Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vy_PzoTPmeMpjv8dZBRaafyeBFY.roa
File: vy_PzoTPmeMpjv8dZBRaafyeBFY.roa (raw, json)
Hash identifier: yAk6xwNOvcDg+7Kvp+msaUdn26WjYIo9Vk5uL0LWTX8=
Subject key identifier: BF:2F:CF:CE:84:CF:99:E3:29:8E:FF:1D:64:14:5A:69:FC:9E:04:56
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1462
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vy_PzoTPmeMpjv8dZBRaafyeBFY.roa
Signing time: Sun 14 Apr 2024 07:53:17 +0000
ROA not before: Sun 14 Apr 2024 07:53:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5218 (0x1462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 07:53:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BF2FCFCE84CF99E3298EFF1D64145A69FC9E0456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:f1:42:fd:06:a5:7f:aa:06:8e:b8:e3:59:
3f:f0:9c:ba:9e:90:0c:07:8c:06:da:2f:5d:92:9a:
2e:79:48:62:fe:9d:33:13:5e:93:ed:23:ad:2b:c4:
94:72:2a:72:b3:5c:8a:52:d4:8c:fa:49:90:43:8b:
2b:35:ba:c2:69:03:0e:df:94:a7:e4:ee:56:0e:0e:
f9:00:af:cc:1b:3e:d3:a5:d8:7d:ca:fc:07:bc:6a:
ec:96:dc:4b:c0:02:fe:36:fc:6c:3b:9d:c1:7b:df:
c7:d6:ba:6f:fe:85:09:8b:b0:75:c6:79:ce:f0:3b:
d9:a9:fb:ef:5e:fb:dc:45:2d:d3:57:f1:a2:ce:8e:
d4:7e:61:40:54:ee:88:32:95:c9:8b:64:1d:0b:ff:
58:7d:97:32:98:5d:74:fa:8e:93:92:b3:da:55:10:
3f:bc:22:ee:ef:9a:23:78:03:bc:76:56:5c:7d:a5:
29:e7:64:9c:b5:c9:43:64:06:8b:62:75:24:df:bc:
0a:ca:be:6b:a0:ab:c0:5e:5e:c7:a3:29:6d:12:7c:
6b:45:38:c3:88:8c:74:c4:4e:7a:d3:47:6c:2b:bf:
2b:4f:ba:10:b7:03:a5:fd:00:70:6c:47:46:a0:26:
b6:91:f3:a8:8b:41:4e:ea:ae:f1:b7:ca:3a:69:d0:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2F:CF:CE:84:CF:99:E3:29:8E:FF:1D:64:14:5A:69:FC:9E:04:56
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vy_PzoTPmeMpjv8dZBRaafyeBFY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:c8:0d:14:a6:16:c5:d2:bd:d4:38:91:c5:d9:42:41:11:6c:
0c:da:c0:01:ce:c3:04:cf:62:61:5e:4d:4a:22:0a:9c:63:9a:
a1:ab:e0:ff:33:57:6e:f8:73:60:7b:be:75:97:d0:f2:8f:5a:
8d:c1:2d:1a:f5:a2:c6:48:a5:e1:ba:e1:81:6a:2a:f0:5a:6f:
1c:16:d4:61:0e:03:61:3b:df:6d:dd:07:6d:0d:8f:45:4a:4e:
41:eb:1a:2c:7f:20:dc:1a:36:04:97:e2:74:56:70:79:ab:83:
5f:38:27:2f:18:ec:a4:9c:b0:db:c0:d4:53:32:06:4a:02:2d:
76:e4:c3:b8:8d:d3:42:a0:d7:20:d0:bf:f2:03:7b:ac:76:e0:
4d:8a:a3:71:12:9f:af:1a:80:a2:e8:cf:21:c7:53:13:c7:40:
f9:5d:73:88:9a:59:a1:4f:4d:c8:07:5f:0e:89:a3:f7:6e:ad:
32:ca:9c:98:b1:5b:f0:ba:3c:46:13:e0:4e:87:19:fc:bc:31:
3b:ec:83:ed:31:28:77:8c:ff:48:10:b7:d1:26:64:00:1d:ef:
9c:59:89:23:89:53:68:71:89:0a:e4:39:af:42:ec:51:e1:cf:
41:83:87:4b:6e:2f:9a:38:3f:79:b4:c8:4f:14:b0:e7:e2:76:
00:fe:7c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:50:02 2025 by rpki-client