Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/b7v9Tv2aq_upaAVGlMABjsDyvAc.roa
File: b7v9Tv2aq_upaAVGlMABjsDyvAc.roa (raw, json)
Hash identifier: Xaq2Jnsx1kBi2UJPEukk0jJ0WciSvDw3pwZIZdX/nKk=
Subject key identifier: 6F:BB:FD:4E:FD:9A:AB:FB:A9:68:05:46:94:C0:01:8E:C0:F2:BC:07
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F8A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/b7v9Tv2aq_upaAVGlMABjsDyvAc.roa
Signing time: Mon 01 Apr 2024 09:52:36 +0000
ROA not before: Mon 01 Apr 2024 09:52:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3978 (0xf8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 1 09:52:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6FBBFD4EFD9AABFBA968054694C0018EC0F2BC07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:b6:78:4b:6a:08:7a:36:a4:85:dc:b6:14:
c2:39:a6:30:df:4e:53:8a:58:4b:70:46:fd:1a:17:
b4:a7:23:75:c6:7b:06:90:5b:e3:6e:d9:b7:78:e5:
11:70:79:f1:0c:e7:d4:fc:7f:fe:22:90:3e:1d:49:
ab:b1:f5:78:0c:fe:f7:17:22:c3:4a:4e:92:d5:5c:
d8:50:0f:b2:30:88:7d:b2:fd:a5:2c:c2:43:d7:d7:
2a:fd:48:fb:b2:0c:d4:d7:12:21:79:cb:a8:fa:27:
72:6d:5c:ac:12:3d:c3:ce:b0:09:d2:b6:e1:a4:67:
8a:9b:32:0d:00:89:53:46:f4:84:83:9a:b5:49:8f:
05:39:93:3e:34:03:2b:e4:a5:92:0f:a7:9f:ef:ed:
64:81:bf:49:c9:a7:0f:b6:b9:21:bc:8c:28:f4:bc:
f8:92:63:98:6d:fa:16:2a:a8:28:b1:f2:f1:81:ad:
af:38:04:1c:38:2b:6d:e8:05:d0:6c:98:14:8d:d9:
f6:9c:74:ad:3c:2a:ca:1b:09:bb:2d:32:80:30:e1:
f3:54:73:8c:c0:33:ed:30:97:ab:74:d4:a5:3d:7f:
aa:1b:b0:6f:be:4b:0e:e5:cf:cc:93:44:11:37:08:
c3:34:61:e3:9a:22:1d:89:8f:d9:00:60:1a:6d:b9:
cc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BB:FD:4E:FD:9A:AB:FB:A9:68:05:46:94:C0:01:8E:C0:F2:BC:07
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/b7v9Tv2aq_upaAVGlMABjsDyvAc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:4c:e1:f3:f2:6a:d0:33:2f:c3:35:69:77:d3:87:80:fd:02:
ff:27:1c:70:e2:42:a7:0e:85:24:d2:0a:4a:87:37:b5:4b:12:
27:a7:21:32:46:02:4f:32:e1:ee:87:36:3b:cc:04:32:0d:1a:
5e:b9:de:92:3d:30:f3:77:45:85:76:62:e2:db:22:bf:26:c0:
b2:b6:75:4c:16:4c:82:a7:06:4b:17:59:9b:e9:f2:83:bf:3b:
54:3c:d2:c4:e5:86:61:99:23:f3:9a:ab:f4:3c:91:a1:53:fb:
0d:0f:c4:35:d7:14:9d:a4:c1:96:ac:37:ba:03:cd:b7:c9:26:
e5:b6:3f:70:55:87:9c:23:61:8a:69:48:db:14:04:5c:04:47:
e7:50:a9:15:4e:23:89:ff:71:b4:81:5c:5e:28:c1:94:fd:8e:
55:9e:b3:ec:f8:f5:d8:23:f0:65:35:22:87:34:1f:28:e4:2f:
45:34:27:e0:c1:0a:1d:2e:8e:c2:52:35:92:99:cc:82:d9:72:
b3:1d:25:79:c4:fa:54:2b:48:96:fd:9c:ff:97:13:c6:9b:93:
4a:e3:58:6c:e1:f7:d5:b8:40:ce:28:e9:30:13:fb:b1:8a:42:
ca:75:9c:dc:88:c0:73:6c:5d:1f:45:29:81:21:7e:45:00:8e:
bf:78:22:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 11:23:33 2024 by rpki-client on console-ams.rpki-client.org