Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/yBNmlxQw5EVGymFYXvIxyn9XwGs.roa
File: yBNmlxQw5EVGymFYXvIxyn9XwGs.roa (raw, json)
Hash identifier: poihJBktKPH8lVfoEWUsZWMfpgFd+8JEMx5KLV6Lpsk=
Subject key identifier: C8:13:66:97:14:30:E4:45:46:CA:61:58:5E:F2:31:CA:7F:57:C0:6B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F06
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/yBNmlxQw5EVGymFYXvIxyn9XwGs.roa
Signing time: Sun 31 Mar 2024 00:52:32 +0000
ROA not before: Sun 31 Mar 2024 00:52:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3846 (0xf06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 00:52:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C81366971430E44546CA61585EF231CA7F57C06B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:00:74:03:58:cf:37:af:2f:0d:da:9c:d8:
18:02:d4:32:b9:10:2c:e6:fa:e9:c7:31:56:90:f3:
aa:0d:1e:1e:d2:61:26:73:40:63:4d:c4:ee:e4:fa:
0e:24:3e:f0:35:d6:6e:fc:86:b1:6e:af:21:1c:a5:
2e:84:ff:aa:27:3f:99:cd:f6:8c:11:ec:69:10:65:
25:f4:a8:21:d5:b6:a8:b7:cb:b9:51:4c:be:59:61:
56:dc:e4:cf:c2:c0:96:06:a4:1b:66:4f:3c:23:5d:
c2:1d:13:8c:13:75:8f:c0:c3:b8:e2:35:0b:55:80:
4b:72:34:6f:d2:85:4d:14:c0:9f:25:de:71:95:e8:
93:0f:07:f3:a1:f9:3c:4e:49:2c:04:ce:06:b6:70:
e4:6a:ac:06:eb:ad:52:e1:e9:8e:1f:63:15:9f:da:
20:26:2c:c9:71:d0:58:7f:92:cd:a6:30:3a:91:b3:
94:f5:54:f9:7d:5d:18:db:7a:24:32:0e:be:e5:a0:
95:49:10:96:7f:36:87:2f:1a:1e:04:60:68:84:0b:
e7:60:a5:9a:8c:3b:81:30:22:c3:6f:6a:ac:38:a0:
cc:7c:92:80:03:26:cc:a2:7a:16:60:e3:a3:7c:74:
7e:b6:a8:9a:18:e6:58:ac:c1:05:d8:72:0b:a8:d9:
6e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:13:66:97:14:30:E4:45:46:CA:61:58:5E:F2:31:CA:7F:57:C0:6B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/yBNmlxQw5EVGymFYXvIxyn9XwGs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bc:6b:dc:c0:b5:f6:ff:ab:ab:5e:65:ca:e2:11:7a:21:af:8a:
71:6c:eb:7f:26:10:69:74:ec:a4:6f:b1:63:d0:77:a6:a7:98:
39:50:a7:ac:fd:d9:63:27:e2:f3:ea:1b:64:c3:a4:b1:dd:4a:
b0:0c:d8:da:48:45:1b:ba:ab:15:11:9f:8e:c4:10:d1:bc:9f:
bb:96:17:93:db:b5:15:3e:78:ac:8d:b6:f3:51:1c:0a:aa:29:
ed:4d:67:55:d4:f4:cf:dc:4e:31:42:e8:d5:63:2f:45:83:35:
8b:3b:5f:af:f4:b0:6f:0f:26:92:68:08:60:74:49:f8:64:f2:
78:99:42:de:67:f0:1b:ea:95:00:96:9a:a5:d1:df:98:6b:f9:
cf:53:1b:c8:01:ab:68:ad:db:6b:e6:02:2a:f0:28:0c:0a:28:
c4:f9:de:ad:cb:6f:b9:85:0d:c8:8f:2e:81:87:cb:70:a3:cf:
25:43:90:a2:0e:72:56:96:16:21:17:7f:fc:51:a5:16:f8:16:
aa:28:e4:7d:b9:8b:51:7c:e1:60:78:d6:85:f0:a5:15:aa:65:
bd:72:c7:7a:ac:cf:26:d7:6b:36:a3:34:a1:7d:fe:98:26:3e:
0a:cb:65:92:ef:d4:ff:39:09:dc:9c:0f:69:9e:b9:30:ba:04:
3d:a0:bb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:56:44 2025 by rpki-client