Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/TN_xIvrGo_-jCo2lghbjr-4cBp8.roa
File: TN_xIvrGo_-jCo2lghbjr-4cBp8.roa (raw, json)
Hash identifier: rsKs/YkgNIvhYMWABKstZiv0cuosgtO68EJht19YJCE=
Subject key identifier: 4C:DF:F1:22:FA:C6:A3:FF:A3:0A:8D:A5:82:16:E3:AF:EE:1C:06:9F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 13BE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/TN_xIvrGo_-jCo2lghbjr-4cBp8.roa
Signing time: Fri 12 Apr 2024 14:54:06 +0000
ROA not before: Fri 12 Apr 2024 14:54:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5054 (0x13be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 14:54:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4CDFF122FAC6A3FFA30A8DA58216E3AFEE1C069F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ee:bb:dd:e4:62:d1:e1:91:91:8b:4c:8f:dd:
bf:ea:ba:ed:8a:8f:04:4b:64:65:bf:3d:d6:92:ac:
08:4d:0f:0f:f5:3d:aa:fd:4f:8c:51:fa:79:63:6f:
21:f8:79:b1:24:c7:bb:7b:d4:ff:4d:99:60:cf:99:
50:7d:30:6a:5d:cc:df:f1:cb:82:8b:d5:5d:82:7a:
2a:b1:9f:2e:a1:76:4b:d0:14:fc:72:74:3f:83:03:
a8:83:b2:20:61:6f:74:52:05:16:b5:f4:2d:e1:0c:
54:75:02:86:30:8b:00:7e:fc:71:9b:30:69:0b:2b:
da:41:01:60:69:39:d7:b5:00:78:9c:f6:1c:75:f6:
36:5c:82:66:80:8d:d2:b1:95:fc:28:4a:cc:b7:3d:
f5:bc:35:ed:2c:e0:49:9b:17:51:da:a3:b7:39:d2:
07:d6:f9:79:e3:a7:bb:83:25:4a:75:02:da:d9:69:
ad:d6:4f:3f:5c:a2:e6:b2:df:6c:9e:e5:90:d1:0e:
fd:44:72:db:1f:78:27:30:29:63:e1:d3:f6:4e:8c:
b6:56:8c:17:75:54:b9:6c:5c:f1:e2:48:ee:b1:e8:
13:9b:5b:e0:f7:80:93:7c:d1:cc:f1:80:88:80:a5:
fb:2b:45:85:f4:b9:1b:6c:d1:f6:6d:d9:db:4d:d5:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DF:F1:22:FA:C6:A3:FF:A3:0A:8D:A5:82:16:E3:AF:EE:1C:06:9F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/TN_xIvrGo_-jCo2lghbjr-4cBp8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:e3:e6:12:ab:a3:dd:1e:bb:94:c6:47:46:11:06:a1:96:f7:
b5:fc:ac:fc:aa:5c:e9:84:d7:08:b6:02:66:b6:e6:2f:52:7f:
e1:2f:c7:00:c8:77:e5:fc:86:f3:a1:d3:50:41:6e:2c:50:82:
c9:c9:15:99:c0:77:44:2b:d9:ea:d3:61:b8:53:0a:af:bf:47:
20:48:6c:50:5a:56:38:3f:3c:af:c6:3c:aa:6b:ea:19:bb:36:
f9:4f:8a:ba:91:d9:05:71:77:6d:31:43:1b:f6:1b:95:80:d9:
a4:fa:75:cd:88:81:0a:3b:4e:ac:5f:76:4a:f2:bc:51:e5:0d:
0b:32:85:e7:5c:52:ed:1e:6a:00:a3:9e:cf:22:88:18:10:73:
7a:be:1e:33:eb:2d:eb:00:ec:93:23:47:46:43:9b:6d:47:7f:
c8:52:6b:b1:1b:42:03:c4:be:4e:08:cb:0d:7f:11:b2:a1:64:
2a:55:48:8b:2d:48:f6:6d:0b:96:c3:31:04:6d:db:1f:a4:35:
7c:17:8a:69:db:98:f2:65:aa:d9:6f:75:9b:fc:ee:d6:5b:92:
1f:fe:af:c8:5f:68:45:f9:0f:72:f0:fe:25:67:c5:55:58:6a:
a1:c0:d6:31:af:9b:72:69:ab:9d:2b:e8:4d:aa:27:62:2e:ec:
c4:8a:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 18:36:08 2024 by rpki-client on console-fra.rpki-client.org