Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/IgpkOtsE-_SGEDKiKbreQZswP4w.roa
File: IgpkOtsE-_SGEDKiKbreQZswP4w.roa (raw, json)
Hash identifier: +bn7E1TDpCZNRNXSmDSFxRsppmyM1HH2qEpDW4n4Hvw=
Subject key identifier: 22:0A:64:3A:DB:04:FB:F4:86:10:32:A2:29:BA:DE:41:9B:30:3F:8C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F90
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IgpkOtsE-_SGEDKiKbreQZswP4w.roa
Signing time: Mon 01 Apr 2024 11:22:38 +0000
ROA not before: Mon 01 Apr 2024 11:22:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3984 (0xf90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 1 11:22:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=220A643ADB04FBF4861032A229BADE419B303F8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:c5:2e:c5:ab:16:af:1a:c6:5a:9d:8f:ed:
4c:eb:f4:8a:69:f3:63:b1:83:f5:45:67:e4:08:e8:
c3:37:11:47:a7:17:7c:5d:b9:66:94:fc:96:59:a0:
1b:c6:77:d3:8b:12:eb:1d:f5:a1:ae:9e:e0:92:82:
60:a7:82:58:d8:65:16:24:a7:eb:67:c5:44:50:69:
46:c0:73:30:47:e6:6c:19:c2:7f:64:6f:96:66:ee:
1e:15:70:d1:69:cf:7f:e8:51:34:43:c3:a9:d5:8e:
69:97:14:73:ea:79:e4:f5:b5:b4:23:1e:05:bc:3b:
7b:ef:3c:67:32:bb:20:97:fb:b0:4a:be:77:a7:34:
81:fb:12:1f:46:cf:66:3d:1f:e4:10:ba:8f:44:81:
d9:07:f9:b9:8f:5a:f5:85:77:ea:72:65:72:71:89:
28:ac:3d:6c:11:7a:6e:7d:aa:4f:39:79:67:2f:20:
68:91:93:7d:28:46:4e:e9:68:4a:fb:cf:33:1a:a0:
06:f1:3a:98:92:64:29:07:c5:01:95:17:58:7c:4e:
d2:0c:a6:53:28:74:99:c0:4f:4d:ae:e6:90:24:6e:
d5:b4:d9:b3:e7:25:32:a5:7d:ca:f5:16:eb:af:8b:
7c:43:54:cc:6c:ae:d7:df:49:33:b1:c7:bb:5c:fb:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0A:64:3A:DB:04:FB:F4:86:10:32:A2:29:BA:DE:41:9B:30:3F:8C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IgpkOtsE-_SGEDKiKbreQZswP4w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:49:44:36:b4:56:4d:6e:3d:ad:15:3e:b4:77:9a:ef:ea:24:
3c:6d:43:c9:d2:5f:01:46:ac:fc:f5:da:47:8d:02:0e:1c:ec:
5c:88:3b:15:5b:89:1c:9c:e6:9d:4c:ed:ad:62:66:a8:ee:c1:
69:db:79:44:bb:49:ab:25:a9:1b:d0:26:0c:bd:4c:df:38:3a:
a5:35:eb:77:e2:00:42:60:9a:44:8e:0c:5a:76:00:d2:91:fb:
93:21:78:c7:40:cc:82:78:00:0c:a9:8f:72:88:94:68:17:03:
88:8c:62:0c:ba:24:8e:c2:44:22:84:81:75:52:b0:a5:c4:c9:
a3:c7:03:14:87:af:d9:4e:7e:fa:7d:3f:b1:73:8c:4f:e9:0d:
d4:b8:b4:08:e1:1d:29:2a:70:3e:9b:82:8a:d3:cc:95:95:d8:
06:2c:9d:88:c3:2e:1a:cc:d4:12:f1:37:ca:45:3e:28:ca:6f:
26:85:74:0f:b9:3b:4a:d8:9d:06:26:25:6f:c4:cc:3d:34:94:
c8:bf:8a:58:e8:df:b8:37:62:88:e6:e1:a1:33:39:42:f8:24:
6b:6f:e7:a8:68:a7:53:4e:7a:9c:7f:9a:85:b8:0d:40:fe:78:
f1:9d:ca:25:7f:09:c9:e2:41:85:41:ce:96:27:2d:0c:00:dc:
16:cf:73:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 16:41:05 2024 by rpki-client on console-ams.rpki-client.org