Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/6I5yOZGJ5ejIzGGT3MnzOt-qpxo.roa
File: 6I5yOZGJ5ejIzGGT3MnzOt-qpxo.roa (raw, json)
Hash identifier: iFhKfMWG/I0l6nUGae88W5tlRs0OMbPTFBuYnjG9uwo=
Subject key identifier: E8:8E:72:39:91:89:E5:E8:C8:CC:61:93:DC:C9:F3:3A:DF:AA:A7:1A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1630
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6I5yOZGJ5ejIzGGT3MnzOt-qpxo.roa
Signing time: Fri 19 Apr 2024 03:23:27 +0000
ROA not before: Fri 19 Apr 2024 03:23:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5680 (0x1630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 03:23:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E88E72399189E5E8C8CC6193DCC9F33ADFAAA71A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:82:4c:77:61:6a:fe:9e:83:f3:49:e2:ac:fe:
bb:b9:74:02:5c:43:34:84:63:b0:77:4a:e5:b4:9b:
fa:60:b8:a3:75:d6:83:4d:67:c5:8a:82:bc:8d:ff:
41:b0:1c:3b:49:68:02:2f:e4:3b:b7:7e:0e:1b:3a:
47:f1:b0:f0:51:3a:39:3e:b7:7e:46:5c:98:10:9f:
8b:a2:7e:59:03:74:73:73:84:2b:a3:b0:65:0e:5c:
61:18:45:e3:5e:4f:40:6f:38:24:04:c0:4d:66:62:
be:0a:49:04:1c:4f:5e:4d:47:a8:65:8e:b4:4f:63:
3f:7f:21:78:de:0c:99:17:6a:56:d3:21:da:7c:3c:
e7:de:0e:05:75:d2:5b:54:02:f9:9a:a7:67:17:0c:
ef:7e:dd:2a:2e:ae:53:8b:6c:59:c5:75:2c:f7:5e:
a4:ab:70:8f:13:d3:3c:95:7d:e3:53:74:0a:7b:5c:
87:32:d5:5c:0c:e4:1d:06:7e:ba:54:46:35:fd:8f:
65:eb:36:c1:14:56:cd:e1:4c:90:c3:03:9a:b1:a7:
35:7d:b3:c8:a5:d0:6d:0c:93:23:04:68:a3:f6:35:
57:de:8a:86:94:a3:71:ad:46:b5:36:49:45:63:d1:
ea:18:ff:24:ec:dd:35:59:bd:53:ce:51:99:8a:75:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8E:72:39:91:89:E5:E8:C8:CC:61:93:DC:C9:F3:3A:DF:AA:A7:1A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6I5yOZGJ5ejIzGGT3MnzOt-qpxo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:fb:1b:12:5d:bf:b2:76:3d:dd:2f:be:7b:f4:87:0f:02:af:
97:5d:3e:6e:13:f2:2d:47:13:4e:fc:a8:6e:77:19:ea:6b:6f:
a2:43:ec:7c:75:7a:80:09:14:2b:3c:15:b7:2c:b6:19:53:3a:
b6:16:d4:cc:b0:ac:68:90:73:78:ce:13:e5:2c:e1:4b:78:6d:
28:32:25:1d:2c:07:a1:5c:ef:4a:76:23:12:97:92:90:ab:08:
ae:45:56:70:fc:94:77:36:fa:30:1e:2e:da:77:dd:a7:b6:38:
04:04:b3:c4:90:3a:a9:5f:cf:ce:14:24:cb:c6:ca:9b:83:ff:
e2:8f:a6:cf:ce:c4:82:10:07:97:28:14:e8:07:b7:f2:b2:81:
b3:3d:43:c9:cd:99:45:00:f2:5c:7d:7e:69:c5:07:38:9b:a6:
9a:ad:12:49:af:69:20:26:ab:93:09:0f:0a:33:ba:c2:53:ab:
02:70:3f:c7:8b:5e:c9:0c:fa:78:48:19:9c:fd:2e:a3:b1:c5:
67:b6:cc:9b:8b:58:1b:aa:27:7c:fd:d4:d6:ae:e7:5b:96:da:
c8:49:c8:34:4c:cb:02:de:7c:9a:15:c8:74:a3:6f:38:8e:ef:
e9:43:28:0b:14:5e:4d:4b:3e:65:a8:ff:1d:9f:16:74:94:71:
56:48:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 05:55:18 2024 by rpki-client on console-fra.rpki-client.org