Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/YcLkZ9tpgswLH74SWVgDNz3hZ88.roa
File: YcLkZ9tpgswLH74SWVgDNz3hZ88.roa (raw, json)
Hash identifier: g9T26FDMnmlfituQ9KNmj3S4dtYqHXv52SppNkXXb7I=
Subject key identifier: 61:C2:E4:67:DB:69:82:CC:0B:1F:BE:12:59:58:03:37:3D:E1:67:CF
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C28
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YcLkZ9tpgswLH74SWVgDNz3hZ88.roa
Signing time: Sun 05 May 2024 01:24:13 +0000
ROA not before: Sun 05 May 2024 01:24:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7208 (0x1c28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 5 01:24:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=61C2E467DB6982CC0B1FBE12595803373DE167CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:58:93:1e:df:23:66:45:57:09:b7:a5:2b:
89:1d:3d:5f:ff:84:25:26:47:03:db:f5:3d:dc:18:
95:84:e5:f1:94:84:7c:70:e3:9f:12:30:b4:3d:cd:
72:fc:7b:de:e8:d9:95:bc:ea:77:31:f7:a0:df:42:
bd:5f:47:a1:0c:be:4d:44:eb:a6:6e:25:f7:41:17:
0c:a1:c2:74:57:53:31:27:de:f3:b9:c3:5a:d7:04:
22:b5:86:54:95:44:e9:e0:08:55:ea:cb:c7:88:a0:
81:87:ce:07:77:37:66:6d:2c:65:8d:b2:4d:11:e5:
7b:97:94:a0:aa:b7:49:6d:e6:28:fb:b3:16:69:84:
44:fc:4d:ea:45:e8:ba:0f:fb:10:cd:26:7f:59:a5:
45:4c:b1:7a:59:3d:63:be:1e:66:53:cb:3b:b4:5f:
22:87:c6:46:26:18:a7:71:cc:e4:6f:5c:c3:3d:86:
9b:00:a2:48:bd:2a:70:d9:65:b5:92:c4:d2:0d:51:
aa:6e:56:9f:65:ff:08:58:22:5b:9f:49:7c:38:22:
d6:83:04:c4:37:bb:02:82:d7:b5:73:3b:8c:f2:6b:
9a:06:c5:17:b4:68:be:5c:15:8b:8e:f7:86:5a:35:
84:10:e9:1c:75:a6:0a:21:b0:9d:77:ee:39:c3:c3:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C2:E4:67:DB:69:82:CC:0B:1F:BE:12:59:58:03:37:3D:E1:67:CF
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YcLkZ9tpgswLH74SWVgDNz3hZ88.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:d0:d4:ae:ee:5e:6b:af:e3:b9:f2:4c:3f:bb:7c:67:bb:05:
b3:8b:f9:bf:1c:26:07:85:b5:1e:c3:c4:8e:10:70:d1:93:6d:
83:31:58:67:b0:87:55:3f:f4:71:e8:dc:c4:6a:9d:fb:68:69:
a0:42:83:fc:3d:eb:cc:78:b5:69:57:9e:06:0e:ba:92:6e:a8:
cc:49:ea:60:11:39:4e:4f:cc:11:0b:10:05:9c:13:2e:a7:44:
ce:83:6e:e2:68:cc:22:32:09:ca:37:a3:c9:84:69:87:66:d1:
6b:43:c6:a6:c7:a6:2c:f4:37:6d:8b:d3:41:e6:71:b3:b1:45:
0a:1a:11:9a:86:4a:e2:e7:77:93:d6:e3:ff:a1:5e:55:b2:3b:
6a:61:56:42:f5:32:6d:c0:35:e9:01:c7:03:8c:37:8b:7b:ab:
60:f0:14:74:10:6e:7b:73:25:04:2a:36:b2:81:7a:75:08:05:
6e:e1:21:37:8e:6b:00:de:bd:14:b8:51:14:59:0d:23:46:df:
3c:4d:a6:4f:44:6c:c0:67:98:89:65:56:e0:1e:ae:47:e2:26:
44:d1:f5:e7:99:03:96:54:3e:a1:9c:31:8d:34:5d:fa:f3:d6:
91:0a:00:f9:09:9c:70:0b:eb:a7:53:47:5d:e4:de:c9:bb:1d:
7d:f3:5e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:55:36 2025 by rpki-client