Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Y6T6lNSSt4u4m2M-CddOtv7USug.roa
File: Y6T6lNSSt4u4m2M-CddOtv7USug.roa (raw, json)
Hash identifier: ROd/+r4JYiktTGdVKQ3k5vILFDW6rWLVZc+kP35k1mk=
Subject key identifier: 63:A4:FA:94:D4:92:B7:8B:B8:9B:63:3E:09:D7:4E:B6:FE:D4:4A:E8
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1200
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Y6T6lNSSt4u4m2M-CddOtv7USug.roa
Signing time: Sun 07 Apr 2024 23:22:56 +0000
ROA not before: Sun 07 Apr 2024 23:22:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4608 (0x1200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 7 23:22:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=63A4FA94D492B78BB89B633E09D74EB6FED44AE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:11:12:69:f2:1f:e7:24:b2:5b:f2:6d:90:
c6:68:f1:d1:db:71:6d:8a:5b:2d:38:a7:34:c3:11:
65:61:ae:9d:c2:e7:16:51:30:cf:d0:bf:38:a7:23:
79:aa:e4:c7:ee:44:e2:ca:f8:d5:73:be:be:dc:f9:
5e:80:ba:ce:7a:14:86:e0:74:1f:fa:2a:ec:98:e7:
38:b5:d8:34:f0:2d:f7:33:79:dc:eb:3a:88:3b:12:
bc:4d:7f:bc:6c:6c:19:18:0a:00:ad:d2:be:c4:bf:
4c:69:94:7f:b3:9f:0d:ba:13:3b:7f:fa:62:07:a9:
80:c6:50:0c:0e:4a:ab:2b:d4:44:a8:e2:fe:07:2c:
d5:95:b0:f5:6f:37:1e:41:1c:ca:71:bc:52:33:ea:
ab:c7:f9:cd:5f:fc:e8:d5:40:bf:3d:4a:87:c9:cf:
d7:77:13:8d:3a:70:69:06:9e:f7:39:3f:3c:75:a1:
69:bc:9d:ee:4c:5e:c8:20:0c:9a:a5:21:78:65:02:
6a:cd:f3:11:1e:34:27:97:f1:96:ee:98:9c:42:b1:
fd:aa:6b:0c:3d:bf:fe:3a:c0:27:c3:4e:c0:12:d4:
a3:0d:81:14:9f:aa:63:98:15:36:12:5a:b3:dc:9b:
fd:42:3b:b4:0b:f4:6d:91:8b:6b:64:4d:75:df:ed:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A4:FA:94:D4:92:B7:8B:B8:9B:63:3E:09:D7:4E:B6:FE:D4:4A:E8
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Y6T6lNSSt4u4m2M-CddOtv7USug.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:0e:17:cc:bc:b5:e2:54:22:61:90:a8:a0:52:f2:6f:92:3c:
40:5b:20:e7:51:87:a1:3d:4e:42:d5:61:dc:d3:84:e3:b6:9f:
ce:a7:71:2e:51:c2:39:4a:3c:a6:a6:fd:b8:52:ec:48:8a:7a:
45:0d:d6:91:f3:7f:fd:d6:cd:a4:80:f1:d1:17:67:cb:1e:70:
cd:d3:97:04:cb:92:d7:bc:47:32:aa:da:27:eb:54:19:17:0a:
71:cf:bf:0f:fe:36:5b:fa:9b:ae:bd:32:d2:90:07:23:a7:17:
26:be:03:9d:d7:38:6a:f7:ed:14:8c:d8:d1:34:bc:02:4b:e2:
23:c3:fc:c3:35:88:46:40:41:70:3c:7b:bd:8a:95:22:84:af:
09:39:15:ec:b6:fd:67:5b:18:84:b1:2e:a4:a9:a5:fd:6f:e7:
3e:d6:2b:1c:ac:f4:10:53:74:0f:dc:35:ca:fb:d2:e9:95:ac:
f7:cf:7d:7a:b6:3e:eb:63:ae:c5:62:64:ff:4c:60:db:3d:9a:
53:28:f2:43:4f:70:1a:2c:ed:86:ed:b8:24:ab:f6:ab:fc:01:
71:3d:40:d7:7f:c0:49:33:3b:a9:e3:cf:df:60:5e:9e:0e:b1:
fa:44:43:c3:27:12:2c:a0:94:52:cb:23:b7:f1:63:3f:b9:6c:
c6:fd:0f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:34:22 2025 by rpki-client