Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/y9xmGRtwNDenxlIYc42OINWY__o.roa
File: y9xmGRtwNDenxlIYc42OINWY__o.roa (raw, json)
Hash identifier: bMnBOuQUGq9P9YN7ROtZerV7V9N5Ay/890JGyfqkgsc=
Subject key identifier: CB:DC:66:19:1B:70:34:37:A7:C6:52:18:73:8D:8E:20:D5:98:FF:FA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BA8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/y9xmGRtwNDenxlIYc42OINWY__o.roa
Signing time: Fri 03 May 2024 17:24:22 +0000
ROA not before: Fri 03 May 2024 17:24:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7080 (0x1ba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 17:24:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CBDC66191B703437A7C65218738D8E20D598FFFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:49:24:ee:0e:33:1e:bb:d5:6a:c1:4d:88:
15:e9:98:3c:17:71:09:fd:45:87:c0:66:07:57:9c:
86:8b:b4:a2:52:96:bf:71:8d:53:67:b6:2f:45:98:
73:cd:4d:03:e2:9c:ef:c6:5e:cc:59:22:62:67:49:
22:0e:8a:4c:5c:19:1a:6c:ba:1e:05:d7:11:84:6d:
f1:da:6e:a9:b3:5f:de:84:5c:58:0c:b9:91:bb:d5:
7e:d1:01:6f:30:51:a6:e7:d7:89:c4:43:90:95:fd:
9d:7a:d9:96:bd:ff:fc:27:2b:c2:78:9c:72:7f:3e:
a1:f2:f7:ca:56:1a:b2:e2:9a:8b:40:dc:6f:50:7c:
da:dc:a0:c5:3c:76:ce:25:b1:a2:3b:14:59:7f:b8:
58:07:a3:6e:d1:42:00:72:e3:18:5c:ae:57:97:af:
da:34:3c:fa:75:d7:e5:de:cd:35:60:12:9a:27:8d:
ba:d6:eb:01:a1:5a:e0:28:f2:89:f6:a4:af:ec:98:
87:1d:77:3b:5a:7d:58:46:15:6f:c8:fb:e5:39:71:
4b:60:2b:44:85:d6:fa:35:6e:04:fc:b5:c7:49:6f:
16:82:23:81:31:31:94:3e:82:92:09:b8:2b:69:3c:
26:5b:8f:e0:d9:27:63:ba:0f:d3:ab:08:3a:94:11:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DC:66:19:1B:70:34:37:A7:C6:52:18:73:8D:8E:20:D5:98:FF:FA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/y9xmGRtwNDenxlIYc42OINWY__o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:79:33:f6:05:ef:dc:5a:ac:13:ac:2b:e4:7b:9f:4d:bc:9c:
8c:04:61:50:d0:d7:05:ac:04:e2:dc:14:d8:1b:f8:0b:2f:3a:
a9:b1:5b:dc:8a:b0:1c:31:da:75:d8:4d:94:2b:3b:7c:fc:d6:
6e:46:88:1d:a3:fe:92:bf:24:d7:e1:25:3b:3e:cb:e5:af:89:
8c:48:0d:56:5b:38:cb:7e:fa:34:d7:24:70:9e:55:ae:1f:e5:
df:5a:2d:fc:06:b3:2e:0c:32:26:ed:03:6b:57:24:dd:40:58:
56:55:54:31:cf:a6:6f:8f:cb:6b:c0:11:2f:d0:23:8f:bd:3f:
ec:0e:91:62:01:9e:08:26:e9:47:49:6e:a4:d6:ef:d6:aa:87:
e7:96:2d:02:68:b8:04:17:ec:95:d3:72:5e:27:8d:d1:3b:87:
39:10:cc:5b:1e:cb:f1:c7:3a:4e:fc:da:b6:c0:81:20:64:d1:
c7:d0:fb:bb:6d:c4:57:10:5b:8d:67:fe:ab:9c:23:95:33:64:
2f:6d:30:35:8b:b1:90:d4:8f:b4:35:f4:43:a7:e2:3b:94:f2:
b5:e9:e0:09:76:7f:a3:39:8d:8e:04:d7:3c:98:0e:86:22:98:
b8:09:d6:04:ea:72:7b:c5:7a:3c:53:05:02:1b:41:09:ce:53:
a4:9a:11:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:36:48 2025 by rpki-client