Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/QS0xAIHQADpW1PGtoQcKin8aYn4.roa
File: QS0xAIHQADpW1PGtoQcKin8aYn4.roa (raw, json)
Hash identifier: atucaPFHSej2QpZl3DFS1S0H+3VBhUPjEwXvUd1Vj2o=
Subject key identifier: 41:2D:31:00:81:D0:00:3A:56:D4:F1:AD:A1:07:0A:8A:7F:1A:62:7E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C00
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QS0xAIHQADpW1PGtoQcKin8aYn4.roa
Signing time: Sat 04 May 2024 15:24:13 +0000
ROA not before: Sat 04 May 2024 15:24:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7168 (0x1c00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 4 15:24:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=412D310081D0003A56D4F1ADA1070A8A7F1A627E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d9:fd:7b:61:81:2e:ae:8a:b1:fc:45:cd:c7:
d3:3c:6c:9e:14:27:68:18:5e:d7:15:df:7d:0f:65:
9c:70:0c:56:59:a9:b2:74:06:5c:ec:86:92:8c:54:
c2:18:1c:cd:e0:bb:55:a3:0c:88:d2:e5:32:14:7e:
90:ff:b5:53:94:b2:17:b6:90:0e:a2:5c:d1:7e:ef:
dd:0d:43:54:02:ab:54:99:88:ff:fd:84:2d:79:f4:
c2:81:f3:d6:b6:ad:d0:fb:e4:24:bc:bc:2c:71:56:
16:b4:57:ff:e7:54:33:81:84:af:86:cc:3f:65:0c:
dd:98:6b:27:d8:66:73:8c:20:63:7b:20:49:4b:6b:
09:fa:d7:cd:06:4c:0c:71:e6:70:92:8c:3c:4b:ea:
ce:66:0f:e0:6b:56:05:66:c5:54:dc:f6:a5:6d:98:
c1:06:0d:23:ee:8f:c4:0c:35:35:3b:ad:03:b4:7d:
22:4c:60:bf:b4:22:43:a7:1a:f7:6a:59:87:22:0c:
ca:64:da:12:cf:c1:bb:e7:4b:25:27:f3:19:ea:9c:
a9:59:f0:5f:6d:26:6a:8e:f4:8f:36:d6:01:6a:7f:
e5:08:17:1c:f3:3c:72:b7:e0:56:ba:f3:ae:03:d3:
24:70:ec:94:7d:d5:3b:4b:4d:89:72:4c:65:35:ac:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2D:31:00:81:D0:00:3A:56:D4:F1:AD:A1:07:0A:8A:7F:1A:62:7E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QS0xAIHQADpW1PGtoQcKin8aYn4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:7d:cc:15:c6:92:5a:ee:cc:03:26:23:05:a5:64:35:01:ec:
e0:c8:f6:f8:60:45:ae:1b:df:2c:be:ee:c7:25:03:6b:91:1e:
4f:d6:62:a6:bc:40:a8:6a:75:26:c7:b9:97:d8:11:6a:fc:36:
ae:96:05:37:60:5a:b9:42:72:90:63:0b:4b:1e:c0:7b:90:97:
5c:37:34:24:59:49:89:6d:b8:08:7b:37:5f:6e:6c:ed:f9:9d:
bf:aa:30:6a:81:d9:79:b2:dc:79:07:21:28:f6:9f:58:3c:09:
9a:ff:30:86:59:c4:d0:91:3b:25:31:16:97:b9:9f:9a:31:25:
f9:37:66:6e:cc:2e:ed:8b:7c:0b:f3:d6:1f:07:13:32:b4:b2:
9e:18:19:dc:fa:9c:37:46:8f:27:a0:85:ba:8c:9d:40:96:69:
ed:86:25:f9:64:2e:c9:37:a7:27:0f:d3:6d:98:33:96:77:6e:
ff:26:6e:d8:46:f5:e5:f1:11:d1:c8:b7:34:78:c2:cb:6b:78:
66:3f:d9:7e:71:b1:59:60:c4:b3:bb:25:07:0f:60:64:55:05:
63:8c:12:de:09:95:9f:4f:7f:3a:ef:ba:87:0f:0b:4f:a2:51:
44:1d:42:38:25:53:a3:a1:13:ac:7c:b9:d0:fb:c9:72:c7:0f:
a5:69:ee:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:55:22 2024 by rpki-client on console-ams.rpki-client.org