Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/KjLAw-Y5LcAe1GgG0YHtTtLYqvU.roa
File: KjLAw-Y5LcAe1GgG0YHtTtLYqvU.roa (raw, json)
Hash identifier: QDhiaiP1lLHydKJl2GOzStpYNO1Fmy5U1jdvkQn4hNg=
Subject key identifier: 2A:32:C0:C3:E6:39:2D:C0:1E:D4:68:06:D1:81:ED:4E:D2:D8:AA:F5
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0FA6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/KjLAw-Y5LcAe1GgG0YHtTtLYqvU.roa
Signing time: Mon 01 Apr 2024 16:52:37 +0000
ROA not before: Mon 01 Apr 2024 16:52:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4006 (0xfa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 1 16:52:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2A32C0C3E6392DC01ED46806D181ED4ED2D8AAF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:9a:6c:0c:4a:02:1e:09:af:5b:be:3d:a6:
8e:b6:4d:97:75:b8:11:14:d2:de:7b:cd:46:d6:b4:
f9:74:62:e3:8a:3e:cf:fd:31:04:4d:d1:2c:02:a3:
c8:75:ca:13:8b:77:98:6f:96:aa:cc:30:82:5c:02:
0f:a7:a7:88:42:f7:66:b0:25:e3:a5:5f:5d:e5:f1:
fa:4f:ff:d6:ba:1e:0b:a7:ff:28:b7:2a:a5:bc:a6:
af:fe:43:7e:37:b1:44:e9:25:b8:79:fb:98:0d:d9:
b7:52:76:30:1b:86:8f:67:2d:44:17:eb:7d:8c:b8:
cf:8f:67:a0:55:a8:9d:a6:ec:99:da:46:55:d8:f0:
6f:67:a1:1d:42:bf:9d:7b:0a:6b:a1:81:d8:1b:b3:
e3:c3:2b:e2:cd:6f:68:96:14:cd:f7:24:1f:d5:5d:
2d:2e:ab:b4:9d:0d:37:7f:dd:e6:e7:36:c5:3e:32:
23:64:2b:a3:f0:29:f2:d1:7f:7d:ab:2d:41:34:91:
89:5d:58:42:59:5f:1e:b4:cb:74:5d:f1:74:e5:de:
93:5e:1b:36:1b:40:9f:94:d1:6d:57:1b:70:6c:4c:
bf:63:07:47:f5:62:2d:d6:6f:85:78:29:71:3f:52:
67:73:66:8b:ca:22:9b:4d:48:c2:0e:a6:ad:50:6a:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:32:C0:C3:E6:39:2D:C0:1E:D4:68:06:D1:81:ED:4E:D2:D8:AA:F5
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/KjLAw-Y5LcAe1GgG0YHtTtLYqvU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:0f:10:0b:71:20:29:2d:ad:12:5b:01:61:eb:d8:ff:4f:97:
05:32:fa:e7:db:0d:ee:3c:6e:7a:48:b7:a1:3a:26:f4:f6:e8:
d5:9e:94:b9:9c:11:24:26:23:b7:32:b4:74:25:58:77:c1:f2:
0b:3a:6f:b3:92:19:af:bb:c6:13:4f:f0:20:f9:4d:3a:d6:0c:
2d:52:2f:74:c2:0d:f7:87:4c:62:f8:42:eb:bd:a1:eb:1a:1a:
ef:07:ff:c8:28:ab:16:e9:5a:80:57:df:5a:9c:0d:40:17:21:
94:3d:cc:7c:eb:ed:ca:83:c1:9c:aa:b3:e0:1e:e7:ec:5d:9e:
c8:0b:74:e7:8f:4a:fc:df:cc:1c:72:e9:0f:8e:7a:17:4b:20:
f7:00:e7:b1:6d:46:84:07:ee:95:67:0d:71:2b:01:40:ed:74:
01:5a:f7:e6:03:97:ec:c7:e1:ca:e2:29:7e:fb:81:f0:b6:78:
4e:69:f0:05:a1:7f:a5:10:66:0f:77:52:e3:3a:61:aa:9c:c2:
82:3c:b7:a3:d9:fa:f7:c0:09:ef:b3:69:2d:ad:8c:71:70:ba:
13:69:9d:d6:2a:ec:a3:2d:c2:d0:8b:07:9f:34:81:f9:bc:4e:
9d:90:28:b3:0f:e8:85:a3:f3:58:69:32:15:49:a6:db:ab:de:
da:17:b8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 18:49:47 2024 by rpki-client on console-ams.rpki-client.org