Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/7PYMg8eTPCgmVMgweqH5YUpD9lU.roa
File: 7PYMg8eTPCgmVMgweqH5YUpD9lU.roa (raw, json)
Hash identifier: 0OADtv8HbvcAFOd3ib9TrKqoqzuFqTlY6RHKn12ZlP4=
Subject key identifier: EC:F6:0C:83:C7:93:3C:28:26:54:C8:30:7A:A1:F9:61:4A:43:F6:55
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 165C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7PYMg8eTPCgmVMgweqH5YUpD9lU.roa
Signing time: Fri 19 Apr 2024 14:23:28 +0000
ROA not before: Fri 19 Apr 2024 14:23:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5724 (0x165c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 14:23:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=ECF60C83C7933C282654C8307AA1F9614A43F655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:c1:86:8c:2f:2a:36:10:91:e0:e9:71:55:
10:50:e1:b7:46:0c:8a:25:61:b1:5d:9f:77:81:4d:
ba:77:66:24:a8:0a:42:90:5f:c1:0c:2a:fc:26:9a:
6b:02:de:ff:63:10:8f:e7:d9:61:33:8d:b6:dd:46:
23:dc:40:35:26:e7:2d:af:07:9e:fe:13:47:5c:89:
60:7b:dc:ca:18:7b:38:be:ec:8d:a9:c4:68:03:e9:
b5:3e:2e:f0:84:73:a9:9e:46:d8:02:0c:4d:4b:6f:
96:b2:c2:fb:d3:82:aa:ed:01:f4:d1:4d:44:b3:25:
38:23:38:89:e1:56:da:22:3a:19:32:eb:41:20:d3:
ed:70:36:77:71:28:7e:a3:ed:6b:95:e2:9d:09:88:
cd:19:54:2f:b0:1f:b4:32:cc:ee:1a:71:a6:5b:37:
bd:31:76:89:48:60:07:6c:c1:ba:a3:c2:71:0e:71:
31:15:dd:5d:8b:73:41:e0:48:ed:51:ac:80:c7:f2:
98:62:05:3f:89:8b:94:bf:d5:95:5b:a2:9c:dc:48:
48:f8:3e:c4:33:70:31:2a:19:5f:31:94:88:6f:b4:
17:c4:9b:1b:34:4c:41:4b:bc:af:78:2e:41:cf:00:
13:e9:cc:f9:cf:2f:14:d5:27:03:4c:32:ec:35:13:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F6:0C:83:C7:93:3C:28:26:54:C8:30:7A:A1:F9:61:4A:43:F6:55
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7PYMg8eTPCgmVMgweqH5YUpD9lU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:08:65:79:fd:17:23:45:84:b2:e6:20:f4:4b:78:2b:e7:b3:
c7:6a:33:a2:8b:97:de:62:71:17:85:86:d2:fc:87:7f:f6:16:
ac:2a:50:6f:9d:1d:f1:c1:ec:c2:87:31:aa:22:69:e1:49:47:
9f:46:2f:32:0b:3f:a5:8e:33:82:32:7d:3a:1e:61:07:0a:b5:
9c:fb:21:27:9d:59:f2:2b:04:b5:7e:bf:e2:4c:ca:ba:a3:35:
8e:fb:76:95:03:8e:a4:40:10:ec:d8:d8:6b:a1:c8:2f:5e:95:
46:e3:e3:6f:d4:c0:6c:bd:b6:a3:5f:43:e6:4f:cf:35:e3:6e:
71:4a:2a:9d:61:6d:c9:60:71:58:3a:94:63:66:d0:ad:d6:37:
a7:72:ef:23:37:e9:55:fa:93:2d:66:77:93:18:ea:f1:e5:c3:
9e:7b:b0:fb:c3:ad:2d:ec:30:2b:5d:c4:50:ab:f7:1c:5d:87:
37:81:05:33:c0:4e:e9:0c:7c:d3:e4:0d:b3:84:b2:a8:c7:31:
6a:bf:a5:3f:24:60:d4:dd:e6:92:62:bd:af:b1:fe:c8:ac:c8:
93:39:46:1e:41:26:b0:4a:bc:e5:1a:a1:bc:dd:a8:8e:27:1c:
01:ee:fa:b4:3d:14:76:48:89:fa:98:9f:5f:e0:4a:42:17:08:
47:b8:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 18:38:47 2024 by rpki-client on console-fra.rpki-client.org