Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/bIVZ-J8YslDXSjGfGv6kOxO_2_o.roa
File: bIVZ-J8YslDXSjGfGv6kOxO_2_o.roa (raw, json)
Hash identifier: DNYrZ89pWpwX2xQPCjwM6xEW99wnmJKyKh4/XA+w72w=
Subject key identifier: 6C:85:59:F8:9F:18:B2:50:D7:4A:31:9F:1A:FE:A4:3B:13:BF:DB:FA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0DAA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bIVZ-J8YslDXSjGfGv6kOxO_2_o.roa
Signing time: Wed 27 Mar 2024 09:52:30 +0000
ROA not before: Wed 27 Mar 2024 09:52:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3498 (0xdaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 27 09:52:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6C8559F89F18B250D74A319F1AFEA43B13BFDBFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:56:a1:ef:15:85:ba:ec:7d:fc:b3:24:fd:
75:a2:76:7e:b5:ed:ef:41:33:60:08:3d:52:1f:c9:
36:0f:77:21:b0:4a:ce:85:80:22:f4:2a:d0:2c:d5:
d9:95:ce:95:07:18:6e:6f:af:d2:db:c1:d0:da:ea:
fd:bc:de:35:b7:da:dd:8c:3b:36:f3:4f:e5:45:49:
24:f7:ab:a5:a6:31:ee:b7:9c:af:ed:f0:c5:e8:6d:
d7:ce:51:2f:c3:1b:94:0a:d4:0e:f3:5d:26:27:32:
73:43:14:ba:41:a9:0a:2f:b3:cb:e7:7f:fe:a8:db:
2d:7c:d0:7d:69:9e:5f:b6:0f:b7:5e:4e:cc:c4:5c:
da:3d:de:e3:b5:d0:5d:5c:5e:b1:56:a4:72:e2:22:
d9:0a:94:7a:bd:85:96:8f:10:51:f3:e5:7c:fd:4e:
9f:e6:5a:04:b9:88:16:11:58:bb:53:16:b7:ff:5b:
a5:f7:e5:70:e0:fd:81:c8:4f:bc:5a:60:33:97:b8:
1c:77:41:b8:a8:25:15:e8:16:1a:e0:0d:ff:bc:90:
20:25:58:22:18:86:c2:6e:10:f2:7a:5c:68:28:46:
44:47:f3:df:a4:d9:9b:b7:f2:4c:66:f9:63:a8:43:
83:2c:75:e1:50:38:ca:55:2d:ff:2b:57:1e:20:bc:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:85:59:F8:9F:18:B2:50:D7:4A:31:9F:1A:FE:A4:3B:13:BF:DB:FA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bIVZ-J8YslDXSjGfGv6kOxO_2_o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:35:14:d3:73:2d:e6:1a:fb:53:10:44:8c:ae:8d:d6:7d:b3:
33:a9:93:87:3e:ed:7b:a3:ab:ff:5d:57:6b:33:36:08:6c:c1:
33:e1:b0:d5:17:8e:d8:68:87:a6:e8:6f:10:dd:0d:b3:9d:ad:
1c:22:0c:bd:a8:3a:15:ba:e8:bc:a4:52:72:2c:ed:2c:f1:5a:
a9:53:b2:4a:c4:a8:d7:25:61:96:c9:b3:d1:0b:81:48:f9:63:
02:21:40:ec:d7:b7:6f:bd:e8:e7:89:02:4f:5b:43:7e:c7:14:
90:6c:e4:43:0e:5a:74:0c:22:9b:bf:e9:56:06:94:d5:39:e2:
bd:69:7f:33:5e:44:10:19:ae:94:15:38:9d:75:99:b4:fa:bb:
92:d5:8b:d0:5b:a6:01:bb:9e:39:bc:a1:32:77:d7:9f:11:53:
a0:c1:e5:76:0f:5c:b5:44:d8:69:dd:ba:7e:9c:ea:03:c0:fd:
76:21:d0:06:90:ad:f9:5e:15:d5:b3:ae:a4:e9:67:53:b0:6e:
eb:17:c8:68:9c:bf:8d:65:85:1c:d5:c5:9c:cc:11:45:0f:a8:
85:5e:25:5b:15:14:5b:93:34:be:92:23:52:47:48:ab:40:79:
6a:41:e1:b3:28:13:4b:57:f2:25:83:6f:15:06:eb:a2:ed:ca:
13:4d:07:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 15:17:36 2024 by rpki-client on console-fra.rpki-client.org