Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/YF-Y_Wy8VQvXaD1fGPSGHbjZeiM.roa
File: YF-Y_Wy8VQvXaD1fGPSGHbjZeiM.roa (raw, json)
Hash identifier: cmK1IZMg/PfccATUObgqpQXER1KTfkBn7bOdJ47RWCA=
Subject key identifier: 60:5F:98:FD:6C:BC:55:0B:D7:68:3D:5F:18:F4:86:1D:B8:D9:7A:23
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1444
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YF-Y_Wy8VQvXaD1fGPSGHbjZeiM.roa
Signing time: Sun 14 Apr 2024 00:23:19 +0000
ROA not before: Sun 14 Apr 2024 00:23:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5188 (0x1444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 00:23:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=605F98FD6CBC550BD7683D5F18F4861DB8D97A23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:0c:da:2f:e9:21:30:00:67:6a:d5:d8:b9:
67:65:f6:32:1a:38:ca:00:1c:f7:17:88:8d:82:ff:
68:97:d2:dc:b2:f5:36:9b:0f:08:41:e2:88:a9:58:
61:b2:96:b3:3a:23:2d:d1:64:0f:4c:41:12:6d:e9:
40:a4:24:f1:21:38:8f:fc:66:aa:54:36:cd:4a:d3:
8f:82:a2:07:d1:96:cf:4d:89:54:ed:61:e7:f1:e4:
63:55:10:62:db:1a:4c:5a:3c:c5:13:14:0e:5b:5e:
7d:c0:5f:7b:df:11:6c:43:df:ca:df:b1:2a:37:6c:
7b:f5:36:fe:68:00:e6:9b:54:25:d3:e9:ae:00:0b:
3f:ea:3e:57:7e:7f:3e:5f:eb:90:67:7e:91:85:59:
81:72:c2:2f:dd:e1:c8:b2:d1:80:4a:f0:92:ac:fa:
43:6c:03:07:fb:47:7b:70:ef:b4:29:7a:1a:dd:95:
45:37:d4:1f:75:d1:23:1e:b7:bb:0e:6f:32:ef:62:
50:83:96:c0:6b:84:d0:41:09:ca:51:86:ef:0a:16:
6a:03:66:cf:12:23:77:7f:5c:8d:ae:03:2c:ff:89:
db:f6:66:17:ed:55:1a:ba:3d:50:52:98:a8:2e:e2:
a2:b9:0e:e4:3c:48:be:0e:b5:98:a1:50:18:23:14:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5F:98:FD:6C:BC:55:0B:D7:68:3D:5F:18:F4:86:1D:B8:D9:7A:23
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YF-Y_Wy8VQvXaD1fGPSGHbjZeiM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c6:0e:8c:d9:fb:8c:d1:16:c5:8d:af:f6:6f:2a:08:53:dd:e9:
84:9b:40:b6:ae:37:9d:b0:47:30:bb:52:da:c9:b2:5b:51:17:
ed:9f:63:aa:ff:91:bc:4d:ea:59:97:dc:32:74:03:90:1f:9e:
18:92:33:75:90:c5:79:c4:23:5a:aa:b6:b1:e1:ba:4c:e4:0e:
87:e6:0a:fb:f3:65:64:77:f7:8b:bb:d3:55:a4:39:70:a8:39:
42:bb:4d:7e:05:7d:fc:89:9b:63:3f:47:10:4d:5e:40:6c:07:
65:18:ea:7e:85:46:5f:62:c4:e8:8b:0c:b0:48:49:22:57:bd:
9f:29:c8:68:70:78:15:b6:45:da:fc:e8:74:6d:e6:37:d6:98:
a3:ee:d1:45:bd:78:76:ae:38:e5:6e:7c:e9:72:79:44:81:8a:
2f:c7:87:f8:74:36:db:49:f6:0b:38:48:3f:22:02:59:5c:12:
33:e8:21:27:8e:a5:06:f7:9b:46:e1:dc:b3:91:fa:3e:99:52:
ce:19:07:db:5e:a3:19:4b:11:45:40:0e:2d:25:cc:24:35:4b:
42:82:d8:f0:59:57:0f:d6:6a:d0:4c:98:65:df:c9:82:c1:e0:
5e:a4:3d:a9:2e:b3:c2:d1:63:e3:49:fd:c4:f3:18:2e:f9:94:
40:1d:6d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:55:37 2025 by rpki-client