Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Jf_MAjoTa5uOEhGYkBv9772CWc8.roa
File: Jf_MAjoTa5uOEhGYkBv9772CWc8.roa (raw, json)
Hash identifier: dYkRjjT7tqsAfTt9xCU2oTCjGSw/A3rufwBZzCvTOUQ=
Subject key identifier: 25:FF:CC:02:3A:13:6B:9B:8E:12:11:98:90:1B:FD:EF:BD:82:59:CF
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16D2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Jf_MAjoTa5uOEhGYkBv9772CWc8.roa
Signing time: Sat 20 Apr 2024 19:53:29 +0000
ROA not before: Sat 20 Apr 2024 19:53:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5842 (0x16d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 19:53:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=25FFCC023A136B9B8E121198901BFDEFBD8259CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:35:b5:47:07:34:a5:84:38:fe:7e:60:94:
f6:a9:92:99:ce:df:16:e4:38:93:39:28:c8:9d:2c:
71:cf:e5:60:a0:24:ca:c4:c3:25:8c:45:37:c1:cf:
71:78:44:4e:5d:8b:5c:43:41:b0:39:7e:be:61:1a:
2f:f3:33:7e:62:c8:c8:6b:98:85:40:3b:a1:78:a6:
af:24:2d:3f:d7:d8:48:93:ee:46:77:46:fd:46:c7:
71:39:f0:c4:de:86:41:4d:c1:82:92:e6:16:7e:87:
9e:7e:b4:3e:c6:1c:c5:6c:ef:a3:80:60:11:28:d2:
6c:9f:1d:9a:c8:f5:db:b8:09:19:a5:fc:03:ff:89:
56:65:fd:e0:5c:ba:84:4e:27:6f:b0:13:95:c2:0d:
8b:19:79:c7:cc:58:1c:20:49:c8:93:5a:cb:0c:ee:
0f:11:e0:80:89:44:c4:35:68:87:3f:02:6e:c5:a3:
be:0e:be:52:be:0b:97:ad:87:ed:6c:98:77:36:f6:
9d:8e:29:cb:b8:0f:ac:5b:61:8a:e2:d5:ec:c4:27:
90:e9:06:c6:05:19:33:03:aa:81:ca:56:ce:5a:df:
67:61:40:46:d6:5f:d6:7e:40:3f:3b:fa:90:e3:76:
c5:03:f8:f8:d9:72:4a:16:9a:47:b5:33:7a:be:69:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FF:CC:02:3A:13:6B:9B:8E:12:11:98:90:1B:FD:EF:BD:82:59:CF
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Jf_MAjoTa5uOEhGYkBv9772CWc8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:f9:4c:29:cb:84:c2:d9:27:20:de:ec:7b:1f:14:6e:33:81:
e1:b9:76:8b:4e:4b:84:cd:4b:5c:5a:b8:02:d3:eb:6c:d9:c1:
68:50:15:d6:5e:28:71:ec:ef:c4:cd:ab:a0:b5:97:2f:df:7c:
0f:86:ac:5e:21:f5:34:d2:95:01:6a:64:52:48:57:a8:99:00:
48:77:05:8e:f8:30:0d:d7:b8:16:98:fb:9a:5e:9b:c9:c5:b4:
b5:ae:79:d9:34:8d:ec:b5:10:c6:6b:c2:ab:79:6a:0b:ad:92:
1b:41:a8:66:21:07:46:71:d9:46:b3:ae:67:0b:c3:e2:3a:c9:
f1:f7:e6:68:41:2a:5a:d7:0b:f3:5b:ca:17:42:00:d4:b5:54:
70:74:7d:21:74:b5:41:d7:79:86:c7:af:9c:94:68:fd:ee:90:
33:f6:c3:82:77:47:70:c7:45:cf:eb:b9:59:56:a4:60:04:92:
ae:ee:3d:c9:e2:57:8d:e8:06:06:4d:0d:5a:17:b2:7b:64:b4:
32:ec:8b:01:84:e2:71:1f:ba:29:4b:6c:8d:03:82:7a:06:09:
de:25:84:b0:72:37:87:02:ee:37:83:0e:5a:5a:2e:87:b6:37:
3a:de:4a:25:ee:f3:f9:8b:6f:52:53:96:a9:97:a1:10:5d:bf:
5e:d7:6a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 20:58:53 2024 by rpki-client on console-fra.rpki-client.org