Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/8Y-s9HVWRJaTCGv2mFUAhBVibDA.roa
File: 8Y-s9HVWRJaTCGv2mFUAhBVibDA.roa (raw, json)
Hash identifier: nb0Qjg337HVEGWNOFrCcahO/rVw2QLZ+cvqYbNDeOJM=
Subject key identifier: F1:8F:AC:F4:75:56:44:96:93:08:6B:F6:98:55:00:84:15:62:6C:30
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F0E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/8Y-s9HVWRJaTCGv2mFUAhBVibDA.roa
Signing time: Sun 31 Mar 2024 02:52:33 +0000
ROA not before: Sun 31 Mar 2024 02:52:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3854 (0xf0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 02:52:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F18FACF47556449693086BF69855008415626C30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:2b:18:b2:25:e3:ab:26:24:37:86:cd:08:
b0:98:ff:e2:27:a9:e1:c1:3c:55:0a:9a:73:d5:f8:
13:59:3f:db:9b:b4:5d:80:45:51:fb:a7:7f:a0:a4:
6c:e8:a1:40:40:1e:5a:16:27:bb:5e:14:33:f6:5a:
a2:1c:ad:be:e6:3b:b3:80:95:22:22:da:b2:5b:b1:
bd:88:9f:c3:15:99:82:e3:58:bc:b3:eb:58:52:86:
6c:c1:d6:aa:ce:3d:9c:74:8c:96:9e:2d:6c:f3:e8:
1e:fe:7e:7e:e8:e1:27:70:06:4b:8a:a3:4a:ce:a4:
eb:7d:af:84:3f:7e:55:9d:5b:6d:f7:e5:40:df:79:
3f:d0:64:47:0a:f5:a9:16:b5:97:de:9b:84:b1:fd:
d1:c6:a2:c2:ff:79:af:45:65:38:24:3e:6d:a8:59:
16:d1:39:d2:10:a5:f0:bd:79:87:28:f1:9d:9c:bc:
39:42:b8:0d:78:61:fd:c2:64:1b:03:8c:f7:96:80:
e4:4c:86:39:14:c4:b8:80:ce:b5:de:0d:bb:7a:11:
a8:fe:9a:70:9a:4d:6a:e2:f4:df:f7:e6:67:ef:72:
3b:1c:8f:47:23:28:24:e3:9f:c2:20:83:9c:5e:29:
d4:f0:31:01:dd:93:02:40:a1:8c:5f:6d:8f:23:4e:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8F:AC:F4:75:56:44:96:93:08:6B:F6:98:55:00:84:15:62:6C:30
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/8Y-s9HVWRJaTCGv2mFUAhBVibDA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:f6:90:0c:6d:0b:be:04:44:b6:d5:99:cf:d1:59:f8:bc:ca:
d4:f3:ff:a8:a3:17:cf:5b:71:b0:eb:25:1e:25:8d:31:f6:a3:
0c:b9:86:a8:0d:ea:e4:60:86:e4:96:2a:e1:04:a1:d0:36:27:
ce:c4:c2:23:4a:f5:43:a0:cc:89:43:38:d5:ac:d1:f7:a0:3a:
63:8e:30:6d:b7:73:2d:6c:af:18:68:50:f0:7b:60:02:36:f1:
e3:8f:96:87:a8:52:01:09:33:23:c7:05:16:d7:ab:c7:94:d1:
f5:90:c0:15:c3:92:8d:f7:5b:f3:71:21:f3:89:af:5b:65:fd:
fd:08:ed:36:e5:52:c8:43:73:4a:87:9e:62:c1:fd:14:80:2f:
17:94:77:9e:d3:2d:dc:23:05:cd:6c:a4:c3:ac:5f:02:7c:2a:
01:2d:35:35:30:69:80:82:a0:3d:96:6f:a6:5b:65:ff:ef:19:
56:94:27:e3:2e:7e:ff:61:00:78:a3:9f:9b:b5:5a:d4:24:b2:
c1:2f:0f:5d:b4:8d:d6:64:4e:cc:d8:e2:57:3f:78:6b:59:f1:
1c:dc:62:2e:74:15:ac:7d:78:6f:33:07:27:cc:01:cc:25:9c:
d3:e1:25:c3:6d:77:1f:38:10:da:1b:c1:f3:d8:22:ba:f5:01:
d3:45:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:54:13 2025 by rpki-client