Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/BVpOvkeYXjq5kamfG1sUsofQT_Y.roa
File: BVpOvkeYXjq5kamfG1sUsofQT_Y.roa (raw, json)
Hash identifier: IvCgiI3Ksw1tPJ6k1gkdE7E3oiEBL1bGDO7IganrTEc=
Subject key identifier: 05:5A:4E:BE:47:98:5E:3A:B9:91:A9:9F:1B:5B:14:B2:87:D0:4F:F6
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 11C2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/BVpOvkeYXjq5kamfG1sUsofQT_Y.roa
Signing time: Sun 07 Apr 2024 07:52:53 +0000
ROA not before: Sun 07 Apr 2024 07:52:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4546 (0x11c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 7 07:52:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=055A4EBE47985E3AB991A99F1B5B14B287D04FF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:fc:d2:e6:6d:9c:0a:83:9b:1b:91:16:66:98:
72:91:45:e2:04:3a:4a:fb:7b:36:1e:d1:98:5c:07:
44:1f:9c:56:8e:3d:1d:5f:46:3d:df:0c:a3:0e:dc:
c1:49:4b:51:7e:68:7b:f5:bc:a2:db:ac:fb:cb:27:
db:c8:cf:f0:44:ca:57:f7:90:bf:53:e8:27:f4:1e:
47:ba:6d:f7:2b:56:15:33:d2:43:65:7c:9e:f7:d8:
8e:3f:e5:04:52:43:3d:8c:15:d5:4a:c3:a9:0b:3d:
01:b5:21:a0:e3:13:34:2b:f3:55:1b:43:b9:b2:07:
be:3d:84:11:b7:16:16:d7:ed:77:d5:22:3c:ef:b7:
d0:ad:b9:8d:0b:54:84:82:19:1e:fd:eb:72:86:b5:
77:7a:01:69:90:9c:b0:97:ff:b4:92:c1:28:fd:51:
5f:bf:f0:1d:2b:78:e2:f7:14:fa:37:85:b3:84:b8:
fb:83:e8:71:fd:c8:e8:6b:af:51:05:62:52:40:f1:
0e:ce:4b:d8:ff:6a:6c:82:74:be:6d:64:3e:80:e4:
8a:3d:dc:5e:2b:31:03:39:5b:b9:ad:04:92:85:72:
1b:f5:05:23:39:d4:fa:54:68:52:e8:98:65:40:af:
70:63:18:06:39:bc:cc:fb:57:09:7c:c5:f0:f3:d3:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5A:4E:BE:47:98:5E:3A:B9:91:A9:9F:1B:5B:14:B2:87:D0:4F:F6
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/BVpOvkeYXjq5kamfG1sUsofQT_Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:ed:a3:28:52:9c:32:86:50:5a:54:36:6c:47:5f:9a:80:47:
94:c2:dd:38:ac:f3:5d:27:6d:99:0b:30:8d:07:d9:3b:d8:0b:
75:03:d3:a9:16:90:3d:1b:3c:e3:fc:15:18:c9:c2:92:27:93:
dd:55:2d:0d:ad:13:6c:19:98:cc:10:44:07:d4:ef:6e:03:1c:
75:95:73:68:d3:60:c0:49:26:f9:49:98:85:5a:83:34:1e:c0:
57:48:b2:5c:c5:20:8c:04:14:5a:11:37:a4:43:96:70:54:7f:
bb:bf:a7:1a:bd:1d:b8:f0:da:fe:1c:95:0f:43:6c:82:0c:a6:
a4:70:05:ae:ec:19:d9:75:13:91:3f:89:75:3d:c5:10:69:94:
ea:a1:8f:22:69:0a:1f:77:c0:f2:d6:53:bf:8b:9f:6e:8c:b4:
18:86:21:cf:4b:ae:0f:22:bc:02:88:e1:67:a8:95:e0:93:cb:
c7:d1:c2:12:15:38:f3:05:dc:3a:dd:ce:27:c7:66:f8:fa:4b:
54:0e:df:7b:05:8c:2a:55:e9:c0:5f:a3:1f:a2:41:9b:ec:9e:
c2:c1:17:a0:c9:4b:4f:a1:23:fc:4e:12:c2:5b:02:a8:4c:82:
ed:4e:79:d7:91:6e:5e:42:40:d7:94:c8:b3:d3:61:0a:b5:43:
06:c5:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:25:04 2025 by rpki-client