Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/yKLNxoCWqMDUJngemQIZfSO-NDU.roa
File: yKLNxoCWqMDUJngemQIZfSO-NDU.roa (raw, json)
Hash identifier: pQ2neyiOgYQ90ibig1qQdGqnYK+rjzcODcDkzVSvz0M=
Subject key identifier: C8:A2:CD:C6:80:96:A8:C0:D4:26:78:1E:99:02:19:7D:23:BE:34:35
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1052
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/yKLNxoCWqMDUJngemQIZfSO-NDU.roa
Signing time: Wed 03 Apr 2024 11:52:45 +0000
ROA not before: Wed 03 Apr 2024 11:52:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4178 (0x1052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 11:52:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C8A2CDC68096A8C0D426781E9902197D23BE3435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:3d:a6:5d:48:c0:f1:51:34:6a:dc:9f:61:
59:b8:56:5e:f9:47:07:35:fa:ff:c3:cb:9a:0a:b9:
2c:e5:f5:de:a8:6e:2d:8d:d3:7a:5d:61:7f:6d:27:
01:a6:9e:c0:eb:79:a2:98:80:ce:bd:2d:89:1d:5b:
63:26:a7:07:43:d3:62:95:9b:30:cc:29:b2:be:eb:
42:15:10:22:79:e5:10:83:30:23:ea:c4:b5:f0:e2:
8e:6b:e8:2c:1e:df:85:f1:b1:43:77:9e:86:ca:16:
0d:19:6c:08:d5:71:9d:a4:44:29:b7:d3:48:76:a7:
d5:77:1d:b0:d8:d9:4a:dc:73:8b:12:16:8a:24:e1:
b8:d9:c8:db:5a:0a:bd:56:51:04:df:4c:74:85:62:
31:1c:d0:7e:e4:d5:b3:1b:eb:f7:ef:ee:53:54:b4:
3f:6f:e6:1d:32:81:e4:db:7a:eb:44:65:a3:68:5f:
7b:4a:80:f9:ca:c0:c6:6f:00:80:13:e0:15:e7:6a:
90:30:aa:40:19:67:e7:15:cc:9e:cf:a3:de:8d:53:
dd:7e:16:8c:65:c6:66:06:d6:d7:39:a9:d2:e1:24:
0c:f8:19:3a:e2:ac:79:2b:a1:36:2d:e4:d3:b9:3e:
76:76:b2:5b:d7:0d:a4:78:39:7e:c5:32:e1:89:d8:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A2:CD:C6:80:96:A8:C0:D4:26:78:1E:99:02:19:7D:23:BE:34:35
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/yKLNxoCWqMDUJngemQIZfSO-NDU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:d1:79:a4:3c:0a:af:3c:5b:4e:dc:23:6f:3e:fe:3c:0e:d9:
01:f0:06:bd:b5:71:f5:cd:43:06:32:32:85:8a:79:39:cb:07:
15:26:3b:e9:cc:4f:c3:fe:7b:13:8a:04:09:a7:9f:c1:dd:79:
16:ca:f7:90:09:6e:6c:70:77:39:c8:0d:9b:c1:aa:78:f0:95:
77:cb:c2:b9:ab:11:83:6d:e4:c8:46:dd:91:34:eb:6d:25:86:
41:e6:3e:52:40:a1:38:c3:ea:c1:b1:54:a3:9e:3f:a6:16:70:
5e:45:81:bf:39:92:4b:a7:96:16:70:75:4c:cc:6b:b5:74:e1:
c2:cd:5f:74:4e:2a:59:36:26:34:3d:97:a9:1d:21:d4:7e:71:
eb:df:29:af:9d:d7:53:05:b0:59:56:89:48:a5:e4:79:92:94:
7b:6d:61:d1:d7:ed:0a:a2:ae:65:16:18:ab:31:bb:9f:9b:2c:
69:f1:b4:04:a6:96:f0:0b:a5:51:42:a0:a4:f1:6f:00:d9:6d:
c4:f4:60:53:62:87:cd:03:5c:9a:11:0c:64:82:ac:48:71:19:
e0:09:4e:1a:0b:af:d5:ad:41:6c:7f:f1:98:21:40:7d:fa:ad:
2c:a5:3d:b8:4c:da:0f:6a:bd:87:11:14:10:3d:35:68:37:79:
4e:ad:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:31 2025 by rpki-client