Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/JcpYpzP1ZTYN8OCLUCs7WUTquwU.roa
File: JcpYpzP1ZTYN8OCLUCs7WUTquwU.roa (raw, json)
Hash identifier: 9zFMrSrWuI650CxPVaKaalEHSxm9jY6MTHmAaW966vg=
Subject key identifier: 25:CA:58:A7:33:F5:65:36:0D:F0:E0:8B:50:2B:3B:59:44:EA:BB:05
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BC0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/JcpYpzP1ZTYN8OCLUCs7WUTquwU.roa
Signing time: Fri 03 May 2024 23:24:12 +0000
ROA not before: Fri 03 May 2024 23:24:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7104 (0x1bc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 23:24:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=25CA58A733F565360DF0E08B502B3B5944EABB05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:06:c4:a8:be:0d:01:7e:36:2d:90:69:1a:
a0:7e:d9:0f:65:07:f2:aa:9c:43:00:a2:b0:76:2f:
32:e3:5a:28:eb:17:ec:ed:7b:7d:aa:ef:e8:ff:67:
01:2e:49:27:fb:47:b4:9e:5b:81:f6:1c:7e:20:87:
39:e9:fa:cb:6d:62:66:d5:f6:30:18:0f:a5:ca:1b:
4a:67:ce:3f:25:bf:f1:ec:5f:63:6a:a8:60:48:fa:
63:11:4b:07:a5:ee:28:2b:20:e0:5b:28:5f:db:e8:
7d:77:d2:19:ef:8d:74:75:82:67:81:d8:3e:79:16:
a4:f1:4d:91:9d:dc:13:6d:29:c2:9b:4f:a7:61:ae:
7d:59:a6:eb:26:45:db:4d:4c:b8:0f:e4:d7:b4:c4:
82:0e:15:5b:3b:fd:01:a0:ff:aa:bb:21:22:0e:cd:
fd:00:4e:ef:82:df:ff:23:56:47:40:6c:14:cc:b3:
a8:3f:a3:4a:eb:ac:d6:56:cf:58:64:31:d4:00:42:
55:48:6a:60:99:86:12:40:39:43:37:84:12:02:68:
36:1e:da:04:2c:96:d7:33:9e:17:59:8f:9b:eb:bb:
8c:6a:7f:a6:42:0c:5c:77:30:9f:6d:11:3e:f9:e4:
68:18:71:c7:82:09:b9:62:1f:25:7c:40:b6:bb:a8:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CA:58:A7:33:F5:65:36:0D:F0:E0:8B:50:2B:3B:59:44:EA:BB:05
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/JcpYpzP1ZTYN8OCLUCs7WUTquwU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:c3:f0:0e:ba:73:5c:32:8c:69:95:dc:70:87:92:78:2a:99:
f3:a3:3e:2f:7a:af:9f:4b:40:08:8f:a9:98:14:27:08:2c:5d:
66:a4:1f:df:8a:04:1b:4e:71:c6:88:04:09:0e:9b:89:5a:ba:
be:bc:c7:ef:68:8e:e9:dd:8a:3e:6f:08:83:86:15:c7:1f:ff:
46:6f:61:0b:39:1f:e0:59:dd:4d:f5:ac:92:1f:79:31:56:29:
54:e4:94:fc:c9:33:60:49:4c:51:9d:82:6f:ce:fe:65:d7:2b:
b8:ec:37:fe:3f:b9:01:36:8d:15:70:03:36:0b:fc:c9:55:0c:
63:01:77:81:e2:5a:ee:b0:ea:bb:83:cb:77:b3:15:57:65:a8:
ac:dc:63:e4:6a:c0:10:b4:df:7f:9b:dd:57:f4:02:2e:c2:18:
97:35:df:32:5d:75:26:84:2a:78:cf:43:57:69:7e:9f:53:5f:
91:f1:76:e8:0b:08:e9:47:36:48:6e:f8:5d:08:f9:dd:1a:37:
58:87:71:5c:fd:94:e0:c2:dc:67:4a:05:aa:6d:7a:c7:ac:3b:
cd:b0:44:7d:90:95:67:71:ba:7e:8a:9a:41:b0:0d:43:ee:8b:
85:91:35:e1:46:fc:73:42:a7:9f:03:1d:42:5f:ac:54:c8:36:
95:04:e8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:19:22 2024 by rpki-client on console-ams.rpki-client.org