Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/VYTnjGr4abUurEVDVWeTgW19V3I.roa
File: VYTnjGr4abUurEVDVWeTgW19V3I.roa (raw, json)
Hash identifier: z9Padt3OOzDOiAs5uHldHeiTRunhO02r9fgiuM4iwLE=
Subject key identifier: 55:84:E7:8C:6A:F8:69:B5:2E:AC:45:43:55:67:93:81:6D:7D:57:72
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1DBE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/VYTnjGr4abUurEVDVWeTgW19V3I.roa
Signing time: Thu 09 May 2024 06:54:23 +0000
ROA not before: Thu 09 May 2024 06:54:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7614 (0x1dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 9 06:54:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5584E78C6AF869B52EAC4543556793816D7D5772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d5:14:62:1c:23:70:5e:db:ac:00:22:f0:70:
15:76:c7:70:ba:7c:c8:19:13:6d:1e:05:6f:e1:0b:
0d:11:5a:4c:8d:c0:0a:5d:2e:ba:96:9d:81:da:77:
e3:96:9c:13:45:f0:6b:09:22:df:4c:d8:5e:53:b1:
93:6e:1b:3a:7f:28:b4:c9:01:3d:e7:24:20:54:eb:
51:59:27:6b:02:7c:f9:1d:9c:a9:db:45:f6:58:48:
6c:4d:0e:72:be:da:e6:e8:37:e2:4e:1d:2c:1d:da:
ef:b2:a2:5e:96:b2:39:21:6c:22:e2:83:42:d8:24:
5e:6f:f7:01:7d:c6:ee:59:a4:d5:65:1b:38:c4:8e:
d9:5d:8a:2e:bf:ae:4f:c3:d2:18:0b:ef:f3:a9:f4:
85:ce:32:8e:00:57:a9:f5:1b:1d:57:e9:0f:d2:c6:
8e:d6:3b:7f:82:b4:ea:9f:f9:1b:78:39:fe:d3:ee:
bd:21:7f:e8:0e:51:34:6c:d4:29:ef:cf:05:92:81:
09:d0:0d:ee:15:44:9a:a4:23:d9:71:05:18:eb:1f:
85:ec:ca:d3:c6:31:b9:6a:2b:7e:bf:af:4e:43:a6:
3b:56:97:da:4d:d6:57:e4:bb:af:b5:4d:db:05:ba:
95:97:cd:fb:4c:d3:6a:43:9d:b8:c5:fd:1b:03:06:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:84:E7:8C:6A:F8:69:B5:2E:AC:45:43:55:67:93:81:6D:7D:57:72
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/VYTnjGr4abUurEVDVWeTgW19V3I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:b6:5c:ea:6f:a5:fc:39:c7:f8:c9:16:a8:13:33:92:16:53:
57:70:2a:3d:f9:24:55:87:aa:c4:cd:85:15:ab:6e:b1:83:c5:
d1:95:e4:92:dc:31:96:5b:ad:5e:6e:45:5f:49:ff:bd:d8:58:
18:16:c5:62:90:1d:30:c9:60:34:3e:f1:f8:f6:be:0a:59:4b:
cc:86:28:de:6e:ee:8b:10:29:34:27:45:93:9c:60:eb:35:c5:
0f:08:9b:17:d2:35:3f:d3:41:6e:22:b2:6a:2e:65:bb:06:19:
ce:6e:a7:1b:9c:81:1c:5a:ab:a0:c8:f1:94:c4:e7:55:ec:09:
70:d9:01:73:ae:7b:74:f2:a2:65:97:03:75:0d:ff:ad:5a:03:
71:ea:5f:9a:94:21:16:ec:61:cb:5c:b1:66:69:22:b0:e6:e4:
6c:7f:ea:eb:ed:22:99:cb:16:2e:b2:5d:2e:c1:14:73:ac:b8:
45:a4:a6:2a:13:34:84:d3:da:fe:c8:f8:da:57:94:b3:96:5e:
f7:25:40:6c:00:8b:9c:09:e1:de:ed:35:f7:a7:b8:47:3b:9a:
6a:a7:4b:5c:99:ab:3c:f5:9b:2c:75:0c:5b:a4:39:24:af:ae:
8d:88:ad:3b:bd:a1:89:a1:28:88:f3:c4:0f:4f:83:56:08:9e:
b1:04:ea:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 08:10:41 2025 by rpki-client