Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/wG1FxjoQkcIuBHHXQd1OQosYA2A.roa
File: wG1FxjoQkcIuBHHXQd1OQosYA2A.roa (raw, json)
Hash identifier: 4ppmtoXMaFGLkwzf9Nk7vf0gkZZCJMB34fdwJ2h927Y=
Subject key identifier: C0:6D:45:C6:3A:10:91:C2:2E:04:71:D7:41:DD:4E:42:8B:18:03:60
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 11F0
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/wG1FxjoQkcIuBHHXQd1OQosYA2A.roa
Signing time: Thu 14 Nov 2024 08:20:03 +0000
ROA not before: Thu 14 Nov 2024 08:20:03 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 34549
IP address blocks: 114.66.212.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4592 (0x11f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Nov 14 08:20:03 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C06D45C63A1091C22E0471D741DD4E428B180360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:6f:89:22:3b:ae:51:25:5b:8e:0e:78:54:
b6:ce:48:31:21:84:0c:bd:f0:55:29:46:f7:a6:af:
b3:68:8e:fb:b8:41:00:a1:56:da:24:11:b6:79:b4:
17:7f:28:e2:1c:12:c1:26:c1:4c:d1:10:3a:5e:af:
38:46:4a:74:52:ce:de:65:13:9f:15:1d:78:6f:59:
b3:d5:88:19:be:48:3f:92:9f:97:c2:34:4a:32:67:
92:ef:9f:01:79:66:8f:45:97:53:a1:ce:b8:79:59:
ce:3c:5b:7a:90:9b:5d:0f:b0:05:57:bd:80:bc:98:
7f:f1:24:d3:43:b5:b0:9a:7e:93:87:53:24:ad:65:
28:e8:51:ac:33:db:41:01:c3:56:63:3b:2f:a6:60:
93:38:bb:17:2b:07:48:36:0b:a4:70:0d:13:5c:e5:
33:01:e9:54:f4:ee:78:a9:8f:ac:1a:4c:32:14:3c:
bf:4f:7b:a1:53:f3:c7:3d:4c:30:a8:c8:68:7a:49:
9b:09:4d:b1:3a:35:38:b4:66:9a:3a:89:35:9c:ba:
0a:00:92:21:97:4b:ff:0c:62:4e:9e:72:44:ec:33:
4d:6c:a3:62:53:16:3f:93:e5:b9:8e:a8:1c:d0:ac:
62:2d:76:f8:1f:28:e7:d3:22:f2:f5:09:7f:d9:0e:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6D:45:C6:3A:10:91:C2:2E:04:71:D7:41:DD:4E:42:8B:18:03:60
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/wG1FxjoQkcIuBHHXQd1OQosYA2A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.212.0/24
Signature Algorithm: sha256WithRSAEncryption
33:78:2a:5a:a2:ab:8b:35:2c:64:6b:c9:53:e7:ea:f7:46:cc:
4b:53:a0:01:2c:04:82:6b:02:9a:6a:8d:49:12:a6:ae:d3:c8:
0a:9e:2e:02:8c:49:73:34:7e:fb:a3:2f:98:a5:c4:80:7e:2e:
60:b5:c9:be:f1:e3:7a:7d:84:64:75:c6:12:ef:98:27:f3:5a:
58:61:ce:fe:a4:6c:c3:05:0a:c3:a0:0e:c8:da:88:7d:7e:ef:
89:6d:d4:fe:8c:57:53:0a:86:41:de:d3:20:38:38:61:3b:1f:
ac:32:78:de:2b:2a:e1:c7:4d:ab:08:eb:86:07:e6:2b:96:a2:
17:50:8e:84:ce:21:be:51:ae:25:72:2e:21:0d:52:b7:43:06:
1f:ff:40:c6:fb:e7:06:47:c2:84:23:e6:63:30:29:99:f7:0d:
ac:15:24:da:62:19:bc:5b:27:b9:c0:68:5a:7d:49:12:77:1b:
fa:b6:c3:d3:b4:26:b1:0a:79:54:11:3d:7c:40:8d:46:e1:1a:
0b:69:ee:13:75:61:af:8f:5c:61:0e:5d:75:1d:9b:27:37:75:
70:f9:8d:6a:ee:0d:cd:34:e7:20:70:1e:25:5f:d2:9c:a4:88:
5c:e2:a0:0c:46:d8:8a:64:e7:a5:a1:b8:4d:b9:a0:a3:f8:ba:
c2:e6:21:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:41 2025 by rpki-client