Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/L2KCLkVVnIOwcS6fOJthS6zP0Uc.roa
File: L2KCLkVVnIOwcS6fOJthS6zP0Uc.roa (raw, json)
Hash identifier: rL/J75/MD1muHlP/nYanpqh/S/cR4jbauAmaA6gVEKs=
Subject key identifier: 2F:62:82:2E:45:55:9C:83:B0:71:2E:9F:38:9B:61:4B:AC:CF:D1:47
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 147C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/L2KCLkVVnIOwcS6fOJthS6zP0Uc.roa
Signing time: Sun 14 Apr 2024 14:23:16 +0000
ROA not before: Sun 14 Apr 2024 14:23:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5244 (0x147c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 14:23:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2F62822E45559C83B0712E9F389B614BACCFD147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:ca:48:c3:cc:88:d8:ae:46:ec:c4:6b:d1:
4f:88:71:1d:24:27:b9:34:49:6e:69:a2:54:59:23:
d2:a7:dd:f2:09:98:bd:cb:02:63:d3:a1:a3:ac:a3:
9f:3d:f0:51:e2:44:b9:dd:1f:e3:00:eb:a4:d2:62:
2c:1a:39:e7:55:1c:dd:0f:9a:4f:fe:96:bc:6c:4f:
52:c1:a0:71:d4:0d:2a:5c:ef:0b:3b:73:dc:2e:df:
0b:e7:d7:7c:21:87:d0:8f:24:43:38:05:93:6c:4b:
03:88:d9:6a:ab:6e:53:2e:f7:0e:02:83:19:b3:d0:
a2:fb:3b:e9:0a:31:f8:0a:9f:b4:f1:e1:b6:58:15:
6d:27:2f:15:0b:db:80:8e:22:44:a9:45:e6:45:64:
41:a0:e4:20:8b:45:ef:03:5b:38:26:e4:3d:74:42:
8d:9a:5f:2e:a8:97:98:79:0f:ae:d3:22:52:0e:5b:
db:8b:d8:77:2c:49:66:36:2c:dc:c9:17:86:86:61:
bd:e9:47:78:f9:ef:77:f1:f9:9b:b6:76:6c:f3:67:
f1:19:54:7f:5c:2a:f2:5e:56:e0:68:0c:06:fe:42:
0d:28:c3:e3:83:a1:c4:48:0f:d0:ad:f2:7e:97:78:
24:ac:cf:6a:64:37:3c:02:3b:ae:44:a1:12:1d:2f:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:62:82:2E:45:55:9C:83:B0:71:2E:9F:38:9B:61:4B:AC:CF:D1:47
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/L2KCLkVVnIOwcS6fOJthS6zP0Uc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:07:1d:04:77:d3:5f:20:44:c2:b5:c3:7c:58:7a:c7:1d:b1:
b5:7b:83:3e:99:4b:bd:ef:44:43:d0:25:d1:6c:6e:18:7a:a5:
54:7f:09:31:80:a4:06:d4:bf:c1:31:a1:30:ad:fa:41:ee:c5:
c4:5b:40:82:5a:38:a5:62:4f:89:e7:df:e4:97:ec:7e:69:4b:
5f:ed:c0:31:7f:54:bf:a8:c9:2a:d1:e9:d7:16:5c:96:3a:f8:
0f:fe:8d:ac:51:59:86:ba:e1:d8:92:13:8b:25:69:b7:9a:cc:
31:75:23:28:95:ef:e7:11:1e:4f:41:1c:af:05:ab:75:17:a0:
e0:e9:34:e0:e1:9b:b9:f3:60:ea:ae:d1:4c:b2:11:02:aa:a0:
d2:95:ba:3e:26:27:4a:ce:7c:6c:2b:2c:52:d8:a5:a1:51:ad:
b6:7e:21:97:29:e7:73:44:ec:a6:40:ed:62:6a:a9:22:88:bb:
12:f6:3d:c2:71:46:9d:27:81:ad:da:2c:f1:e9:fc:85:50:be:
3a:ef:01:6a:ad:2a:17:83:3f:09:47:12:97:db:fb:f0:2b:ad:
5c:4e:e2:43:5d:20:dd:e4:da:d0:ad:5d:8c:4e:61:58:a3:58:
8c:cf:fc:fc:6b:d3:52:24:b4:08:8a:b9:46:fe:87:5e:44:ee:
a8:7e:17:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 16:08:51 2024 by rpki-client on console-fra.rpki-client.org