Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/GUXMKrRZqnEYk9cPQyI2N_fQzdk.roa
File: GUXMKrRZqnEYk9cPQyI2N_fQzdk.roa (raw, json)
Hash identifier: s1+L4qm/5Wr6uNEwOVga9d/QViPl0nGjZFTMUYMmkHs=
Subject key identifier: 19:45:CC:2A:B4:59:AA:71:18:93:D7:0F:43:22:36:37:F7:D0:CD:D9
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E0E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GUXMKrRZqnEYk9cPQyI2N_fQzdk.roa
Signing time: Thu 28 Mar 2024 10:53:16 +0000
ROA not before: Thu 28 Mar 2024 10:53:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3598 (0xe0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 28 10:53:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1945CC2AB459AA711893D70F43223637F7D0CDD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:c9:4f:9f:d1:4e:f2:30:80:a2:73:09:9e:
e1:1d:c0:ff:04:71:18:6a:11:cd:2f:85:9c:60:5d:
69:69:dd:a1:d3:30:25:f7:6a:b2:c9:53:e1:30:02:
63:d8:60:a0:19:88:07:54:06:0e:ec:76:8c:bf:01:
d1:4c:0d:74:6e:fc:fd:a3:6d:20:38:df:23:e5:c3:
aa:ad:a9:27:c7:d1:a2:a4:92:a5:00:45:c1:3e:75:
98:7c:40:24:23:5a:45:5d:18:5b:89:90:c5:28:a7:
f1:ec:e2:32:f5:09:94:72:61:e9:45:8b:63:57:10:
55:15:37:47:aa:66:9d:21:b7:20:b3:4c:7a:5a:a7:
43:6c:6e:e2:25:52:9f:47:f5:81:0e:db:1b:7d:9b:
41:4f:ab:78:47:75:a7:f3:5e:00:3c:26:b0:cb:75:
d8:62:9a:4f:10:df:d4:88:5f:24:1f:f0:ab:3d:50:
d4:84:34:76:d2:02:3d:57:1f:7e:31:6a:1e:c7:be:
a0:21:47:a6:72:4b:d4:9a:a9:13:b6:a0:8d:32:71:
dd:9f:26:2d:cc:23:b1:2e:14:c0:94:ba:dd:80:6f:
52:22:e0:40:a5:38:a2:4b:1f:b4:99:0a:67:64:26:
e0:fd:1e:5f:3e:7b:fa:db:b1:d4:e7:46:57:a6:9c:
92:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:45:CC:2A:B4:59:AA:71:18:93:D7:0F:43:22:36:37:F7:D0:CD:D9
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GUXMKrRZqnEYk9cPQyI2N_fQzdk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:64:ae:c3:1d:7b:3c:16:57:ac:75:73:1b:b3:16:14:08:1b:
90:bf:08:90:26:3f:b5:b0:70:53:c5:3d:5e:88:1b:58:78:c3:
f9:bc:f4:65:24:75:75:a0:a5:e3:4b:ea:be:e4:ae:35:5f:ff:
c4:d7:d6:0d:a4:1c:4a:4a:18:0d:c1:80:78:9e:33:6c:b5:d3:
bf:7f:17:fc:1a:9f:0b:2d:f7:e5:86:35:9e:c7:b5:a1:78:7d:
29:bb:09:51:d7:89:69:b2:93:41:f0:cd:c5:2e:ee:1f:76:a3:
45:f3:52:33:29:f0:5e:6e:cd:c1:19:71:18:9c:d4:95:cb:56:
08:4a:3b:a7:a0:6a:ae:ce:39:f3:3c:27:02:ba:44:81:50:3d:
f0:6c:d7:06:ba:99:ca:08:05:f4:a9:84:79:9c:5b:b1:93:53:
9d:b7:2a:ec:94:04:59:ed:79:29:e6:3d:0a:79:46:3b:6e:75:
57:ff:c3:62:37:8f:a9:2b:32:26:c4:70:a6:c8:81:0d:1a:b1:
e4:3c:05:22:d1:37:bd:a9:b8:4b:35:3b:2f:b4:c2:c8:ed:93:
a3:27:1f:88:34:e1:71:4e:0c:7b:81:29:ec:62:e1:fc:b1:c0:
48:1d:4a:63:28:6d:c3:57:3e:f1:e2:ef:a6:82:5d:9f:d2:5a:
26:36:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:03:39 2024 by rpki-client on console-fra.rpki-client.org