Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/1f_m_J1Ge005eyyQ3j8bV1K_5AA.roa
File: 1f_m_J1Ge005eyyQ3j8bV1K_5AA.roa (raw, json)
Hash identifier: VW0oM2Ab/HCxNWu0Y6m780lrinLbYhMY1Hj+r2ZvCzo=
Subject key identifier: D5:FF:E6:FC:9D:46:7B:4D:39:7B:2C:90:DE:3F:1B:57:52:BF:E4:00
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B04
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/1f_m_J1Ge005eyyQ3j8bV1K_5AA.roa
Signing time: Thu 02 May 2024 00:24:05 +0000
ROA not before: Thu 02 May 2024 00:24:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6916 (0x1b04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 00:24:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D5FFE6FC9D467B4D397B2C90DE3F1B5752BFE400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:be:0c:ad:4a:a1:1c:fe:08:00:37:ac:c4:
7f:55:da:85:cc:b7:d9:06:8a:f0:c5:a3:e0:5d:72:
d5:87:9f:b7:d9:02:bb:a5:20:4d:d4:28:80:bc:20:
55:7a:97:22:d7:96:28:d4:56:04:c6:88:86:77:cd:
b5:51:d9:69:bb:ea:21:ad:4f:19:ed:f4:42:48:1c:
77:96:25:be:ed:cb:2d:2f:54:df:57:5e:ff:78:0e:
1c:7f:3b:25:ae:80:ca:f2:94:ee:ae:1f:1e:a0:aa:
8a:0b:9d:4c:19:9b:74:28:a8:70:74:17:d6:ca:33:
05:14:ff:6c:39:49:e5:60:44:ec:af:25:ce:6b:e8:
72:fa:9f:c3:74:01:29:e3:53:b1:54:0d:9e:02:df:
64:a4:37:c3:39:5e:2e:11:50:71:0f:f1:55:91:c3:
cb:c1:c7:23:67:56:26:99:62:78:bc:cc:86:ed:be:
94:5c:92:47:23:88:0f:cc:7c:ef:5d:6c:0c:60:1f:
d2:0a:35:47:bc:6e:69:4a:fb:d3:79:ea:7b:e3:f4:
fe:6d:f6:e9:e1:68:29:33:01:73:34:6e:09:6f:18:
61:bb:fd:b8:a4:03:ed:70:c9:b8:58:29:45:ad:c3:
d6:d2:c8:6e:ca:e9:60:d4:cd:17:30:b3:b2:34:80:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FF:E6:FC:9D:46:7B:4D:39:7B:2C:90:DE:3F:1B:57:52:BF:E4:00
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/1f_m_J1Ge005eyyQ3j8bV1K_5AA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:49:75:74:37:df:e3:7b:dd:1f:ce:8c:46:8e:c6:2c:43:d1:
93:37:71:a0:08:b0:0b:c2:2e:48:fb:69:85:63:f3:5c:8c:be:
7b:00:8a:ce:4f:b1:15:ab:f7:65:d6:dd:2c:17:0f:d2:60:ab:
bf:ce:61:a8:c4:ea:20:40:f5:86:ad:27:42:68:cd:47:f8:4a:
82:f1:e0:b3:4f:47:da:f1:8e:33:ac:2f:bb:e2:c8:bf:a8:f8:
3f:a7:76:2a:e7:49:ff:e2:21:8e:81:7b:77:92:e8:c3:28:d4:
e7:d1:20:d0:d1:dd:2a:c2:c9:0a:4a:2b:f7:d2:d2:60:cd:32:
b2:ed:93:69:b0:24:9a:89:91:8a:96:8e:08:63:f2:86:02:25:
c9:4f:77:dd:ab:45:41:c1:1f:84:23:77:d1:9a:11:a6:c4:42:
05:73:23:dc:49:34:5e:3f:32:77:ad:85:0a:12:d7:2f:6f:d9:
e4:bd:30:de:2f:9d:fe:a4:b8:76:aa:17:68:b6:9c:cf:b4:37:
58:14:08:b4:1d:7c:b4:25:ae:14:5a:df:61:bc:95:18:c2:db:
6d:d4:46:67:51:12:49:a7:a2:d0:04:4a:ab:80:16:6e:1a:f4:
2f:a4:53:e2:f3:ab:6d:2b:e0:9a:ba:64:52:c5:e9:5f:6e:db:
21:ab:6a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:47:50 2024 by rpki-client on console-fra.rpki-client.org