Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/3DiFpXE23v6RbTTt_pk1YAeYM7g.roa
File: 3DiFpXE23v6RbTTt_pk1YAeYM7g.roa (raw, json)
Hash identifier: Pb5bMn0Cbo0gcT9qCI4AwY/vLd1WPVjWjh4h8vCmhss=
Subject key identifier: DC:38:85:A5:71:36:DE:FE:91:6D:34:ED:FE:99:35:60:07:98:33:B8
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CE8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/3DiFpXE23v6RbTTt_pk1YAeYM7g.roa
Signing time: Tue 07 May 2024 01:24:36 +0000
ROA not before: Tue 07 May 2024 01:24:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7400 (0x1ce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 01:24:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DC3885A57136DEFE916D34EDFE993560079833B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0d:d5:9d:fe:ab:08:98:a0:c6:6e:dc:c1:c2:
99:d1:be:64:1c:65:61:65:d5:64:f2:f4:79:b5:63:
4e:80:52:6b:9a:4e:b2:7f:7a:11:af:9f:71:81:26:
3d:cf:2e:c2:88:51:87:2e:d0:f4:33:42:a7:83:31:
a9:71:bd:a0:f4:ff:28:65:24:e1:98:69:62:f2:2b:
74:92:85:63:e9:ae:94:19:a3:6a:0e:e8:31:50:1d:
e8:b0:a0:73:61:42:88:11:9e:18:af:0b:6c:ca:ca:
ad:c4:45:b4:4f:c8:57:83:c1:0b:89:69:6b:c8:0b:
be:c8:5d:a5:cc:50:de:b4:a6:0d:5e:45:43:1c:03:
ad:4b:e5:fb:d1:81:28:be:be:34:51:7d:41:6a:9b:
ed:ab:44:1e:97:53:12:cc:a8:5a:84:aa:c8:47:c6:
4d:82:97:ec:fc:3e:51:3b:e1:3c:fa:67:be:44:51:
11:c8:c3:0a:5c:a4:2f:5f:39:92:c4:68:22:b0:19:
f0:47:7c:16:19:43:e2:34:37:98:37:4c:da:9e:d7:
34:f7:40:06:80:cf:40:b9:66:0c:79:04:97:03:1e:
b2:1c:0c:a5:41:4f:85:53:5d:6f:c9:c7:90:f5:39:
f0:fd:d8:f9:61:dd:62:e9:fb:fa:94:e6:15:dd:08:
77:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:38:85:A5:71:36:DE:FE:91:6D:34:ED:FE:99:35:60:07:98:33:B8
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/3DiFpXE23v6RbTTt_pk1YAeYM7g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:b5:e7:5c:18:b3:9c:23:ba:09:98:18:1f:66:8c:d0:21:1d:
29:0f:4a:e4:83:41:b3:0b:30:db:d1:d6:7a:b5:62:3f:80:7f:
c3:19:dc:cc:a9:3d:ae:38:c6:c6:93:45:24:bb:4d:ed:e2:80:
75:03:00:39:77:32:37:32:9d:b2:1c:40:d1:92:45:28:a0:da:
d4:95:e9:40:30:cb:1c:4d:df:71:0e:9a:21:b2:d6:d8:e0:ed:
07:d5:8e:e9:a0:23:17:f6:df:cd:74:8c:ee:09:75:b0:25:08:
d3:54:ba:d7:5a:86:e5:83:f0:1f:31:32:59:1d:1b:ad:21:9e:
30:d2:a3:fa:d9:8e:8c:e1:95:e6:06:95:5e:e5:3b:b7:ff:03:
aa:59:e0:eb:19:dd:8e:5d:95:09:2f:72:38:a4:99:45:c5:a6:
63:be:43:e9:f1:7a:85:fa:e1:45:07:f4:e3:43:00:a7:4a:97:
dc:87:f8:a7:6b:23:d3:3e:98:cd:f5:b4:e9:37:6b:c9:e7:06:
19:7b:e5:11:0b:ea:93:54:40:a9:c9:98:a8:16:f1:7b:95:d4:
2d:ed:7d:94:56:ba:50:5f:9e:7b:00:0e:c7:02:68:fd:3a:14:
5b:83:8d:5c:59:d2:d3:70:9e:f4:1f:5b:fc:f1:78:55:bd:c4:
e9:c1:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:14 2024 by rpki-client on console-ams.rpki-client.org