Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/RKjcH1bwILVQGZ5lUA47VtjS9RU.roa
File: RKjcH1bwILVQGZ5lUA47VtjS9RU.roa (raw, json)
Hash identifier: bJqewyz4RvBdVOfW+CcTphi8h7zyWbjZyd3jLDbFUyU=
Subject key identifier: 44:A8:DC:1F:56:F0:20:B5:50:19:9E:65:50:0E:3B:56:D8:D2:F5:15
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 151C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RKjcH1bwILVQGZ5lUA47VtjS9RU.roa
Signing time: Tue 16 Apr 2024 06:23:52 +0000
ROA not before: Tue 16 Apr 2024 06:23:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5404 (0x151c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 06:23:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=44A8DC1F56F020B550199E65500E3B56D8D2F515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:be:34:2c:d9:90:f2:c0:49:4b:79:d5:62:
e1:61:7b:18:12:f5:32:18:4a:9a:43:92:ed:28:c9:
7c:6b:34:9e:1b:3c:f4:74:ed:b3:56:84:ba:53:b6:
cd:98:df:4f:b8:2d:e6:d4:13:e5:b7:42:7f:e8:2e:
92:a9:33:c4:cd:9f:90:4b:c9:42:7c:74:cf:5d:9b:
bd:7f:a8:2d:d8:5a:45:2c:db:95:6c:8d:aa:13:46:
09:77:26:8d:7b:0c:c3:9a:3b:dd:c2:5c:49:33:d3:
04:04:c1:27:d7:9c:fa:9b:36:88:6c:76:cf:c7:40:
a6:98:6e:b4:32:1f:00:29:54:81:56:2f:d5:e0:aa:
58:f9:d0:b8:00:4e:be:bc:22:2e:2c:2b:90:56:44:
e5:e9:c2:af:37:70:9d:43:f8:52:6b:61:a5:6d:c8:
ca:6d:61:7e:fe:1a:a7:83:21:64:4a:46:e9:10:1b:
e1:12:09:91:d4:62:be:2b:7b:1c:12:db:80:e9:91:
30:3e:86:00:eb:87:8d:c5:3d:58:ac:d7:c2:51:1e:
63:19:ea:84:4c:f9:a5:2f:fd:28:5d:76:2d:75:08:
c9:72:00:ab:76:07:24:e0:2b:f1:80:51:34:d7:43:
47:fd:da:d2:74:bb:33:35:db:45:6d:97:4a:12:db:
ce:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A8:DC:1F:56:F0:20:B5:50:19:9E:65:50:0E:3B:56:D8:D2:F5:15
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RKjcH1bwILVQGZ5lUA47VtjS9RU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:24:f2:f8:41:e3:33:0f:8b:b6:ce:44:0d:f4:27:79:31:9f:
93:e4:56:6e:97:26:bc:c5:c5:3c:09:c1:19:8a:4c:f4:d1:53:
19:95:ce:23:bf:ec:3e:f3:c0:83:ec:9b:e2:14:62:83:3d:24:
62:dc:fc:05:e0:6b:60:63:6d:f6:c1:01:35:01:82:47:c0:6a:
f5:ee:c5:ef:17:63:d3:69:d2:1d:79:2c:ba:30:dd:c8:98:f9:
48:5e:e4:f7:7c:a8:e1:e1:19:76:80:ff:85:62:a0:de:36:cf:
dd:5d:44:ec:b7:80:e1:ed:73:57:f6:b4:35:0a:30:12:e7:ad:
22:05:1a:2e:f5:c2:cd:65:68:f1:03:dd:78:c7:9b:f0:87:c5:
20:32:78:96:9f:7d:57:66:0f:ab:1c:91:01:61:87:87:d8:1b:
28:e5:a0:28:8e:b9:5c:7b:de:31:f6:4e:1a:ef:14:2a:53:57:
aa:0a:03:15:81:00:32:fa:48:e7:42:54:13:5e:93:d9:81:9e:
21:f1:78:72:af:17:51:bc:c3:44:5d:65:af:09:0d:d3:65:a4:
94:4e:12:aa:1f:1d:17:eb:1e:10:b8:a8:92:06:56:b2:c8:a3:
3c:64:02:b5:5c:a6:cc:33:98:a3:53:9e:12:5d:8f:58:b5:ee:
d9:24:d9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 09:59:44 2024 by rpki-client on console-fra.rpki-client.org