Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/YNiJMsSgajhWyAuA5-J_g7e8qdM.roa
File: YNiJMsSgajhWyAuA5-J_g7e8qdM.roa (raw, json)
Hash identifier: weMLd04PpfaVnw9q4yQzU2CgDZXQ4spIMhlFrstcYrE=
Subject key identifier: 60:D8:89:32:C4:A0:6A:38:56:C8:0B:80:E7:E2:7F:83:B7:BC:A9:D3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14DC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YNiJMsSgajhWyAuA5-J_g7e8qdM.roa
Signing time: Mon 15 Apr 2024 14:23:19 +0000
ROA not before: Mon 15 Apr 2024 14:23:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5340 (0x14dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 14:23:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=60D88932C4A06A3856C80B80E7E27F83B7BCA9D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0b:d8:30:61:46:e9:fe:96:c5:a9:f5:ef:bf:
a8:54:b9:60:36:f7:cd:4b:e8:73:ef:01:ea:7e:14:
11:34:80:44:e9:69:42:85:21:87:77:da:f7:e2:af:
71:26:a7:80:c1:85:d5:1b:79:d3:bf:59:9e:29:38:
09:3a:72:de:f5:67:79:87:b6:10:ed:26:1f:6b:8e:
2f:66:4a:96:21:a9:a3:f5:8e:fe:01:c5:fa:de:2d:
bf:2c:a8:44:a1:cc:11:ce:2d:57:b3:01:9b:c9:01:
85:8a:ad:d2:f4:79:3c:52:d7:a0:89:72:79:73:79:
c9:c5:99:a6:6c:2e:03:4b:63:81:d6:39:11:66:61:
90:da:e5:93:59:39:c5:d2:60:91:41:84:cf:9a:1d:
4a:5a:76:bb:27:1b:10:4e:e5:87:36:3e:05:bd:72:
b5:a3:b4:5b:bc:45:05:b6:3f:fc:c6:f6:32:67:ed:
68:18:90:2b:87:27:e7:3f:a4:b7:ce:e5:cc:be:6f:
d9:c6:d0:81:18:75:2e:2d:8a:b9:d9:18:e7:4e:1e:
6e:4e:c2:3a:77:42:4e:59:e2:50:8b:0d:1c:f8:96:
75:d0:4b:91:59:0e:61:f5:ce:76:c7:d7:e4:3d:ed:
b1:91:29:82:67:06:47:2a:81:c8:f9:1a:35:4b:90:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D8:89:32:C4:A0:6A:38:56:C8:0B:80:E7:E2:7F:83:B7:BC:A9:D3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YNiJMsSgajhWyAuA5-J_g7e8qdM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:db:57:b3:2b:03:5d:d1:9f:d5:6f:0d:61:a5:64:7d:ab:ba:
1f:dc:e5:54:23:6a:60:b4:c0:a3:37:29:7c:79:e1:56:47:d5:
a3:79:5e:81:7c:cc:73:a5:08:7d:ae:57:3a:68:56:4f:dd:37:
de:58:4c:cc:c1:0c:52:cd:fc:d4:ca:2c:4f:29:d0:d8:af:f4:
15:9b:11:bc:2a:6d:15:8a:9e:ee:b7:7a:96:06:b6:fc:0b:e8:
e5:45:fb:7b:7e:82:63:65:ec:95:db:17:ad:c9:ef:06:89:30:
cd:9f:cb:cc:23:05:cf:08:de:66:64:39:8c:ce:22:d4:00:91:
76:61:f8:70:b2:2a:2b:8a:bf:49:4e:95:8e:cf:c9:0c:91:05:
81:18:c0:ae:f1:bb:ac:0f:72:28:55:34:89:56:37:d1:04:df:
c8:a8:b2:06:e3:85:c2:62:ec:4c:04:44:e4:a8:5d:21:bb:1b:
4f:31:bf:74:2b:35:50:1a:c7:3c:3f:ff:75:a7:f0:1a:da:d2:
b4:e6:3b:6b:c3:75:0c:b4:be:87:4e:53:74:35:1d:44:39:8b:
25:72:52:1c:23:76:f9:51:54:45:a4:f3:11:32:22:b1:98:9d:
46:cd:ec:68:ac:84:de:22:3f:a3:fe:ab:d4:f8:71:63:c0:f0:
e9:8a:9d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:57:45 2025 by rpki-client