Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/6nJFoHfd-ccHEYcGgSfd4s2Rz2E.roa
File: 6nJFoHfd-ccHEYcGgSfd4s2Rz2E.roa (raw, json)
Hash identifier: l6cmWNhqdmiHHY6eUdYHAEJJWunQ/Jwog7amQbgpiVk=
Subject key identifier: EA:72:45:A0:77:DD:F9:C7:07:11:87:06:81:27:DD:E2:CD:91:CF:61
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A5E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6nJFoHfd-ccHEYcGgSfd4s2Rz2E.roa
Signing time: Tue 30 Apr 2024 06:53:59 +0000
ROA not before: Tue 30 Apr 2024 06:53:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6750 (0x1a5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 30 06:53:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EA7245A077DDF9C7071187068127DDE2CD91CF61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:31:af:d4:16:0b:a0:a3:3a:d9:0f:c7:ca:
cb:0f:ff:27:1d:f5:89:09:f9:32:68:c7:8c:b6:e1:
64:9f:04:a7:b6:b7:9e:10:10:fd:9f:30:6d:bb:c0:
e4:91:6e:bf:ec:3f:63:c5:37:07:14:cf:9e:e0:56:
2d:ae:cc:2a:e4:25:4b:61:95:cb:88:e0:d3:0d:e6:
1d:bd:db:f6:99:0b:44:34:77:6a:e6:48:6c:f0:8a:
81:82:56:ff:1b:cc:36:28:89:aa:05:d1:84:0c:de:
4e:2f:90:ab:0d:69:2d:32:76:cf:e3:1f:06:95:55:
25:42:87:88:95:54:f1:30:40:87:27:02:bf:75:6f:
32:d2:7d:98:56:91:57:d3:3f:48:ec:f3:b6:bb:b5:
f6:23:33:c3:74:4b:11:71:59:af:7e:a5:67:d3:a6:
3f:a2:9b:ec:37:ea:09:49:34:a5:ac:91:66:c8:ab:
4d:38:6a:7e:e4:66:37:02:5f:32:57:5f:7c:95:c2:
5e:50:35:b8:c9:53:a9:df:e0:22:65:3f:08:9e:7b:
10:c0:ca:90:03:1c:6c:54:a6:a7:75:4c:f9:22:7b:
6b:d4:a4:3f:60:1b:ae:99:f6:d2:3a:26:8f:83:3f:
c4:eb:28:05:6f:c3:22:f9:fd:5d:a2:a5:5e:b9:cd:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:72:45:A0:77:DD:F9:C7:07:11:87:06:81:27:DD:E2:CD:91:CF:61
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6nJFoHfd-ccHEYcGgSfd4s2Rz2E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:24:aa:6c:8e:40:b0:8a:e9:3f:44:10:45:4f:a5:2a:3f:f4:
67:21:3f:ff:7a:47:31:a5:ee:da:74:82:47:57:90:2c:6c:5a:
5c:2b:3b:a6:cb:1a:b0:1c:d3:4b:a0:9e:9e:d2:4c:61:4d:54:
8d:6c:c3:ca:95:d1:b3:ca:77:68:0e:10:b9:93:34:05:22:5c:
20:68:64:11:5d:39:3b:e9:c3:81:5e:a1:e0:c4:7e:4d:d3:e8:
04:03:0f:84:7f:00:5a:91:20:8e:74:62:b2:bd:f5:a2:86:7f:
87:0f:41:e8:8d:d0:6f:49:01:6f:e9:4d:30:7e:df:c8:32:a0:
8e:56:0b:49:56:18:c1:96:a9:58:1d:b0:f5:f5:c2:de:f4:f7:
e7:15:fa:94:2d:35:89:eb:ff:7a:ef:92:cb:39:2a:95:b9:37:
d1:2f:f0:bf:19:c5:6d:ea:70:ee:45:ac:54:ba:61:66:b5:41:
ac:66:f5:51:25:0b:a4:c1:67:e6:c7:ea:46:da:a5:62:67:c8:
fa:c4:49:12:ca:f3:27:9d:56:da:70:b9:f7:70:1e:7e:9f:31:
ee:54:be:26:eb:77:80:2a:10:d1:81:8b:c9:5a:1c:30:98:0d:
c5:41:a8:a6:e5:75:29:fc:87:66:b1:76:7b:84:40:b5:72:48:
6a:af:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:15:42 2024 by rpki-client on console-fra.rpki-client.org