Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/WBuiaEsEKQ8eCZlYDFgkoHVCNJw.roa
File: WBuiaEsEKQ8eCZlYDFgkoHVCNJw.roa (raw, json)
Hash identifier: 6Y9jZkSUodz8E7B7bTlc6qSGb8ak3xxOZvQufD0sb6s=
Subject key identifier: 58:1B:A2:68:4B:04:29:0F:1E:09:99:58:0C:58:24:A0:75:42:34:9C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F40
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WBuiaEsEKQ8eCZlYDFgkoHVCNJw.roa
Signing time: Sun 31 Mar 2024 15:22:37 +0000
ROA not before: Sun 31 Mar 2024 15:22:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3904 (0xf40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 15:22:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=581BA2684B04290F1E0999580C5824A07542349C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:dd:fb:af:b6:f9:f0:de:7c:43:0f:50:16:
a9:cd:97:03:f3:f7:dc:2d:3a:9f:cf:be:6d:e2:82:
f3:40:c3:fe:03:9c:75:ff:2d:e7:0c:41:37:de:52:
3f:5f:fc:0c:8f:a6:05:40:6c:6c:d6:c3:2a:ae:73:
ab:2d:2e:00:1d:30:8a:b5:6f:92:98:35:81:98:92:
a0:ea:e6:4c:f7:6e:5f:8a:33:7a:ee:53:9d:45:03:
89:f6:e0:e7:23:6c:08:73:bd:00:41:ff:e2:ec:80:
03:bd:df:dd:b3:48:3f:0a:f1:d3:b2:d4:79:94:c4:
28:f8:10:ca:e7:f8:c4:e9:a4:cd:bc:39:84:e5:c5:
5f:21:ef:34:66:9a:d2:89:28:07:1b:0d:66:3b:dd:
41:32:3c:39:25:bc:18:59:8b:41:e9:a9:a4:02:2e:
3b:57:16:19:11:b0:2c:db:b8:63:9e:8c:c6:ed:ac:
de:5e:98:c9:ca:0b:11:89:7c:72:ac:bb:fb:2c:59:
75:a2:33:32:29:26:39:52:65:1c:d9:97:a9:5b:52:
8d:47:47:8e:7b:da:38:81:26:9b:ec:6b:87:28:55:
23:9b:bf:ad:15:91:37:3a:17:aa:00:90:ea:5b:ef:
f9:d1:6a:92:34:86:7c:a6:28:c4:de:f9:bf:da:fa:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1B:A2:68:4B:04:29:0F:1E:09:99:58:0C:58:24:A0:75:42:34:9C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WBuiaEsEKQ8eCZlYDFgkoHVCNJw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:6a:fe:cd:72:55:8e:54:1f:aa:a9:48:e3:ab:50:da:11:62:
0b:eb:b8:9b:57:8f:79:0a:c9:f4:f2:51:52:d5:51:55:d7:4a:
a3:a4:cf:7f:ad:ce:cd:26:4a:26:ef:43:e6:33:ec:93:2a:fb:
da:35:bf:31:23:75:ac:61:d0:ac:f0:84:22:ae:ef:fe:a8:0f:
1a:32:fe:7f:8f:46:4a:08:bc:fc:c5:4f:0c:07:df:e4:56:fd:
b9:9d:5c:de:49:4c:fd:a5:2d:02:f7:45:dd:8e:f2:9b:92:da:
3a:14:ad:db:b9:db:e4:0c:35:e5:dd:23:49:20:c0:b5:3a:c0:
01:fd:63:67:b0:f2:ba:a6:2f:da:f3:d5:bb:e9:85:01:5a:a8:
d9:33:81:9a:5b:49:4d:f1:04:66:1a:82:76:f7:ce:f4:3f:5d:
06:87:17:58:6e:c3:67:13:1f:d1:05:d3:47:af:09:35:55:c8:
1e:7f:a9:d5:b2:5d:ee:16:12:66:2d:73:79:31:1c:e4:14:0d:
c9:cc:42:88:63:e4:9b:0f:2d:d6:de:1a:25:23:19:7d:a5:21:
5c:8a:98:0c:39:8d:86:51:0a:b3:df:f1:98:03:b3:7d:2e:f5:
ec:85:fa:97:27:2c:e8:36:b4:57:26:93:aa:2f:19:cb:84:3f:
d6:68:9c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 17:36:15 2024 by rpki-client on console-ams.rpki-client.org