Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/TNDngUrec5t63kZdZNLxmc6wbh4.roa
File: TNDngUrec5t63kZdZNLxmc6wbh4.roa (raw, json)
Hash identifier: MKV0mi+RlIM5Q5J+1WJpKLhHulFQVkerehjh2D8bPBo=
Subject key identifier: 4C:D0:E7:81:4A:DE:73:9B:7A:DE:46:5D:64:D2:F1:99:CE:B0:6E:1E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CD2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/TNDngUrec5t63kZdZNLxmc6wbh4.roa
Signing time: Mon 06 May 2024 19:54:19 +0000
ROA not before: Mon 06 May 2024 19:54:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7378 (0x1cd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 19:54:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4CD0E7814ADE739B7ADE465D64D2F199CEB06E1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1d:2d:5e:3a:06:0b:1f:34:0c:eb:fc:c4:d9:
42:e1:2b:d4:65:ec:1f:d5:14:a8:36:db:ad:47:fc:
9d:88:00:9f:92:1c:31:6c:a5:03:f7:2c:69:a1:54:
20:1c:61:10:90:26:1f:40:7d:ca:7e:56:4f:e2:bd:
5b:19:16:3f:5a:50:7d:94:f1:06:cf:e4:26:9b:fc:
8a:73:a8:55:bc:37:2f:10:a2:47:54:59:36:ed:f7:
0b:ab:29:9e:79:0e:f2:34:81:aa:75:bc:1f:e9:11:
eb:b1:14:66:bb:b4:60:2d:cb:d7:d5:ff:2f:30:b1:
59:cc:32:d5:08:ea:d9:a5:5b:10:ac:be:03:a2:c2:
95:6b:15:3d:eb:84:c1:8d:74:dd:b2:2d:3e:df:44:
f9:c4:be:17:94:0e:b2:fd:ea:26:1d:03:5a:f3:14:
5f:ff:ce:bb:fe:be:be:b8:80:8b:1c:74:10:26:13:
f6:ce:be:6e:56:c3:72:18:16:fe:f1:d2:85:b4:5c:
cc:9a:c4:2f:9d:f7:6f:7f:c8:d7:74:59:a2:f8:ff:
61:dc:cc:54:fd:a6:a1:7f:ad:ae:a3:75:f8:83:50:
00:f8:bd:35:4b:c0:0a:2e:e1:06:1b:2a:dc:90:11:
2f:c4:a4:69:4e:7e:03:46:c8:48:72:b7:38:e5:50:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D0:E7:81:4A:DE:73:9B:7A:DE:46:5D:64:D2:F1:99:CE:B0:6E:1E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/TNDngUrec5t63kZdZNLxmc6wbh4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c9:bb:d8:f8:66:bd:c3:b3:22:3a:c7:a2:8d:8f:cd:d0:3f:23:
02:f7:e7:d1:27:eb:e9:1c:a1:03:76:4d:35:cb:38:1e:f2:33:
c5:74:9c:21:d7:b8:5b:42:6d:dc:6f:b7:08:df:5d:c4:24:94:
aa:7e:3b:d9:64:cc:6c:98:42:3f:8d:76:f5:5e:0f:2a:b9:d7:
56:d5:d1:db:d7:aa:c0:a4:8b:8c:12:ea:60:b3:5e:35:dc:b0:
79:45:5a:e1:2e:9a:2c:f7:5c:30:ae:86:2b:13:ea:5d:73:2c:
ca:e5:55:d1:2f:2e:bd:8c:f2:85:24:a4:ad:97:12:39:b7:67:
13:8f:17:5c:f1:56:9c:a4:02:f5:6e:01:aa:77:a0:4a:13:41:
1b:1b:bd:24:22:a2:44:11:f6:50:af:0a:6c:3a:a3:08:b6:f8:
c3:e6:f8:ad:58:3c:2b:0f:11:a8:a8:15:e0:41:04:4a:b1:68:
d9:4b:9e:33:fd:de:95:11:a0:e9:b3:1c:40:50:b5:42:6f:02:
b5:d4:22:c8:55:3f:07:06:9b:e1:c2:6e:e6:66:80:9e:e3:a7:
47:c2:94:0e:2b:33:6a:ad:8c:5f:70:fb:db:c0:0c:0a:11:88:
a9:5e:a2:6b:fe:c7:2b:18:ec:6b:fb:1a:78:b7:48:a9:89:53:
1b:fd:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:14:13 2024 by rpki-client on console-fra.rpki-client.org