Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/aXJyfIOcRjS8FkjwbhqZPdP_1w4.roa
File: aXJyfIOcRjS8FkjwbhqZPdP_1w4.roa (raw, json)
Hash identifier: RkMWo7q7gPkVaGBs6hfk8EcC3uhPKZOGUmlhkX0K+eU=
Subject key identifier: 69:72:72:7C:83:9C:46:34:BC:16:48:F0:6E:1A:99:3D:D3:FF:D7:0E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C84
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aXJyfIOcRjS8FkjwbhqZPdP_1w4.roa
Signing time: Mon 06 May 2024 00:24:16 +0000
ROA not before: Mon 06 May 2024 00:24:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7300 (0x1c84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 00:24:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6972727C839C4634BC1648F06E1A993DD3FFD70E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:09:67:35:f4:d8:0b:73:20:27:de:e8:89:
94:11:58:31:02:3a:ad:7e:b9:1f:c6:55:0e:4f:68:
c0:6f:8c:f0:a4:dd:ad:21:f9:85:5e:84:33:83:66:
62:fb:55:c7:b0:9c:df:6d:42:7a:dc:98:e5:a0:26:
88:c9:38:b7:ee:96:65:4a:7d:1f:21:80:03:e7:7e:
25:0d:8a:c8:a4:f6:9f:7a:2c:fa:ff:2e:2d:a5:4a:
03:52:cb:c1:00:f3:b4:99:ca:f2:e8:02:80:c2:51:
e6:e1:27:47:03:89:db:fb:52:0a:3f:91:b9:34:fa:
23:bb:26:6c:32:f3:68:e4:ae:a5:bc:7c:74:89:d1:
e4:ca:67:65:61:15:54:99:b5:22:e1:ea:79:53:29:
f1:6c:dd:3b:ec:b9:03:a4:0b:f7:17:60:ef:a3:88:
a1:c6:72:d7:6b:b2:0b:a7:f7:89:04:86:9a:0d:54:
8f:ae:e1:fd:b1:90:30:0d:2d:57:39:d9:19:dc:a4:
63:00:0b:42:2d:8d:20:32:51:ed:b4:a1:90:44:17:
7c:61:6a:fa:ee:79:77:c4:27:4f:be:ba:36:3a:77:
7b:5e:db:08:db:4f:af:e9:16:37:fa:df:94:87:55:
9f:04:aa:93:65:48:c1:98:0c:00:44:41:d5:f8:64:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:72:72:7C:83:9C:46:34:BC:16:48:F0:6E:1A:99:3D:D3:FF:D7:0E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aXJyfIOcRjS8FkjwbhqZPdP_1w4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:e4:ca:89:59:1b:37:d9:75:30:2d:a5:36:fe:e2:90:fd:30:
b8:2b:f6:c0:3d:98:ac:26:2e:86:9c:39:fd:30:68:61:83:d4:
07:7e:b1:f8:97:b6:f8:e3:12:0b:e0:a7:87:10:5c:a0:91:c5:
c6:8c:5a:c7:45:c2:f6:8f:99:97:c9:21:ce:c6:ec:64:39:da:
11:64:73:1b:2c:64:0c:f4:4d:4d:75:87:bf:5f:b0:34:26:02:
18:9a:cd:57:c8:1f:d1:52:2a:e9:61:59:15:6e:52:63:a6:4a:
c5:1a:83:c6:1c:15:76:7d:37:bf:7c:ab:d0:96:71:ce:95:fe:
a4:99:27:37:a3:8d:7c:33:ae:d5:c4:49:7f:76:8d:60:06:ca:
84:fe:bb:21:b7:fd:59:cb:d4:39:08:80:a8:72:cf:2d:b7:d2:
34:0c:5b:05:14:e3:4c:5f:1f:fd:be:01:eb:09:c3:93:9e:9b:
b8:29:12:b3:14:ef:97:ee:ac:07:f5:6d:42:87:5c:76:a7:14:
ec:08:0a:c1:2c:2d:75:b9:9c:8b:84:37:ab:5e:ba:3f:23:6c:
d8:56:e6:4c:42:99:de:bf:f3:7e:2d:38:5e:92:3f:07:39:6b:
bd:eb:a2:1b:e1:f8:9d:6d:d7:bf:55:bf:32:83:5b:36:fc:67:
01:56:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:18:25 2024 by rpki-client on console-ams.rpki-client.org