Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/IKXYSpzG_F8YquwHK93yDN8a7n4.roa
File: IKXYSpzG_F8YquwHK93yDN8a7n4.roa (raw, json)
Hash identifier: ggrMGAkMjRKfXha9AW1hrnofqODurrQdcF/gELDmeFY=
Subject key identifier: 20:A5:D8:4A:9C:C6:FC:5F:18:AA:EC:07:2B:DD:F2:0C:DF:1A:EE:7E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1DAE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IKXYSpzG_F8YquwHK93yDN8a7n4.roa
Signing time: Thu 09 May 2024 02:54:22 +0000
ROA not before: Thu 09 May 2024 02:54:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7598 (0x1dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 9 02:54:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=20A5D84A9CC6FC5F18AAEC072BDDF20CDF1AEE7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:51:e2:a7:9b:03:fa:33:3c:a9:33:83:fe:
04:2e:75:15:1b:05:42:30:45:77:49:4a:1d:b0:b4:
26:ec:e5:5d:85:cd:c0:d0:47:be:31:5b:87:53:d4:
75:a1:81:77:01:3b:7a:cd:9e:2c:64:0f:4e:d9:04:
a8:00:0f:12:eb:54:f1:ea:aa:4c:fd:03:0b:0a:35:
1a:6e:22:ed:2a:77:cb:43:5b:50:20:5c:0c:18:be:
48:3d:28:7f:77:a4:cc:21:d1:04:a4:00:df:ac:12:
e6:a4:33:e9:e1:17:3a:9e:ac:36:bd:c9:7f:7b:f2:
cf:f4:e4:99:5a:70:0d:1d:5d:f1:f0:2a:9f:3b:5f:
12:59:2d:ce:37:51:39:7a:66:e2:10:4b:08:2d:e7:
7b:18:e7:a8:ca:b5:85:df:33:00:00:0c:57:c9:54:
7c:1c:64:12:50:25:52:27:66:93:1a:c4:28:0b:fb:
ac:ae:7a:44:f9:52:73:3f:cd:85:9c:59:6d:69:68:
aa:e4:28:fe:ba:de:86:6b:f9:18:50:7f:ee:1a:bf:
3e:f3:ef:cd:b2:15:4b:ad:56:52:7b:d7:af:59:28:
e7:10:66:98:55:cd:30:40:9c:96:9f:b3:39:e3:6d:
7b:d7:3f:6c:01:1f:99:3a:dd:8a:ea:5b:40:49:78:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A5:D8:4A:9C:C6:FC:5F:18:AA:EC:07:2B:DD:F2:0C:DF:1A:EE:7E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IKXYSpzG_F8YquwHK93yDN8a7n4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:2b:b0:c4:51:f5:0c:3e:d0:14:7d:85:6c:fc:90:e8:52:d4:
f6:d3:af:6b:b7:11:9b:5c:7f:02:ad:af:fb:4a:4f:fe:f3:b7:
51:17:92:e4:f5:3f:93:ff:a3:d4:6a:36:81:0d:36:d1:e5:ee:
e9:50:5f:76:ec:89:89:97:7c:fa:e7:94:3c:0b:42:b3:2a:43:
cc:c1:9b:40:1f:96:47:5d:d4:b3:56:71:e9:d6:33:5f:da:a6:
3a:3a:c0:7b:80:15:2e:0d:2e:b5:9c:3c:24:70:d0:6a:7a:68:
57:a9:37:ae:fd:39:87:79:bb:47:81:20:a2:c0:c5:54:3b:a0:
89:a1:67:be:1a:e8:1e:fe:04:b4:cd:df:39:b7:b0:82:4d:8d:
38:c9:40:f3:53:6d:7e:c4:4f:8a:5e:05:24:63:de:fc:eb:a2:
04:7a:f3:75:7a:8e:b7:f4:c4:f0:c0:9b:04:24:9a:7a:c5:0e:
3b:b5:11:86:8d:21:be:07:df:bd:25:32:b5:72:b4:de:b5:ce:
66:a0:25:97:26:b3:ac:dd:0e:f1:fa:02:fd:7d:5a:1b:27:ed:
a6:2b:c6:b9:dd:bb:63:1b:a4:c9:13:2a:9d:92:6f:3f:c9:e0:
ab:e8:f0:ef:b0:77:e7:5e:f9:76:48:6b:4b:18:fe:a8:c6:14:
a1:fc:22:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 04:18:22 2024 by rpki-client on console-fra.rpki-client.org