Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/_58f6FKgq0m9zAkMzzGE__SIUbo.roa
File: _58f6FKgq0m9zAkMzzGE__SIUbo.roa (raw, json)
Hash identifier: kIx64qTQ5zjNXRBF8itQ1d/ShjKIq8NE75nwxySkSCM=
Subject key identifier: FF:9F:1F:E8:52:A0:AB:49:BD:CC:09:0C:CF:31:84:FF:F4:88:51:BA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 103E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_58f6FKgq0m9zAkMzzGE__SIUbo.roa
Signing time: Wed 03 Apr 2024 06:52:44 +0000
ROA not before: Wed 03 Apr 2024 06:52:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4158 (0x103e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 06:52:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FF9F1FE852A0AB49BDCC090CCF3184FFF48851BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:14:46:42:02:9a:19:e4:62:b3:b3:4c:e4:
02:1e:50:91:a7:51:cc:6c:3f:18:02:11:84:9b:7d:
d9:bd:5d:ab:e0:93:80:cc:97:22:35:0f:0e:4f:a0:
e6:7f:c7:0b:c0:eb:00:a9:ab:8d:52:ad:19:f6:20:
f1:38:da:b9:0c:37:6d:bd:bd:30:67:e0:6c:bb:c2:
05:ec:ef:5c:fa:be:e1:70:51:d4:5a:92:9d:f4:9f:
df:2e:78:61:72:e0:cc:f4:a5:0f:cb:86:83:de:8f:
31:e0:bd:ab:56:64:f4:00:36:0c:41:bd:df:42:50:
b8:87:43:e9:9e:58:d9:a2:7c:ee:3e:19:f2:6a:61:
e5:86:d5:2c:f0:5b:f9:ce:56:61:e1:c3:c0:4e:f2:
91:79:17:6b:22:4e:75:7b:34:38:21:d3:1d:fa:3a:
0b:ad:b7:16:40:78:38:68:fe:d3:a9:23:e2:03:a6:
db:92:cc:89:9d:fd:dc:ea:12:79:de:a8:83:72:3a:
84:a7:96:9b:5c:5e:c3:4e:e3:4d:80:d8:dd:9a:a3:
d8:e7:04:61:b2:56:48:54:d6:8e:f5:91:d5:ae:b8:
52:d2:49:b1:89:d3:1a:48:3f:e9:4a:ee:cd:63:1d:
73:fe:58:d0:7a:26:1e:71:1c:da:86:f7:83:99:90:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9F:1F:E8:52:A0:AB:49:BD:CC:09:0C:CF:31:84:FF:F4:88:51:BA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_58f6FKgq0m9zAkMzzGE__SIUbo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:78:66:cd:85:df:e8:39:72:a0:99:07:cd:8d:03:5f:df:ee:
8b:af:d3:59:f6:ad:91:d8:ae:79:e7:5b:46:0c:1a:7b:de:65:
5b:fc:0f:a8:7a:2b:b2:31:74:ff:c7:d5:66:21:25:94:8f:a2:
ae:a9:21:8b:e7:c3:47:23:f0:bb:b0:de:88:f0:e3:12:b7:9e:
48:71:20:18:c6:17:ba:84:86:6f:aa:5a:a5:94:dc:c4:55:e3:
e1:37:8e:e4:a9:3f:8e:2d:f3:4e:79:ef:00:23:49:e5:ea:91:
20:b8:85:e2:0a:62:9d:18:bb:86:e2:0b:2e:3e:05:5e:90:e3:
a1:f8:ad:d4:e2:ea:61:1e:e3:b8:01:38:41:f8:38:ce:79:b7:
94:16:88:76:df:52:ec:55:75:d3:dd:9c:2b:03:f5:6c:23:c6:
e3:72:07:92:9c:56:f6:bb:c2:76:58:fd:f5:c8:8d:9f:2e:87:
e8:c5:37:29:3b:48:8f:08:30:9a:10:47:75:c8:96:0e:32:9d:
91:1c:95:de:81:6a:ed:85:55:fa:32:37:0f:b3:0c:08:b5:4a:
e4:99:f8:ab:a1:c6:7a:95:a4:6f:8c:83:05:b4:3d:81:fc:9a:
ee:e9:dd:3b:5e:6e:0b:76:b6:3a:51:e7:3a:65:4b:ab:35:31:
67:3a:a6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 11:52:07 2024 by rpki-client on console-fra.rpki-client.org