Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/p618Ywi2YfCA5IH4V0cHbnikP4Y.roa
File: p618Ywi2YfCA5IH4V0cHbnikP4Y.roa (raw, json)
Hash identifier: SCBrYVjcdan2JI/MJWOIG8jBbGBQAyReUup4bAyp8Fg=
Subject key identifier: A7:AD:7C:63:08:B6:61:F0:80:E4:81:F8:57:47:07:6E:78:A4:3F:86
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 12C8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/p618Ywi2YfCA5IH4V0cHbnikP4Y.roa
Signing time: Wed 10 Apr 2024 01:23:05 +0000
ROA not before: Wed 10 Apr 2024 01:23:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4808 (0x12c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 01:23:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A7AD7C6308B661F080E481F85747076E78A43F86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:47:5c:8d:e0:d6:31:b7:98:22:2e:b3:90:
5f:83:37:3e:74:7c:51:99:f0:b8:96:5f:20:53:f7:
0a:8e:16:ef:97:5d:c0:90:22:f4:72:4b:a4:e6:42:
60:dc:ce:6f:c6:b5:a8:38:25:67:a0:be:b3:f5:3a:
44:43:86:05:f9:03:27:0d:c9:65:db:a0:d6:63:ca:
4a:a7:84:2e:a2:3c:95:6e:42:da:5b:d5:a2:e3:ee:
9d:c2:3c:e5:90:3d:54:71:63:4a:4f:f9:4c:b2:a4:
84:85:6e:f9:8c:ca:64:f3:81:96:70:3d:e5:4d:70:
f8:b1:b2:20:58:ca:b0:55:eb:d9:eb:48:69:7a:e8:
ac:a8:19:65:3f:29:5c:84:f8:98:43:fd:14:5a:8b:
0a:51:7d:73:46:45:0b:f4:39:cf:c0:5b:96:58:82:
f6:8c:07:47:6b:7f:73:ee:3b:8e:29:36:b8:56:98:
48:8f:0f:33:51:bb:13:e4:21:70:40:18:67:7a:4e:
00:72:f0:1c:7a:78:3b:83:9b:5a:cf:e7:7c:0d:40:
4f:5c:7f:a3:42:e7:60:88:a4:53:c3:d9:45:03:17:
b0:b4:75:75:36:89:b1:7a:2e:f7:4e:ab:a8:b4:c5:
9e:1a:dc:d1:ac:ef:df:b6:f1:22:cb:79:ea:aa:73:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AD:7C:63:08:B6:61:F0:80:E4:81:F8:57:47:07:6E:78:A4:3F:86
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/p618Ywi2YfCA5IH4V0cHbnikP4Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:16:fb:08:20:6d:e1:6b:5e:e3:d7:ab:1f:3e:dc:b1:da:f3:
10:eb:8f:6e:e5:02:63:d6:ce:ee:52:d8:f4:3b:69:3c:7f:de:
cc:96:5a:dd:a0:de:9d:b9:e2:32:e2:cb:16:35:30:28:db:a2:
cf:4b:4d:f4:54:97:c5:49:c2:56:41:1e:a4:a9:d1:76:74:71:
02:ba:d4:a0:59:fb:8a:35:2c:0e:3c:31:81:9e:7b:20:d9:2a:
13:b6:b0:ba:dc:f9:51:e5:28:04:b7:51:c0:42:cf:25:a2:6d:
7c:54:0a:8b:5c:e4:51:c3:42:f1:f0:fb:e5:42:48:70:be:78:
33:02:13:20:26:bc:71:12:ce:d1:26:a8:1c:29:c5:b2:72:ea:
93:25:14:74:5f:4c:94:b4:46:b7:f7:80:59:00:34:78:be:60:
be:47:70:0c:07:94:2d:03:9b:e9:4c:d9:5c:63:10:05:14:40:
32:a3:55:64:9c:6b:d5:e5:1c:3b:da:0f:e3:81:c3:81:34:3e:
03:4f:7e:bf:4a:43:56:33:96:3c:d6:bb:e5:a7:69:c1:a7:a7:
8d:00:73:74:4a:d2:36:11:6b:3d:dd:84:c7:46:91:eb:15:24:
57:05:03:b2:60:5e:fc:ac:61:5f:54:da:74:02:4c:c8:d8:6d:
8f:54:28:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:38 2025 by rpki-client