Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/N-yrEPaUM19PF4duMbRKeSJMjGE.roa
File: N-yrEPaUM19PF4duMbRKeSJMjGE.roa (raw, json)
Hash identifier: uzS09J/XVOg/EW+fMHM9VmQag9Z9Go4H0jcjtzkBQcM=
Subject key identifier: 37:EC:AB:10:F6:94:33:5F:4F:17:87:6E:31:B4:4A:79:22:4C:8C:61
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1218
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/N-yrEPaUM19PF4duMbRKeSJMjGE.roa
Signing time: Mon 08 Apr 2024 05:22:57 +0000
ROA not before: Mon 08 Apr 2024 05:22:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4632 (0x1218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 8 05:22:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=37ECAB10F694335F4F17876E31B44A79224C8C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:6c:f1:5a:d9:35:ef:85:f1:69:2d:83:7a:
d6:08:50:7b:71:0e:56:c3:4c:79:e0:b1:69:20:09:
59:9c:04:94:e1:61:10:5c:e2:31:ed:0f:89:26:83:
91:08:4c:68:7c:41:07:b4:2f:b7:22:46:d2:64:f2:
9c:cb:9b:a0:6b:49:47:3c:0a:69:50:35:70:5d:85:
02:c8:2d:90:99:98:d5:60:01:8a:dd:ee:38:5b:67:
08:8a:8e:2d:16:d9:6a:f7:eb:9d:c8:b5:af:dd:cc:
d6:c2:7d:fa:08:f4:81:79:c7:89:2e:59:04:d7:c1:
41:98:bf:7c:3f:ec:da:2b:ec:25:a0:21:ca:f3:64:
42:74:7e:a9:8e:19:f3:43:6b:6e:09:50:e0:13:3d:
b1:e9:f3:d2:60:dc:ed:a9:ca:46:f4:8d:ce:8b:15:
0f:77:93:93:3f:09:5b:2c:e4:1d:77:d3:69:1c:35:
c2:1f:c5:a0:cb:a4:b9:30:f7:a9:32:ec:92:fe:49:
5d:77:b7:02:19:87:c1:55:2b:f6:71:db:b6:db:44:
15:1b:8b:e1:d7:8b:ef:98:16:42:35:ff:e0:a7:b9:
a2:50:8c:d7:87:6a:b5:54:a2:b3:a4:13:21:46:bc:
0a:2f:70:84:ad:37:ed:32:c4:2f:d5:3b:be:64:68:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:AB:10:F6:94:33:5F:4F:17:87:6E:31:B4:4A:79:22:4C:8C:61
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/N-yrEPaUM19PF4duMbRKeSJMjGE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:23:58:7f:e8:92:d3:44:b7:0a:ba:52:6f:78:d7:3f:70:1a:
74:d6:f6:d8:1c:cc:d9:d4:a6:b7:1a:bd:3f:10:91:bf:f0:c8:
72:db:8a:d1:b8:77:a0:67:c7:c2:23:26:53:3f:82:e0:ed:47:
4e:73:45:9a:06:c7:3a:77:34:4e:51:77:0a:d9:17:f7:eb:98:
a5:d4:44:91:b3:91:7d:99:a0:9e:cc:8a:e6:4a:00:fa:5b:30:
3a:60:06:30:13:82:5a:7f:5b:64:b0:a3:f5:66:b7:0c:f5:5e:
00:38:98:64:e3:93:38:c6:cc:d4:cb:00:00:1e:3e:57:3d:ce:
38:01:29:80:ab:64:5a:ba:0b:d2:63:81:14:eb:7c:ee:10:3b:
25:8f:d4:11:bb:66:57:a5:56:e2:66:8d:5d:59:61:19:19:e6:
27:13:7a:09:7e:38:3d:d3:0f:67:39:fb:b4:71:97:f1:1f:00:
44:b3:37:b7:de:f1:c5:aa:c9:e1:3a:23:71:16:f5:08:96:de:
51:bc:15:ce:50:19:14:97:bc:3c:1b:3d:00:c9:f3:03:56:57:
39:dc:5e:0e:54:3c:a3:46:b6:2e:37:1f:04:63:65:74:67:68:
cf:0a:0e:38:dc:5a:1a:25:bb:0c:36:b5:7c:c8:85:59:40:41:
8d:45:8c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:52:37 2025 by rpki-client