Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/GmG6nuxYjZKEMyA2VmC4blM_VWY.roa
File: GmG6nuxYjZKEMyA2VmC4blM_VWY.roa (raw, json)
Hash identifier: neCesIZ0DbGxx8EMNBYNCt62zVZnS5bGt1n96mQNz08=
Subject key identifier: 1A:61:BA:9E:EC:58:8D:92:84:33:20:36:56:60:B8:6E:53:3F:55:66
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CF6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GmG6nuxYjZKEMyA2VmC4blM_VWY.roa
Signing time: Tue 07 May 2024 04:54:25 +0000
ROA not before: Tue 07 May 2024 04:54:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7414 (0x1cf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 04:54:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1A61BA9EEC588D92843320365660B86E533F5566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:5c:28:06:d3:98:ea:6f:e1:eb:cc:d8:1e:
a3:87:b7:61:ac:c9:09:2d:20:2e:c5:ed:63:54:90:
3f:55:da:d1:df:85:75:97:3b:39:a9:50:38:a7:54:
48:2b:59:b0:28:06:5c:a6:c5:8f:2a:1d:4c:ae:53:
79:a9:f4:24:d5:06:1f:6d:87:05:9e:f5:8b:2a:5a:
ca:59:09:f6:a8:39:7f:61:53:90:a0:16:fb:3d:41:
1a:c8:f6:f0:30:a0:b2:cc:70:c5:6e:12:24:5e:77:
7f:19:a9:56:ba:0d:2b:86:df:7b:a8:b1:cb:15:f0:
d5:0d:20:24:ab:37:b4:25:f9:13:4a:5f:ab:5b:31:
73:5c:04:3e:51:1a:a6:00:01:73:03:9c:c0:06:9e:
58:d8:bb:a6:4f:91:26:b7:b5:6c:08:39:ff:32:cf:
16:b1:ec:00:b4:20:fc:df:46:12:d8:63:24:c2:58:
15:a4:0c:09:8c:74:86:c8:f1:e3:8e:33:df:27:5f:
70:a6:67:0c:35:82:4e:92:65:b5:02:05:0d:e8:8a:
e3:e5:54:1a:b8:1d:51:a6:d4:17:cb:bb:78:56:9b:
a6:52:89:1a:e0:ff:02:c7:a0:53:1f:ef:80:bf:4d:
b4:42:0f:83:58:99:98:d7:d8:68:7a:59:6a:a4:00:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:61:BA:9E:EC:58:8D:92:84:33:20:36:56:60:B8:6E:53:3F:55:66
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GmG6nuxYjZKEMyA2VmC4blM_VWY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ca:8b:68:79:ce:4f:9d:05:1c:d7:a3:65:fc:0f:64:fb:5b:0a:
35:2c:02:23:45:cb:e3:09:0c:c0:95:89:de:dc:67:b5:39:ca:
9a:ea:98:4e:ac:39:c9:9e:ab:3f:db:e4:72:b0:dd:e9:36:dc:
2a:6f:cd:68:05:70:d0:38:7a:b8:15:9d:0b:c4:f7:8b:15:b3:
a8:35:d7:68:72:92:47:c5:1d:bd:d7:64:c2:29:43:60:44:25:
ed:99:0d:8d:7b:f5:5f:c3:a9:7e:b7:b4:87:2a:bc:8b:e5:0d:
48:6f:aa:9b:5d:4c:f0:f2:93:22:6a:0f:0e:85:ea:9b:01:16:
32:20:19:6b:77:8b:c0:72:9e:d6:9b:3a:ed:3f:5b:4f:fb:60:
61:33:37:a8:32:2a:82:47:1d:98:dc:65:66:99:9c:7f:ea:1c:
53:3a:46:e5:3b:e8:6b:60:df:23:f6:7d:8a:43:5d:6d:39:65:
03:17:eb:37:6f:63:05:5a:3b:4e:12:cb:cf:26:a4:93:99:a4:
3a:91:e7:ac:a3:77:6d:0c:ae:f1:6a:a2:39:77:31:db:5e:69:
fa:d6:4b:30:5e:d8:0a:02:f7:71:7c:f3:65:d7:de:a2:22:dd:
7f:7e:5a:89:92:a3:f5:f3:96:ed:b6:fa:bf:d4:36:35:25:7e:
d2:3e:f1:cd
-----BEGIN CERTIFICATE-----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Generated at Tue May 7 06:22:08 2024 by rpki-client on console-fra.rpki-client.org