Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Ic5z6qYZRjJX6j8XGj6kqjcfYW4.roa
File: Ic5z6qYZRjJX6j8XGj6kqjcfYW4.roa (raw, json)
Hash identifier: Qo8nhepVnrdoM7hBiWZEZX3lEML0ch9evcDUb6Pfq7U=
Subject key identifier: 21:CE:73:EA:A6:19:46:32:57:EA:3F:17:1A:3E:A4:AA:37:1F:61:6E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D72
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Ic5z6qYZRjJX6j8XGj6kqjcfYW4.roa
Signing time: Wed 08 May 2024 11:54:22 +0000
ROA not before: Wed 08 May 2024 11:54:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7538 (0x1d72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 8 11:54:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=21CE73EAA619463257EA3F171A3EA4AA371F616E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:8a:a6:50:2e:f7:8a:2a:c4:75:19:a0:a6:
4a:cb:33:00:a5:b9:d5:ea:30:68:78:f4:cd:b0:b7:
ec:dd:bf:d5:69:88:a8:e8:7e:f0:c3:90:99:a5:01:
77:29:a1:fe:42:ac:14:8a:48:fd:03:8a:af:e8:3b:
9f:25:fa:f1:24:01:b8:1f:9e:1d:b7:79:f7:52:96:
a6:ea:62:3b:99:ad:a4:79:2d:32:c9:5e:5a:ba:c7:
ad:12:6f:1e:b8:99:3e:ee:d4:10:f5:96:da:74:54:
87:09:95:f0:78:32:ed:e9:71:6b:05:1f:eb:4c:3d:
0d:a0:78:32:c4:25:59:28:85:62:47:2d:47:96:00:
30:02:fe:4b:bd:6f:e7:ad:67:1c:be:a1:02:77:c1:
94:88:f6:22:44:7c:2d:47:d5:8a:6b:27:c3:0f:75:
d5:b9:73:ae:d9:ef:02:81:81:2c:01:09:59:84:68:
5e:2e:be:b5:02:7f:47:ad:6e:86:41:45:d8:c2:18:
56:44:6b:e1:fc:ee:dc:8d:ad:43:a1:c8:1b:0e:b5:
2a:6a:72:9c:5e:0d:ec:bf:f3:51:1e:05:8d:9f:2d:
2e:65:38:0d:de:3f:f7:12:00:2d:f8:1b:70:49:bd:
c5:7a:b1:a6:a2:51:7d:2b:2a:a1:78:54:52:1b:a9:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CE:73:EA:A6:19:46:32:57:EA:3F:17:1A:3E:A4:AA:37:1F:61:6E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Ic5z6qYZRjJX6j8XGj6kqjcfYW4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:47:48:e5:cb:45:fa:2f:3a:07:22:c3:94:4c:8c:9a:32:e5:
41:5e:67:29:50:16:6c:06:26:f8:17:d8:31:c4:12:c7:11:7a:
10:0e:fd:a1:3d:ea:59:c6:3b:7d:fe:35:e0:03:a7:14:70:af:
5e:0e:81:19:e5:98:aa:b8:0b:70:c9:35:4f:ce:32:ed:11:81:
74:d4:3d:cf:35:ba:47:46:bb:cc:24:d4:11:6f:cd:1f:53:d0:
a1:17:e7:09:8e:9a:52:15:93:76:73:e8:48:1c:82:cf:de:36:
e5:7e:83:57:24:7d:ce:e3:10:c6:da:f5:0e:cb:82:0f:57:ba:
e4:e6:c6:fb:fb:5d:ea:54:dd:98:58:ce:ed:fd:96:aa:25:37:
98:94:f1:97:d0:bf:79:3a:43:b7:a4:d9:20:09:12:22:b1:93:
16:46:bf:ee:b0:d7:ac:2e:13:a4:09:13:56:a9:f9:72:34:4b:
38:31:d0:91:2d:a6:7a:43:df:28:8f:65:06:f9:b9:71:73:91:
aa:fe:c5:0f:ac:92:5c:06:ad:6a:12:d5:ed:05:f5:b3:72:93:
f0:18:fe:7e:95:9d:de:53:dd:6a:81:89:8b:88:82:2b:71:b1:
07:11:ac:91:19:0d:67:31:f4:89:6d:c4:3b:5e:22:a2:75:8c:
64:af:61:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:42:13 2024 by rpki-client on console-ams.rpki-client.org