Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/PYpHxlY3cQRJjfEgUMlhxnTK4b8.roa
File: PYpHxlY3cQRJjfEgUMlhxnTK4b8.roa (raw, json)
Hash identifier: QOk3YZuIPyge+bYzuXUjrwP8I9S3HR0LRzDjGpCiyGo=
Subject key identifier: 3D:8A:47:C6:56:37:71:04:49:8D:F1:20:50:C9:61:C6:74:CA:E1:BF
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1814
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/PYpHxlY3cQRJjfEgUMlhxnTK4b8.roa
Signing time: Wed 24 Apr 2024 04:23:48 +0000
ROA not before: Wed 24 Apr 2024 04:23:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6164 (0x1814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 24 04:23:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3D8A47C656377104498DF12050C961C674CAE1BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:7e:5c:b8:86:50:1f:2c:65:e7:cd:a9:e5:
c2:66:3f:00:b4:0f:de:83:d3:12:21:0c:ff:96:9f:
7e:12:b4:b7:65:f1:b6:3f:58:58:97:45:17:ac:54:
26:0b:3d:62:54:d3:77:ef:6b:78:a6:f6:da:10:1f:
d9:f9:9c:d6:a2:27:66:c0:f0:69:f1:2b:89:53:81:
5f:74:b0:b5:d3:2b:71:65:7a:9c:2c:6e:b8:8d:6e:
83:29:41:5d:a1:7b:e5:73:2a:a1:91:07:59:fb:da:
8f:d2:95:bc:a8:c5:9e:5c:3f:da:44:0d:ad:f1:55:
63:bc:8e:4b:2e:13:45:c6:63:38:e6:d4:4a:72:89:
2a:f3:c6:9b:6e:91:ea:69:0a:d9:7f:ab:28:33:cc:
29:5b:62:35:64:2c:73:22:0e:bc:98:b8:30:63:46:
e5:ea:f7:1c:75:f8:d1:2c:ba:ac:3e:fc:9f:b7:49:
b4:6f:4a:b6:35:f9:71:67:de:c4:a9:c1:ff:ea:33:
89:55:4b:09:b8:da:57:15:4e:2b:d9:28:8c:11:59:
ed:d7:fd:97:e7:ce:aa:49:ef:67:2a:a8:59:70:a2:
4d:18:1f:b8:d1:d9:db:f7:a7:a3:56:77:d5:bf:2f:
13:8c:ec:1c:85:e0:e7:e5:7f:77:36:f4:89:bb:9d:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8A:47:C6:56:37:71:04:49:8D:F1:20:50:C9:61:C6:74:CA:E1:BF
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/PYpHxlY3cQRJjfEgUMlhxnTK4b8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:36:85:2b:38:43:e7:2b:8f:fa:b2:28:9f:29:64:c4:e4:44:
ed:f3:a6:d5:9c:98:28:46:46:f6:0d:21:71:51:a0:96:e8:02:
c0:c5:cf:09:07:a0:bc:8f:a0:50:58:8e:d1:8c:45:6e:b3:c1:
26:b3:c8:66:2f:58:fd:2c:e8:4d:1a:15:9c:a8:e2:3c:6c:32:
f0:64:f2:d9:0c:3f:5b:59:f6:d3:43:06:55:b4:3f:61:93:e4:
6d:4b:c4:fb:bb:68:8a:68:bc:f7:54:ee:b8:d2:51:48:f5:83:
86:2e:1b:6f:ee:f8:be:79:06:19:9e:ff:59:f9:25:32:24:c6:
1e:7b:16:9a:36:6e:d8:35:75:19:d4:df:77:23:46:31:70:70:
c7:43:12:6b:0f:00:d4:c1:37:9d:57:73:17:b2:e1:ae:8e:1a:
a2:5d:f8:8c:fa:42:0a:f2:f8:91:cb:d0:49:bf:73:ac:ec:8d:
bd:00:20:53:fc:92:d3:e7:6c:bd:18:a2:e6:03:13:7f:12:69:
89:25:e0:0e:39:3d:d3:14:41:9c:45:78:4e:e3:71:e1:d9:ab:
43:41:0c:a0:be:f2:77:54:85:4a:31:b0:08:19:0f:90:4f:fe:
7a:08:78:83:ea:77:90:90:83:37:c6:7f:34:d7:b0:9c:d9:57:
7f:40:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:30 2025 by rpki-client