Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/4Yy87m8AG_eTLZXj1FYQmYrPEY0.roa
File: 4Yy87m8AG_eTLZXj1FYQmYrPEY0.roa (raw, json)
Hash identifier: TGaxuiPJtWF866hyriAQOeRaO8+AaAB3F40k7bgWXXE=
Subject key identifier: E1:8C:BC:EE:6F:00:1B:F7:93:2D:95:E3:D4:56:10:99:8A:CF:11:8D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 101E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4Yy87m8AG_eTLZXj1FYQmYrPEY0.roa
Signing time: Tue 02 Apr 2024 22:53:26 +0000
ROA not before: Tue 02 Apr 2024 22:53:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4126 (0x101e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 2 22:53:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E18CBCEE6F001BF7932D95E3D45610998ACF118D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:c4:d8:1e:85:fc:42:c5:3d:a9:9a:17:e9:
2e:15:44:7b:9b:58:58:66:9f:89:fe:50:b8:77:75:
e8:a0:c0:27:fb:a5:84:aa:23:10:c1:02:50:55:7b:
da:ed:f7:b3:9e:94:7a:ad:64:38:92:74:bc:60:0c:
72:e0:87:e7:6f:1a:5d:a7:52:a3:bd:d1:d1:e4:e2:
63:e7:27:fa:c6:cf:80:51:b7:1c:60:9e:bc:78:a2:
b7:d1:3e:fa:8d:5b:94:ca:16:04:21:89:ab:ba:e0:
57:99:c2:2e:8e:ae:e5:ec:69:c5:a7:17:ae:a7:50:
51:b9:30:d9:14:72:e1:f5:4f:8d:11:57:87:17:b7:
92:20:41:16:8f:00:cc:79:8e:e0:99:ba:90:ea:c1:
36:07:ad:9e:e8:f7:3e:7c:f8:c6:5e:36:9e:3a:6d:
2a:1c:31:98:3a:60:c3:10:3f:e8:71:e6:a7:0b:ca:
08:ef:36:b0:69:fe:29:fb:b1:f0:c4:8e:17:15:26:
fb:80:36:13:b1:9b:2c:59:f3:90:cc:de:12:ed:5c:
04:41:df:9c:93:83:72:b3:7f:b3:59:4f:d4:55:03:
82:9a:3b:1e:a9:1b:7f:92:e6:3e:63:24:3f:fb:9f:
5d:f2:58:6b:36:ba:f4:44:4d:3f:fb:0c:9e:b4:f7:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8C:BC:EE:6F:00:1B:F7:93:2D:95:E3:D4:56:10:99:8A:CF:11:8D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4Yy87m8AG_eTLZXj1FYQmYrPEY0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:e8:b4:a3:d7:21:d1:f2:72:de:80:1b:9d:5e:7f:3f:a7:ed:
72:41:75:c3:f1:0d:5f:9b:f0:22:6c:7e:34:bb:7a:e3:db:de:
87:ae:ed:6f:8d:16:ed:84:8b:fa:2d:ee:be:98:c3:48:e1:96:
63:dd:bf:89:56:65:70:54:21:b6:ae:f3:e2:7b:e4:02:70:c9:
9f:72:1f:ef:58:4d:b4:6d:58:b4:b2:c9:d4:1a:b2:19:8d:fa:
ba:8a:e7:cf:c0:82:0a:29:e4:cf:72:36:87:1c:24:77:c7:6c:
21:d0:d3:50:34:22:0a:7f:d2:75:2c:96:53:5f:c3:5c:df:02:
b8:60:89:81:72:ff:0d:05:ac:f3:03:6e:ea:7b:c8:60:5e:b2:
b9:44:a7:f7:6a:13:c9:d4:32:d2:5e:d7:d5:a3:9f:09:ec:a0:
e7:dd:4f:e3:ae:10:4c:3b:fb:1a:ca:e3:64:1a:67:29:02:2e:
26:5f:b2:bc:d1:59:49:66:5e:32:3d:45:4f:87:bc:9d:7c:bc:
1b:e7:d7:c2:c0:ae:57:da:ea:33:f1:f8:88:63:ec:55:fd:ee:
91:4f:4b:ce:54:73:45:86:92:c5:43:16:b8:61:d3:4a:a9:d2:
78:8e:94:00:b6:bc:1c:d8:c9:3b:fe:77:32:46:bb:41:f3:14:
d1:62:71:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:11:39 2025 by rpki-client