Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/YTgH88gN9O8X_J2ikqRsfJA4KaY.roa
File: YTgH88gN9O8X_J2ikqRsfJA4KaY.roa (raw, json)
Hash identifier: 6rJ0e65fjJVoLjmQC9xCDWrRFKLrRF6pEl/z3yUiMBU=
Subject key identifier: 61:38:07:F3:C8:0D:F4:EF:17:FC:9D:A2:92:A4:6C:7C:90:38:29:A6
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16C4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YTgH88gN9O8X_J2ikqRsfJA4KaY.roa
Signing time: Sat 20 Apr 2024 16:23:30 +0000
ROA not before: Sat 20 Apr 2024 16:23:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5828 (0x16c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 16:23:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=613807F3C80DF4EF17FC9DA292A46C7C903829A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:5d:e2:32:07:b2:06:c4:5f:f2:94:2b:86:
74:b2:c0:ba:df:20:3d:64:62:ad:44:be:03:35:6e:
cb:5a:12:3d:fe:c0:5a:a5:7a:5c:b8:af:00:14:87:
f6:e1:cb:16:af:f3:6f:b5:21:fd:2d:6e:72:07:4f:
90:d6:e3:b6:a6:18:20:3a:b6:90:88:25:f2:50:2f:
70:80:45:78:85:84:03:9a:5d:0f:8b:1c:c6:dc:69:
13:8f:87:0f:86:34:fe:7b:9d:23:46:78:98:ff:bb:
9b:78:b1:22:72:d2:4c:d2:00:7f:f1:e6:bc:20:bd:
a7:ad:8f:7d:45:37:15:cb:d5:a4:33:a4:5b:05:60:
9e:1e:25:aa:7b:9d:a6:44:6b:8e:62:35:74:6a:9d:
bf:e5:e7:f4:3b:f7:68:51:dc:ba:a3:49:86:5c:75:
ea:80:c8:3c:9b:a5:c4:60:0d:69:bc:38:71:c3:38:
f3:90:75:ce:b3:4f:8e:b6:40:9a:42:8d:f2:8d:2e:
70:40:a4:83:5f:cf:02:78:09:95:01:a0:57:78:80:
bf:6c:f7:9c:15:12:f3:e5:ad:ec:39:0f:fe:c4:18:
b8:d5:72:6c:61:16:4c:d7:ac:5b:3c:e0:ca:47:f6:
c1:8f:1f:4f:2f:ed:a9:1b:8f:28:30:98:62:5d:ca:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:38:07:F3:C8:0D:F4:EF:17:FC:9D:A2:92:A4:6C:7C:90:38:29:A6
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YTgH88gN9O8X_J2ikqRsfJA4KaY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:29:fe:20:fb:ae:20:f1:87:bf:6a:f1:7a:05:2f:5d:a4:ac:
af:f3:42:d6:6d:b3:0b:72:31:d4:1d:a8:06:1a:16:51:c8:bc:
b8:d6:7c:83:c6:f3:8f:f0:09:c1:92:70:e3:94:02:95:28:7c:
d0:fe:2b:2b:a4:e1:d3:93:23:4f:53:06:23:a9:35:1e:8f:e8:
a9:1f:20:58:45:d8:a2:c3:b2:69:ab:b3:41:ee:58:f1:07:0c:
a3:0b:cc:1d:28:7c:07:54:d6:cb:4c:94:2b:9b:34:81:b6:4b:
be:e6:ca:69:be:a8:84:4e:e1:22:3d:dc:dc:71:89:f2:39:a9:
77:44:1e:0a:ba:6e:a7:5c:69:8e:6a:cb:ec:47:e9:b3:9b:40:
1a:35:94:38:3b:bc:2e:c9:a3:4c:1e:8d:36:be:db:81:fa:db:
95:5c:2d:b6:9f:71:20:16:7a:de:e5:7d:da:58:46:b9:fa:d5:
8c:40:37:35:67:ed:6c:f1:b8:05:5f:de:4b:44:f1:28:be:c7:
22:8b:de:44:0a:8f:73:9a:1c:c6:6b:50:d3:24:fe:6f:a7:24:
34:8d:23:93:b0:82:a2:0a:4a:b4:46:66:07:8c:4c:06:07:86:
37:5a:ac:7d:45:91:3e:e3:16:91:0b:c1:f1:55:7b:93:2c:bb:
43:6c:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:10 2025 by rpki-client