Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/bX6tptPEfX28SLBWVeQRyYsKrLg.roa
File: bX6tptPEfX28SLBWVeQRyYsKrLg.roa (raw, json)
Hash identifier: PCrKLeKADeQ3jgTP8IVsaRq1AqCdODtY5rn6wfqFsCA=
Subject key identifier: 6D:7E:AD:A6:D3:C4:7D:7D:BC:48:B0:56:55:E4:11:C9:8B:0A:AC:B8
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14FE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bX6tptPEfX28SLBWVeQRyYsKrLg.roa
Signing time: Mon 15 Apr 2024 22:53:20 +0000
ROA not before: Mon 15 Apr 2024 22:53:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 22:53:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6D7EADA6D3C47D7DBC48B05655E411C98B0AACB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:40:7e:8c:a4:9c:04:79:62:67:e0:0e:95:
e1:b2:3b:71:bb:03:d4:c8:e7:d5:ef:23:5f:34:e7:
b3:80:28:93:32:8b:da:9c:e5:e8:13:7f:a3:c1:cf:
d1:59:91:7c:d3:ff:49:2b:fc:b8:8b:34:ae:66:a7:
0c:39:b7:7e:8c:a5:59:f7:cd:e4:70:a2:00:94:f8:
b8:28:9d:6b:48:4d:e4:03:41:82:d3:e2:e3:47:71:
ed:ae:35:35:a3:07:c7:67:7c:60:ae:31:12:eb:23:
df:f9:d5:0c:c2:d5:af:d4:52:a6:c4:9a:74:5b:ac:
1f:2b:2c:50:40:b6:9d:84:f1:80:47:6c:e0:e6:79:
2d:d5:3c:ac:77:aa:46:da:88:f1:4f:ce:d0:1b:cf:
c3:15:a4:b0:cb:f9:e3:34:eb:94:34:8b:1e:e1:1f:
4d:b9:f9:54:56:27:dd:44:72:72:1c:60:c1:b0:77:
d7:23:09:20:6d:57:45:29:33:fd:a3:5c:97:2c:b3:
7f:29:6a:14:f3:e6:12:dd:4d:b6:a5:19:26:d2:e3:
1e:90:47:ac:f7:ae:80:dc:79:40:32:99:ae:df:05:
59:c0:57:ac:2d:ad:10:13:45:90:66:0c:dd:00:b5:
61:bb:72:ee:21:b1:e1:86:ff:28:d4:54:64:64:e4:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7E:AD:A6:D3:C4:7D:7D:BC:48:B0:56:55:E4:11:C9:8B:0A:AC:B8
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bX6tptPEfX28SLBWVeQRyYsKrLg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:e7:cc:a7:1b:79:30:dd:b9:08:64:6e:96:4f:9f:c8:de:82:
f2:d4:e4:4d:4b:c2:ff:0c:6b:ee:d7:19:74:00:fa:93:12:c5:
78:f3:24:11:a8:ec:8d:8f:79:fa:e3:fa:33:e5:03:72:c7:35:
58:c7:55:cf:d1:02:de:44:9f:c3:4a:77:ff:d5:08:3b:44:ee:
fe:80:45:a4:cd:14:4d:76:38:ca:5c:3d:55:4a:14:a4:9b:5f:
7a:a8:52:b5:03:2f:69:36:63:8a:9e:49:c1:e8:9e:a1:d1:68:
1e:50:d9:46:e6:d5:e7:1a:16:4f:b2:ee:7f:19:4c:96:bc:4a:
9c:02:9d:c8:91:28:c2:a3:c6:03:50:8b:de:39:ff:39:75:b2:
08:48:2d:13:90:a9:de:cb:e5:71:2c:cb:4c:c8:5b:c4:ea:6b:
9e:76:2f:ed:9b:53:25:2a:b7:d9:ec:6e:e2:a1:59:7f:13:f7:
be:bb:ed:d8:a4:ef:69:92:bb:14:a2:3e:3a:31:45:07:51:d4:
71:1f:98:13:5a:e2:f7:45:91:33:b2:df:25:f8:36:59:38:6a:
ea:e2:f8:6b:d0:ed:aa:db:c1:31:0e:c6:ce:52:fc:2c:61:a5:
53:90:b7:a1:75:b9:be:cc:bb:9d:95:bc:f2:97:65:86:7c:56:
e5:a2:50:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 23:53:53 2024 by rpki-client on console-fra.rpki-client.org