Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/GPXktzFfaAd6ISgEcndEjpBsnOs.roa
File: GPXktzFfaAd6ISgEcndEjpBsnOs.roa (raw, json)
Hash identifier: OBExnXRR8ttfuvuxcs7D8qBQwD5OmX/JUADGjHN71DI=
Subject key identifier: 18:F5:E4:B7:31:5F:68:07:7A:21:28:04:72:77:44:8E:90:6C:9C:EB
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 10CA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GPXktzFfaAd6ISgEcndEjpBsnOs.roa
Signing time: Thu 04 Apr 2024 17:52:45 +0000
ROA not before: Thu 04 Apr 2024 17:52:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4298 (0x10ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 4 17:52:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=18F5E4B7315F68077A2128047277448E906C9CEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:db:f0:cd:08:53:b7:db:3c:a2:67:3b:8f:
de:d9:10:29:7a:f5:e1:97:f4:cc:c4:18:19:0c:55:
e9:cb:ac:f3:34:d4:5c:11:aa:d8:56:b2:57:d2:69:
3c:47:43:99:22:11:6d:96:18:1a:d0:20:99:b7:f7:
1a:e2:a2:62:da:21:bc:c3:28:d4:b3:af:50:61:1f:
2b:df:52:4f:6d:21:79:bd:14:12:5c:ae:72:74:34:
5d:83:0c:89:6b:8a:fb:94:bb:22:b8:5f:39:a1:87:
3d:5f:c5:84:d5:f7:02:2d:b2:73:21:b0:7f:0a:80:
c8:47:e8:86:1e:5e:95:ed:52:b1:01:59:bb:91:94:
0e:4a:84:4f:45:b7:de:b0:55:c7:c4:79:71:de:ea:
4d:ed:e3:bb:4d:be:9b:1e:06:67:3f:b6:1e:22:fe:
54:a2:82:d0:96:a3:33:30:ae:64:48:a8:1d:9e:7d:
0f:0a:9d:f8:e1:3f:4c:9a:d2:d8:21:65:68:2b:a2:
81:76:2e:60:73:37:dd:a1:c2:f1:18:ab:65:49:75:
dc:ab:6f:30:0f:86:1b:61:26:ce:66:0c:c6:6a:18:
b5:1c:b0:44:46:bd:76:38:fe:72:26:70:a3:ff:85:
55:e3:22:e7:67:8c:fa:c4:a3:30:22:9f:e4:53:af:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F5:E4:B7:31:5F:68:07:7A:21:28:04:72:77:44:8E:90:6C:9C:EB
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GPXktzFfaAd6ISgEcndEjpBsnOs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:fc:35:de:73:a2:4d:92:1d:37:00:a4:dc:06:7a:87:86:bb:
3b:a9:02:34:1d:dd:42:8e:da:40:89:63:32:b8:9e:b0:5f:c2:
5e:50:d3:47:da:8a:db:c7:54:42:18:4a:32:83:60:0f:bd:87:
0a:6b:a0:f0:e8:ed:33:31:6e:51:b4:65:c2:ad:0c:f5:d1:62:
00:91:ce:41:28:d1:2b:15:6c:30:f8:28:bb:04:05:17:b7:17:
08:2a:ca:8a:88:aa:2c:a2:fd:48:64:cf:ad:cb:4b:7b:18:82:
b6:76:29:2f:12:08:bf:bf:9c:ad:e3:f1:c2:b9:60:0f:ac:2a:
d3:56:c4:a2:e5:8b:50:be:33:a1:24:09:e6:73:11:6e:73:5d:
96:b5:af:cc:60:cd:8a:21:64:e1:e8:6c:a2:20:53:8a:c9:6e:
d6:d1:52:23:5a:e7:e4:68:26:57:58:ee:64:65:86:82:af:41:
9d:73:37:f7:65:7d:13:5e:8f:a6:64:71:9b:e0:fc:b8:b2:7d:
1b:8d:d3:c0:17:22:c6:b1:ae:9a:88:e8:a6:6b:ec:92:7f:56:
b6:bd:47:a6:57:4f:8c:ea:e4:fe:60:74:3d:57:bc:dd:78:eb:
62:10:55:d6:e7:31:1a:e1:69:08:d8:14:91:98:3e:47:69:90:
a2:bd:fa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 22:58:13 2024 by rpki-client on console-fra.rpki-client.org