Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/y1jT_dEH7EmHD1benJJC0qLK_5M.roa
File: y1jT_dEH7EmHD1benJJC0qLK_5M.roa (raw, json)
Hash identifier: n83J/mrBEzNE2a9FiE4GN539oNjbMjpqsA6gRfenWJw=
Subject key identifier: CB:58:D3:FD:D1:07:EC:49:87:0F:56:DE:9C:92:42:D2:A2:CA:FF:93
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 13CA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/y1jT_dEH7EmHD1benJJC0qLK_5M.roa
Signing time: Fri 12 Apr 2024 17:53:16 +0000
ROA not before: Fri 12 Apr 2024 17:53:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5066 (0x13ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 17:53:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CB58D3FDD107EC49870F56DE9C9242D2A2CAFF93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:da:86:4e:43:7c:cd:11:c4:ca:5c:2f:58:
b3:16:24:a8:b4:f8:12:6c:d1:9d:24:78:d4:db:52:
0e:e7:8a:cd:15:4a:04:7c:62:e9:0f:d7:66:72:e1:
33:1e:a9:f4:61:01:6c:c3:21:f7:90:89:a1:7e:b4:
ae:fe:2b:40:88:e7:ee:ea:2f:ee:d1:78:e5:cf:d4:
89:ce:6c:ba:58:dc:c0:a5:8c:7a:fc:3a:97:a2:ab:
c1:2e:19:8e:40:1c:49:70:90:27:f6:18:aa:ac:d5:
ff:84:5b:ea:f4:45:96:1a:28:c3:5a:ae:5f:40:4e:
16:76:f1:17:91:f3:19:01:db:e4:a4:9d:59:9b:a7:
43:d2:af:fa:d8:fe:7d:04:b6:43:af:20:fa:8e:13:
b6:7b:89:20:0f:20:3e:51:a8:8d:89:ca:bf:81:dc:
00:64:26:53:ee:3e:e0:60:83:b6:a0:da:a5:29:bb:
8c:27:42:5c:0a:76:02:1e:4a:66:ca:17:aa:61:c6:
04:2a:bc:49:6b:4d:0c:3f:91:0c:ea:7d:66:01:1a:
72:e3:94:8b:25:9e:a7:3d:87:e4:41:66:4a:37:77:
c5:f4:8f:cb:c9:84:2c:83:db:ff:18:17:e3:47:0a:
1c:a7:af:65:c8:a2:63:55:58:f3:22:3f:f0:f7:f6:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:58:D3:FD:D1:07:EC:49:87:0F:56:DE:9C:92:42:D2:A2:CA:FF:93
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/y1jT_dEH7EmHD1benJJC0qLK_5M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:67:62:17:d3:58:d3:0a:30:69:9e:07:34:0f:4b:95:d3:51:
19:68:07:4c:06:3a:23:b0:e9:13:35:73:b9:cf:f3:2c:3a:bf:
d8:e9:48:f7:ff:4d:8a:c5:92:ab:5a:09:e0:cc:06:77:65:64:
9c:7f:41:63:e4:16:6b:c4:37:5d:4c:28:5a:50:88:1d:d4:8d:
22:e3:38:c3:d9:18:f2:cc:aa:79:20:13:f3:1e:6f:80:0d:d8:
85:3c:3d:24:64:87:ac:61:5d:ad:d2:3a:ea:4f:d7:28:16:dc:
2d:3c:c6:9c:3f:b0:02:41:01:79:c4:f8:90:ca:bd:61:7e:80:
02:7a:75:13:e9:28:a8:2f:5f:c4:8d:d8:02:f2:97:87:fa:1e:
02:7e:b3:a6:08:c2:5e:5e:2f:67:1e:7f:9f:c3:1c:48:c9:6d:
14:1e:c5:be:cf:20:f6:53:c4:c9:5a:51:b3:7d:bd:79:5b:be:
09:2d:90:50:c8:af:20:ba:df:76:24:cb:a4:04:34:8e:96:ab:
7b:98:84:cb:d5:0c:cd:a5:b2:f3:a2:ec:51:a9:50:9b:a0:63:
72:11:91:10:92:e0:fa:b2:ed:6e:cd:90:61:1d:5c:e9:da:b2:
83:9e:1a:bc:50:d9:17:13:c1:97:8d:cd:b6:37:e0:b4:7c:94:
2b:79:ec:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:42:09 2025 by rpki-client