Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/1r8TLpfFWZDfiRjXxjbMnfKRMFA.roa
File: 1r8TLpfFWZDfiRjXxjbMnfKRMFA.roa (raw, json)
Hash identifier: Vuav52h+scbgNv981dh3CQgFQjbEsG+GevwmccVRiM4=
Subject key identifier: D6:BF:13:2E:97:C5:59:90:DF:89:18:D7:C6:36:CC:9D:F2:91:30:50
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E52
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/1r8TLpfFWZDfiRjXxjbMnfKRMFA.roa
Signing time: Fri 29 Mar 2024 03:52:27 +0000
ROA not before: Fri 29 Mar 2024 03:52:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3666 (0xe52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 29 03:52:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D6BF132E97C55990DF8918D7C636CC9DF2913050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:d2:be:05:b7:ce:6f:b7:89:b2:81:2c:6a:
4d:ef:08:81:1d:71:96:3b:a7:18:8a:91:0a:f2:e5:
ec:c3:c0:14:a2:ba:b6:47:f9:f5:0c:4a:2d:a1:d8:
c1:4b:a5:35:64:d6:fb:dc:dd:db:61:b7:22:78:21:
ad:ca:d5:b8:20:2c:ea:5d:4d:d2:5c:bb:a0:06:bc:
0d:c9:8d:0f:c1:f6:75:89:ab:ba:79:4c:1a:8f:51:
ef:69:c4:d2:9c:b6:5b:dd:ba:3d:47:85:d3:9b:39:
6a:15:f3:05:30:88:fa:41:a6:6b:4e:3c:62:2d:02:
ed:13:1c:00:a2:05:ed:12:56:bc:9d:62:88:89:f4:
19:b9:b6:9d:7c:83:89:c1:31:03:e4:9b:a5:2a:3b:
8e:67:8c:a4:e5:2a:69:ed:92:36:de:f2:7f:bb:ab:
20:3c:88:1f:61:48:fc:33:9f:24:6a:b3:52:07:d3:
b5:48:9f:c8:06:30:8c:da:9b:99:0f:05:75:fc:ea:
ec:53:38:7a:19:ca:d9:a2:ad:4c:13:09:82:9b:1a:
52:8f:44:94:85:a6:ca:dc:e0:a0:88:82:8e:24:2f:
73:1c:4a:f8:4c:4b:38:22:f2:73:92:80:74:8e:02:
83:26:27:7c:fb:ec:38:d5:22:62:d9:66:e8:f7:a7:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BF:13:2E:97:C5:59:90:DF:89:18:D7:C6:36:CC:9D:F2:91:30:50
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/1r8TLpfFWZDfiRjXxjbMnfKRMFA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:05:64:1a:b4:88:5f:4d:7f:ee:04:0a:3d:57:46:ad:af:48:
52:4b:04:01:4f:e3:8a:48:16:47:ab:43:fd:51:d6:cb:0b:c5:
ae:70:f5:e0:5d:b7:fa:5a:3b:36:1f:c7:15:c7:a6:8e:08:78:
84:64:7e:8b:1c:78:43:a1:2f:58:9a:57:ca:a9:07:c5:d0:84:
24:80:40:45:3e:8b:b9:89:75:40:46:9c:e7:9e:31:08:c4:92:
0e:c0:15:8a:60:bd:3c:18:7a:3f:30:41:4c:bb:f9:bc:1a:e0:
38:2e:07:36:1d:d9:c9:39:04:3c:ce:04:15:4a:88:a7:63:3a:
fe:c9:00:a4:ad:29:e4:af:a1:4b:85:e9:81:34:09:3e:a2:dc:
6e:be:52:3b:c5:1a:80:0e:1a:ab:bd:65:fb:a7:ab:f6:a9:88:
e0:be:4c:21:21:1f:97:8d:80:e8:a1:0a:81:bb:b9:85:e3:e5:
38:d9:15:4b:1a:58:e5:aa:db:4c:2b:8e:76:ee:be:74:61:9a:
dc:81:46:49:e0:68:d1:1a:b5:d2:7e:9d:c6:69:cc:92:ae:21:
69:77:58:cc:13:74:ff:6c:b1:30:31:87:5a:c9:6f:8d:85:84:
30:2b:12:34:75:29:5f:00:a1:7e:1a:30:bf:22:25:84:08:dd:
5f:18:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:25:41 2024 by rpki-client on console-fra.rpki-client.org