Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/WKtCSaRveDUDpHJIbteC_4Xf1Jk.roa
File: WKtCSaRveDUDpHJIbteC_4Xf1Jk.roa (raw, json)
Hash identifier: JvHteU9zyijcy1qdji3xClTR3INBsih5z5qtYmTdqeU=
Subject key identifier: 58:AB:42:49:A4:6F:78:35:03:A4:72:48:6E:D7:82:FF:85:DF:D4:99
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1210
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WKtCSaRveDUDpHJIbteC_4Xf1Jk.roa
Signing time: Mon 08 Apr 2024 03:23:02 +0000
ROA not before: Mon 08 Apr 2024 03:23:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4624 (0x1210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 8 03:23:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=58AB4249A46F783503A472486ED782FF85DFD499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:ee:19:a9:87:f9:79:d6:7f:2f:2f:8c:5a:
e8:0c:9c:89:c9:54:59:f9:e9:67:a8:29:84:f3:e7:
03:61:53:18:1b:07:92:dd:e0:57:9d:94:e2:ba:28:
eb:46:e0:e0:f8:dd:08:f5:d7:6a:0e:b0:8f:f1:89:
94:8f:64:1d:e9:fe:0a:a4:2c:d4:20:81:4a:32:66:
53:a7:af:8b:62:d7:b4:c7:65:31:ce:5d:9e:98:67:
82:fe:9b:78:47:d8:81:13:15:8c:9e:1b:bc:e3:31:
63:0f:72:ea:dd:5b:e5:10:c8:57:18:5d:f8:6b:95:
f3:a7:38:27:87:25:e1:f7:e9:ae:29:92:f3:34:a5:
3f:8c:a1:97:0d:25:6d:fb:79:6b:ae:d3:3e:af:53:
a5:76:fb:ff:b5:f3:50:32:c9:7a:ab:9e:79:51:9c:
66:5b:03:6b:b7:d2:bb:18:cb:e4:84:4f:ab:5b:64:
8c:39:0b:68:6e:e1:07:78:62:f2:6a:a2:f1:14:65:
50:cd:ff:a1:33:de:82:71:66:a8:2a:58:8a:fa:7f:
a0:9e:1c:9a:94:70:e3:ca:d0:71:8f:5a:f0:09:ca:
c3:45:3a:2e:54:2b:34:90:48:a4:f5:21:3d:f2:79:
90:86:4c:59:80:70:3e:f1:ea:55:17:87:47:75:b7:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AB:42:49:A4:6F:78:35:03:A4:72:48:6E:D7:82:FF:85:DF:D4:99
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WKtCSaRveDUDpHJIbteC_4Xf1Jk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c8:0d:72:ad:d2:c7:bc:b8:ec:fa:07:71:98:ac:5f:78:c8:91:
b3:88:fe:a0:ba:ef:09:89:9d:34:75:7e:0a:58:30:bc:e1:3b:
f3:d8:e2:3a:3a:bd:59:10:7c:3b:f6:58:bd:c2:6c:dd:a9:de:
78:b2:8d:98:6e:42:10:c4:d6:59:fc:f0:c1:ad:23:6a:e2:5e:
28:37:5a:57:f7:d6:6b:26:7c:ca:84:f5:ef:3c:b9:6f:61:40:
a4:00:b1:02:2f:08:ba:72:00:30:71:8b:00:c9:80:92:14:e6:
3d:6e:39:41:1b:b6:bc:2c:bf:3b:6b:99:b2:d3:cd:9d:3d:d0:
10:6b:4c:f4:7b:12:5e:bd:d0:9b:0f:01:99:9e:27:98:64:e2:
ef:07:67:5f:ff:08:b2:c9:33:89:21:1d:dc:17:b0:e4:35:b1:
d7:59:b6:93:05:e1:6c:9b:d8:28:75:a1:59:c4:cf:2e:51:09:
87:5b:92:7d:69:8a:40:75:95:c0:02:bd:ea:df:2f:96:93:7c:
f4:57:3e:cf:6a:1a:0d:0b:49:d3:76:b2:1e:64:e4:ea:3e:64:
71:22:8e:d4:f1:59:67:3d:0a:f8:f0:19:3a:90:bf:94:1a:7b:
7a:2d:78:7d:06:dd:b5:de:2b:cd:45:6a:3d:d9:7b:65:44:5e:
be:66:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 06:40:56 2024 by rpki-client on console-fra.rpki-client.org