Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Mc5G9KADGkcUwCDJQ3ieV9sPQMI.roa
File: Mc5G9KADGkcUwCDJQ3ieV9sPQMI.roa (raw, json)
Hash identifier: ZaqT4xycuhBOzONDRPAuGamV40QJL2QmbojXOaKjO98=
Subject key identifier: 31:CE:46:F4:A0:03:1A:47:14:C0:20:C9:43:78:9E:57:DB:0F:40:C2
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 10D4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Mc5G9KADGkcUwCDJQ3ieV9sPQMI.roa
Signing time: Thu 04 Apr 2024 20:22:46 +0000
ROA not before: Thu 04 Apr 2024 20:22:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4308 (0x10d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 4 20:22:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=31CE46F4A0031A4714C020C943789E57DB0F40C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:c2:9e:c9:7d:9e:7f:0a:59:c5:89:b6:ed:
db:1b:09:99:4c:8e:90:14:e4:20:8f:1b:96:59:04:
18:df:51:7b:ee:0f:c0:fa:18:03:17:f6:83:d5:d0:
5a:34:0b:0d:29:72:63:72:d2:54:f6:59:20:13:30:
08:dd:44:26:73:0d:c2:8d:fb:5b:5a:78:cf:d9:aa:
37:b7:7a:19:0e:88:55:98:b3:28:05:45:4c:0d:c2:
c9:8f:10:fa:44:c0:2b:5c:4d:89:66:52:60:ad:27:
92:69:70:c0:dc:ba:72:8e:79:da:65:48:fe:f6:74:
26:75:5a:61:5f:02:a7:69:85:81:4f:42:e5:80:1a:
e4:c9:72:d4:12:60:08:da:08:58:9c:87:82:db:2e:
e5:65:d8:59:7e:73:ff:47:4c:4b:4b:41:25:86:50:
dd:f8:dd:74:16:58:7d:4e:fb:cc:68:82:e1:7d:99:
9f:95:79:78:e2:47:b8:27:ca:2b:c0:fa:28:90:6b:
a1:04:3c:b9:e0:88:88:6b:2d:11:d5:a4:d9:df:90:
1d:37:c3:82:1e:e3:d7:6d:a8:de:a3:aa:fe:8f:c4:
64:2e:83:30:2b:9d:61:97:f5:b0:da:d3:36:57:86:
d3:e7:0d:93:87:87:12:96:33:1b:9a:0f:15:3a:8a:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CE:46:F4:A0:03:1A:47:14:C0:20:C9:43:78:9E:57:DB:0F:40:C2
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Mc5G9KADGkcUwCDJQ3ieV9sPQMI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:5f:8b:89:11:4d:2f:3b:c6:be:db:ae:8d:6a:95:47:ec:32:
fe:71:50:72:c7:05:e1:85:30:8e:ed:8b:1d:33:b9:69:62:48:
a9:ef:94:da:f7:d0:0f:86:8d:3e:af:b3:03:24:14:62:50:a5:
01:d5:8d:38:96:9e:0f:0f:f5:86:e8:53:40:b6:16:5d:84:bd:
90:e7:b6:35:c0:6e:54:c1:08:d7:83:50:5b:e7:8a:e0:73:7e:
ce:96:f8:e3:12:4b:f8:ec:30:65:5a:f7:d1:46:61:13:b6:ad:
31:65:f7:e6:01:e0:46:ce:c8:5e:fc:a8:39:9a:72:7b:0e:c9:
ef:2f:6f:8f:0a:b9:2d:2a:20:29:2a:e1:8f:46:40:68:bf:11:
97:ad:ee:3d:7c:ef:13:72:8f:c0:28:de:fe:66:da:06:35:39:
c5:cd:ed:f2:8f:0d:19:d1:a9:24:04:66:ea:ee:ec:38:f9:b3:
a6:f4:7a:c7:7b:3c:bc:94:67:71:a9:41:03:ef:ef:f0:80:a7:
d6:19:46:18:7c:25:73:81:20:14:e0:bc:b2:5b:ed:1d:a4:b6:
a8:0e:1d:c7:89:99:35:e5:13:b2:00:e9:71:d7:6e:67:5d:4a:
0a:95:1c:17:b6:f6:c4:3e:e1:bc:6d:6b:db:d6:4c:b4:cd:e5:
a5:35:e9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 00:21:40 2024 by rpki-client on console-fra.rpki-client.org