Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/LvuQBdCbMr1tJUAMn-24Dj8f9x8.roa
File: LvuQBdCbMr1tJUAMn-24Dj8f9x8.roa (raw, json)
Hash identifier: /n7VwltczL7M3kE+6K+v9V/3tSzecf5ga23Tl3r6E40=
Subject key identifier: 2E:FB:90:05:D0:9B:32:BD:6D:25:40:0C:9F:ED:B8:0E:3F:1F:F7:1F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 13DA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LvuQBdCbMr1tJUAMn-24Dj8f9x8.roa
Signing time: Fri 12 Apr 2024 21:53:15 +0000
ROA not before: Fri 12 Apr 2024 21:53:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5082 (0x13da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 21:53:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2EFB9005D09B32BD6D25400C9FEDB80E3F1FF71F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:25:cb:f2:a5:9c:26:89:82:a8:b2:34:af:
75:47:d9:75:78:23:f7:02:75:54:08:f4:29:e9:4e:
e6:ed:d2:98:ce:13:51:cd:f1:be:3a:0b:db:85:d6:
f5:41:23:51:7e:b0:13:ac:0c:a8:4f:f7:a3:a8:8d:
8d:73:8a:c7:fd:e7:94:ee:e4:16:91:b6:ef:06:61:
90:cd:27:13:a2:2c:07:9b:71:e5:63:b4:88:07:cb:
17:11:8f:3d:37:a4:d1:43:f9:a4:58:3f:4f:37:65:
38:b3:1b:f5:ac:65:5f:ef:12:02:ec:93:b3:c6:8f:
23:85:7b:25:35:41:b7:96:e2:be:ca:f8:a8:b2:c0:
bf:22:43:c7:42:f3:73:44:ef:d1:43:0d:32:63:07:
d5:f0:81:1a:92:d0:76:ec:a0:c7:fa:11:4a:68:6e:
50:bd:b1:d5:12:c2:df:8e:e1:e7:34:89:c6:d2:04:
38:b2:5e:83:c4:09:41:e2:04:41:69:d8:a0:1f:17:
75:79:c3:8c:79:95:b0:0a:aa:0c:f6:6a:34:d8:66:
51:f7:9d:25:5d:9f:2e:2b:ac:35:a0:8f:43:cc:70:
52:42:d4:e3:bb:b6:05:4d:c7:79:d7:26:23:07:94:
56:49:4a:07:22:f4:54:77:69:b9:25:ab:bc:2e:09:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FB:90:05:D0:9B:32:BD:6D:25:40:0C:9F:ED:B8:0E:3F:1F:F7:1F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LvuQBdCbMr1tJUAMn-24Dj8f9x8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:da:29:7f:9a:45:ff:5d:10:0d:93:e9:30:61:48:af:47:48:
76:fe:aa:a3:55:37:60:97:4d:f5:76:a7:68:1c:38:fe:9e:05:
52:8b:78:e2:01:15:db:b6:c7:4b:81:12:ba:78:51:e1:ad:6c:
64:0d:d6:26:55:af:2e:31:6d:0c:62:2e:f9:b4:6c:94:2b:80:
07:24:6f:df:c6:d9:d1:97:af:9c:aa:b3:56:08:51:56:aa:12:
9b:3d:de:5d:12:d4:72:06:51:00:21:c1:07:06:39:e8:a7:97:
ea:b6:a5:44:c8:03:f5:dd:11:46:6a:8b:b0:14:79:f1:8e:c6:
cc:e6:4f:94:aa:03:23:99:85:4a:46:da:cc:03:5f:d1:51:b1:
25:62:90:47:d8:4d:35:e0:81:09:e3:06:65:68:2b:0e:16:ec:
0d:70:c5:84:b8:1f:02:91:bc:55:11:3f:b5:3b:57:76:5d:a0:
59:d2:3f:09:bf:33:89:4b:72:ca:ef:c4:b0:a7:86:ca:51:cb:
63:02:7f:d8:e0:1f:3c:8c:2d:27:9d:cb:cb:98:ba:1c:99:15:
c0:63:d2:9c:32:8e:39:e5:5b:b1:77:b1:2e:b1:b8:44:25:d5:
9d:2d:b3:4f:64:9e:77:3f:91:65:5a:c5:37:23:95:99:f2:04:
84:59:17:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 23:20:53 2024 by rpki-client on console-ams.rpki-client.org