Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Djp9U5ZOm5aeC7uUTsy_NhH3ss4.roa
File: Djp9U5ZOm5aeC7uUTsy_NhH3ss4.roa (raw, json)
Hash identifier: gd/4WM2F6Sh3JLI2fGBEVw6YczO0xNmuB5Jua9Gta1A=
Subject key identifier: 0E:3A:7D:53:96:4E:9B:96:9E:0B:BB:94:4E:CC:BF:36:11:F7:B2:CE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14EE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Djp9U5ZOm5aeC7uUTsy_NhH3ss4.roa
Signing time: Mon 15 Apr 2024 18:53:22 +0000
ROA not before: Mon 15 Apr 2024 18:53:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5358 (0x14ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 18:53:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0E3A7D53964E9B969E0BBB944ECCBF3611F7B2CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:4f:ba:2c:f3:c0:d2:bd:cc:ef:97:7c:bb:
cf:5c:e5:19:53:9a:f7:0f:82:60:36:80:61:86:8c:
a2:6d:47:55:fe:fc:27:00:ab:9e:06:4d:a9:0d:d1:
0f:17:d7:57:03:fc:f6:58:ac:50:8e:13:67:02:3f:
17:88:30:79:4d:df:6d:f1:5c:57:ef:2b:77:d9:47:
0d:61:82:10:e4:b6:4e:58:65:2f:be:ea:39:b7:f6:
08:ec:39:9a:4d:cd:52:0a:15:dc:b9:94:ad:0f:9a:
f2:63:ff:c4:c4:f1:1e:61:6c:ea:5a:43:21:09:2a:
41:8d:b6:60:05:20:87:05:bb:a3:4d:fd:c4:00:95:
45:51:62:91:66:31:de:8e:2d:5a:c5:c2:98:60:11:
d9:03:d4:55:cf:9c:57:5e:3d:49:84:3d:8d:74:6a:
61:a9:8c:2c:8b:08:c0:76:38:f9:1a:39:0e:82:0b:
12:38:7c:5d:0c:37:1e:e2:5e:b2:47:08:65:b8:aa:
d0:12:39:1d:7e:8b:d1:36:86:62:9b:e4:f4:98:23:
b1:48:81:c4:1c:9b:1f:59:b9:2a:b9:75:da:1d:31:
0b:0f:7a:bf:ca:26:03:3c:e1:d6:fb:4a:9a:a2:6a:
87:16:ef:f9:a7:41:42:48:32:5f:2c:1a:32:b2:fd:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:7D:53:96:4E:9B:96:9E:0B:BB:94:4E:CC:BF:36:11:F7:B2:CE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Djp9U5ZOm5aeC7uUTsy_NhH3ss4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:ae:c7:c0:1f:6a:b0:46:d5:88:a4:db:cf:ce:db:89:cd:97:
57:42:bb:63:8c:c1:74:8d:20:6c:e3:a2:52:88:4a:2a:9a:79:
fc:7a:50:ce:21:41:88:b3:19:46:f8:13:b0:61:61:aa:46:12:
de:77:08:29:e2:cf:fe:d7:87:11:27:ff:11:32:d0:d1:37:dd:
9c:d5:99:6b:13:80:27:18:53:6d:16:b0:bf:2f:9b:b5:48:4a:
76:da:e4:59:a6:83:de:1d:4f:bf:6a:a3:c3:34:3b:65:b7:9c:
6b:55:5c:01:29:01:76:e9:ee:9b:22:d5:b0:30:2c:49:a5:23:
47:67:e8:57:79:18:94:80:ee:eb:4c:c5:aa:a4:eb:18:d3:fc:
ee:d5:74:64:b8:0f:6b:f3:e8:62:a1:c1:55:a5:af:5d:3c:7a:
4f:5f:3e:18:1a:d6:af:c9:5d:d0:e5:0f:a7:b4:68:62:e7:e1:
ff:9f:d3:27:a3:02:67:c8:35:0e:79:75:62:53:7a:31:23:e2:
4e:1a:03:ed:e4:6b:bf:c7:4c:0e:7d:4b:a8:5d:a8:07:82:e9:
ed:51:d4:42:6b:c7:f9:41:cd:ca:db:63:84:46:fa:47:ea:d9:
81:ba:a5:84:97:f0:fd:cf:75:eb:c0:7b:b5:67:14:87:76:de:
6d:32:ca:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 21:18:02 2024 by rpki-client on console-fra.rpki-client.org