Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/yoXs_wb2rv0KU13Q-_16zMco-Rk.roa
File: yoXs_wb2rv0KU13Q-_16zMco-Rk.roa (raw, json)
Hash identifier: 0r9np69ScrXfnc/izv+fT1ACtk0l7y3+MmjKstCOezQ=
Subject key identifier: CA:85:EC:FF:06:F6:AE:FD:0A:53:5D:D0:FB:FD:7A:CC:C7:28:F9:19
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1422
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/yoXs_wb2rv0KU13Q-_16zMco-Rk.roa
Signing time: Sat 13 Apr 2024 15:53:14 +0000
ROA not before: Sat 13 Apr 2024 15:53:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5154 (0x1422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 15:53:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CA85ECFF06F6AEFD0A535DD0FBFD7ACCC728F919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:3f:c9:46:1e:c1:6b:f5:f9:dc:3e:e8:98:
18:c1:03:85:7d:a4:c6:b6:f2:b3:66:08:6a:2e:49:
1a:81:8e:e5:37:f9:d1:d9:6d:43:64:e7:40:68:b8:
24:f7:d5:4c:58:fe:b1:16:e8:22:46:56:b0:4a:f0:
71:49:bd:f5:4b:5c:63:5b:6e:c9:60:de:b2:c0:89:
6d:4e:03:00:78:61:46:ae:6a:31:5f:09:88:4b:03:
a7:a1:b2:72:e7:81:3d:db:8d:60:2d:b0:5f:91:d1:
bd:9d:12:37:10:83:ef:2a:f2:d8:8c:d3:f5:7a:f3:
ba:8e:59:9c:ca:50:d5:91:f6:89:33:4d:88:a4:49:
75:25:09:6f:a5:11:0a:ec:8e:99:7e:f1:a4:85:b0:
c6:6a:13:8e:94:5f:f4:18:a8:e6:33:c4:a8:58:8e:
d5:6e:55:9e:14:18:c8:e5:cf:41:5e:f5:02:ef:ec:
5d:40:fa:0c:23:b9:d1:32:33:a2:48:9a:2a:66:6e:
5a:bb:5a:3c:f2:19:df:25:77:92:c0:11:0b:c3:34:
94:9a:92:ba:62:20:eb:3d:5a:07:5b:35:0a:0c:f9:
f5:f4:77:72:c2:2c:4d:0d:b9:78:1f:a7:5f:59:cc:
f3:06:e3:70:56:cb:67:e3:f1:b5:85:ad:e3:9a:1d:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:85:EC:FF:06:F6:AE:FD:0A:53:5D:D0:FB:FD:7A:CC:C7:28:F9:19
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/yoXs_wb2rv0KU13Q-_16zMco-Rk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:b7:a4:af:fb:e2:04:7c:d4:41:b8:33:1c:5b:f2:ad:cc:bc:
14:6e:34:8a:99:86:52:78:e9:75:12:8a:b5:3f:4c:e9:d6:75:
b9:66:07:89:6d:b9:e4:55:0b:12:d0:4d:ba:e1:7d:f2:47:c6:
c1:fc:bb:09:7f:4a:ac:8c:2c:ee:fc:85:ee:bf:86:ad:fa:82:
54:7b:9e:eb:f7:96:94:e4:61:7b:32:ed:93:9d:f3:27:cb:fb:
b7:76:3b:9c:d2:01:f1:cf:bf:83:86:8b:68:7f:21:7b:15:91:
31:7a:2a:16:e0:e8:36:f2:f1:ad:fa:13:94:f7:6c:92:3f:65:
91:b9:23:13:f9:f8:25:4e:a6:ed:6e:b1:fd:d4:f2:f1:f1:67:
95:b1:55:58:49:ba:2c:2e:04:30:b0:e4:4c:1b:1f:1e:e4:b3:
be:74:bc:fa:28:48:77:8c:55:72:92:2d:36:ee:ce:3a:8c:25:
72:31:f4:89:70:62:06:9a:cc:dc:96:0b:00:56:2c:a0:01:6e:
e0:19:32:d4:d0:9d:42:83:43:89:f2:3c:65:0f:98:09:4c:42:
c7:e3:26:59:c8:ff:12:8d:c7:68:18:ac:79:4c:e7:df:d0:75:
7b:fb:f9:00:ca:99:a0:26:67:b2:bb:00:c5:d8:bb:71:68:d7:
74:f5:57:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:49:19 2025 by rpki-client