ix5uHrtfA9bDe9aCBu
Ad/O7y4p+bQyyJA9I4UxVT6NV10AFl9llHAEvJL51g12F4l68oRsnQ==
-----END CERTIFICATE-----
Generated at Thu Apr 4 12:50:10 2024 by rpki-client on console.sobornost.net