Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/C4onGP-JeEu1neh2RL_CQjY0fuk.roa
File: C4onGP-JeEu1neh2RL_CQjY0fuk.roa (raw, json)
Hash identifier: Qm18U4ccGwrMq8RPDLHFB9KXUa8lxRs6rQh9DJhfDd0=
Subject key identifier: 0B:8A:27:18:FF:89:78:4B:B5:9D:E8:76:44:BF:C2:42:36:34:7E:E9
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1022
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/C4onGP-JeEu1neh2RL_CQjY0fuk.roa
Signing time: Tue 02 Apr 2024 23:52:40 +0000
ROA not before: Tue 02 Apr 2024 23:52:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4130 (0x1022)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 2 23:52:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0B8A2718FF89784BB59DE87644BFC24236347EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:60:f2:a2:37:d3:55:32:f3:0e:0e:12:52:
64:df:c9:13:cb:35:3c:47:e1:87:b8:16:c6:98:26:
56:e1:6e:47:84:4f:e9:20:ad:90:42:9c:7a:70:67:
66:50:1b:5f:4e:5e:12:5a:31:00:e3:12:63:a8:d8:
a6:7d:9a:1b:41:bd:1f:21:12:42:a1:95:a8:15:50:
b6:a6:6a:63:1d:e9:94:9b:7f:2b:72:db:53:4b:40:
c9:2b:d4:d5:d4:a6:2c:80:3f:cc:88:01:c1:63:c0:
88:30:7d:bd:05:d3:6f:1c:49:77:4f:51:7b:b6:72:
c6:25:9e:6f:d4:2e:07:0b:db:a5:4e:da:9a:fe:f8:
08:84:07:7a:a1:6a:0c:9a:10:42:34:81:91:2c:dd:
2d:e1:00:b4:e4:e3:9f:fe:7e:49:9f:c7:9b:16:68:
8a:24:03:94:94:2a:31:08:e4:bf:eb:3c:f2:ff:ca:
46:b5:8b:4c:a3:42:ef:96:48:bf:c6:16:f9:5e:10:
bb:c9:24:0d:c5:66:84:7e:f6:a7:69:db:95:e6:ac:
72:ca:61:76:89:1a:ae:9e:9a:7f:49:f7:d9:ff:e1:
31:3b:dd:4e:cf:a1:01:ef:fa:0d:0a:38:0a:39:cf:
80:2a:e7:0f:9b:ae:93:0c:31:df:c4:a2:7f:29:a5:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8A:27:18:FF:89:78:4B:B5:9D:E8:76:44:BF:C2:42:36:34:7E:E9
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/C4onGP-JeEu1neh2RL_CQjY0fuk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:8d:45:30:da:3e:ab:8a:38:c2:61:ca:ed:4a:c9:c5:c9:13:
6d:4f:a3:4c:51:db:50:61:f6:64:f8:6f:2b:fc:81:b9:82:68:
af:6d:ca:25:54:4a:0b:5a:28:cf:5d:9c:1d:a7:aa:9f:69:2f:
b7:45:ee:be:23:2a:3e:70:50:b0:ad:cc:70:b7:04:b5:c4:6a:
63:be:df:48:30:cf:fe:76:70:43:b4:1a:23:f7:33:96:f3:5f:
7f:c9:0a:33:55:de:3c:b5:91:3c:e9:b8:d9:fb:bf:10:9e:ef:
1c:d3:b9:b5:92:d6:ba:0f:98:d7:a4:0b:f3:98:19:03:5c:c7:
21:9b:76:e0:0f:5d:a9:e9:9a:38:bb:c3:7f:69:86:e0:00:c3:
e2:c9:5a:6f:1a:c4:ad:08:ee:5d:85:29:3b:14:02:aa:18:04:
70:4d:f3:a0:a8:e7:f8:74:f6:17:01:3b:20:cd:31:b0:15:55:
04:15:97:8f:3f:38:d2:54:00:cd:e5:24:b9:c6:43:ed:4d:9d:
11:8c:28:a8:ed:65:58:a4:c6:0b:39:6d:8f:b4:69:c9:da:2b:
7a:af:4b:88:6d:44:1f:8a:ed:72:21:ba:a8:a9:08:a1:bc:aa:
a2:a7:26:31:82:f4:ed:df:a4:5e:c8:1b:db:b5:e2:44:eb:f9:
00:43:96:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 03:45:04 2024 by rpki-client on console-fra.rpki-client.org