Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/MVCPbVIeivE4cIb5alFRW8lrjjI.roa
File: MVCPbVIeivE4cIb5alFRW8lrjjI.roa (raw, json)
Hash identifier: HrYnslJXr/edzP933C6tUU/f51qjlomqas7jhHadDh0=
Subject key identifier: 31:50:8F:6D:52:1E:8A:F1:38:70:86:F9:6A:51:51:5B:C9:6B:8E:32
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1008
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/MVCPbVIeivE4cIb5alFRW8lrjjI.roa
Signing time: Tue 02 Apr 2024 17:22:40 +0000
ROA not before: Tue 02 Apr 2024 17:22:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4104 (0x1008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 2 17:22:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=31508F6D521E8AF1387086F96A51515BC96B8E32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:1e:9f:11:77:5d:cd:85:3b:7d:11:12:8d:
c1:8f:20:62:f1:46:c1:0f:ce:97:67:09:35:92:28:
83:a2:f4:06:a6:b2:29:9f:a9:0f:45:e4:51:29:72:
f5:14:2a:77:ef:25:4c:32:26:c8:22:1a:3e:66:3c:
81:36:02:76:99:f0:76:35:9b:f8:3e:b3:e4:64:d1:
d5:e4:12:bc:51:38:15:b3:e6:08:b1:1f:7e:95:df:
d9:64:6b:b0:f5:56:0f:d2:51:6a:b0:f3:33:b8:dc:
5e:cc:0b:d3:2e:72:5d:58:11:1e:52:4b:4c:f7:04:
09:9f:dc:51:6a:13:04:79:be:62:93:18:1c:7a:3f:
42:b4:84:93:60:97:c6:62:0f:9b:55:50:02:64:c1:
51:d1:bd:88:15:d3:ca:b7:69:34:2b:7c:b2:a4:ff:
78:39:b3:6b:8f:74:b3:fa:db:a3:04:8a:52:c0:87:
f4:de:b6:42:8c:33:28:3e:0a:36:ba:fc:e8:fa:e1:
ee:f3:07:a7:d1:0e:f5:65:c8:01:16:53:b2:0c:64:
6c:8c:62:8a:66:c4:68:e9:03:fc:75:1a:22:ad:ee:
aa:87:9e:8f:7c:60:fa:6c:b9:cd:cf:69:0c:b0:31:
46:2f:db:f4:0a:74:ad:6a:12:10:4f:1a:ee:8f:af:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:50:8F:6D:52:1E:8A:F1:38:70:86:F9:6A:51:51:5B:C9:6B:8E:32
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/MVCPbVIeivE4cIb5alFRW8lrjjI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:48:04:73:bf:4d:8b:d4:21:c3:b6:1d:a6:98:1e:8f:15:88:
fc:61:85:05:18:b4:12:6e:1d:02:e9:8f:ca:fc:c6:12:fe:61:
f7:83:03:49:4d:4e:b6:70:d0:0b:72:92:55:94:68:e6:0c:98:
4b:50:e5:21:7e:65:8a:3f:ad:9a:45:23:d9:9d:3b:f1:b3:38:
dd:e7:ea:f9:76:07:d9:bf:fb:a8:79:ab:11:02:ce:c8:1d:7f:
98:4b:fe:fd:9b:af:7c:3b:2b:0a:52:63:e9:1a:37:84:8a:06:
d7:c7:52:24:e3:03:3b:8c:0e:24:84:e7:2d:cc:0e:0c:03:c6:
36:97:c2:2c:f6:e9:95:cf:ba:61:ab:1b:78:5e:8f:a7:a6:3f:
47:de:c0:49:d1:1b:c1:cd:9b:af:2d:bc:4e:ec:12:73:a0:1b:
dd:cf:41:06:20:0f:d2:12:00:1a:24:51:3a:3e:4a:e3:71:94:
6c:77:7c:c1:a5:43:08:17:fd:d4:b7:cc:e3:9b:09:40:54:cb:
29:03:34:a2:9b:e6:2b:08:b8:bd:4b:79:d2:7c:f6:0a:d2:fc:
8b:17:03:95:46:81:cb:31:44:d1:ec:a1:8c:07:10:41:ce:79:
57:43:93:bc:0b:38:5d:68:82:38:32:8a:85:6c:7d:61:77:d7:
34:07:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 20:59:17 2024 by rpki-client on console-fra.rpki-client.org