Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/bkS2-7LwjxWr-AKxrJYAdu97at0.roa
File: bkS2-7LwjxWr-AKxrJYAdu97at0.roa (raw, json)
Hash identifier: kLXJ9My+tbiXoBDM+l2ZbGucy029plFkyYEwEd0YZ3A=
Subject key identifier: 6E:44:B6:FB:B2:F0:8F:15:AB:F8:02:B1:AC:96:00:76:EF:7B:6A:DD
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F6E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bkS2-7LwjxWr-AKxrJYAdu97at0.roa
Signing time: Mon 01 Apr 2024 02:52:34 +0000
ROA not before: Mon 01 Apr 2024 02:52:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3950 (0xf6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 1 02:52:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6E44B6FBB2F08F15ABF802B1AC960076EF7B6ADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:0f:2b:4f:de:8c:48:22:29:2b:a1:03:fd:
26:ca:cc:2e:3b:32:8b:ef:40:61:4a:48:40:98:f0:
f9:ec:12:a2:04:f8:57:73:4a:25:e6:fc:45:68:53:
fa:f9:a2:7f:65:f5:44:c6:d5:cb:fe:4d:01:e0:0d:
33:9e:e0:0b:c2:ae:6f:d8:3a:1b:3f:7f:7e:cf:e9:
ba:20:1e:a3:b3:a5:1e:80:12:1a:c3:09:49:2c:82:
5d:95:5e:32:1e:dd:ee:53:03:57:bb:86:99:7b:f4:
de:3d:e7:37:ea:54:d4:52:db:04:59:a3:7d:b3:06:
87:f7:4d:11:29:8a:a6:00:e3:95:11:7d:2a:2b:4a:
57:79:8f:f8:ce:03:06:e1:75:20:50:f4:4a:c2:99:
d1:7a:f6:a2:99:fc:02:b3:a4:27:dd:44:d0:da:a1:
45:45:41:74:9e:86:20:e0:5b:ed:28:4d:9c:0d:15:
79:71:5d:fc:05:3a:53:aa:6d:62:7f:b8:76:e8:26:
19:3f:8e:7a:2d:44:6c:7a:c7:2c:5a:65:83:8f:bf:
76:43:90:80:93:19:34:0e:97:9d:57:53:dc:5a:4f:
4f:b1:e2:c2:b7:86:4d:2e:aa:5b:fe:6b:1b:fa:62:
55:1f:8e:35:02:b0:a4:ca:20:9a:c2:7b:6e:11:55:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:44:B6:FB:B2:F0:8F:15:AB:F8:02:B1:AC:96:00:76:EF:7B:6A:DD
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bkS2-7LwjxWr-AKxrJYAdu97at0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:b7:c1:59:47:19:5a:f2:21:c2:3c:1f:c2:b0:75:bf:d2:f4:
03:27:b0:b3:83:fc:62:0f:54:02:71:aa:15:fe:51:c3:2c:d5:
1b:4d:0c:f9:78:a7:6c:32:45:22:9e:7d:c7:ee:6e:31:e8:b1:
98:37:11:89:38:74:d9:c8:39:b0:2b:5d:f3:f1:7b:b5:04:36:
4b:53:de:bb:6c:1d:db:03:7e:c7:c0:7e:13:95:a9:0c:e3:d4:
a7:8f:98:c1:9c:68:bd:df:50:a8:a7:b4:58:ab:82:30:03:ba:
09:c5:aa:22:0e:bf:ae:28:d1:8f:d6:72:bc:43:4b:03:60:29:
65:64:07:9f:25:e5:31:77:dc:8c:6a:2d:9e:90:91:e4:ad:75:
be:2a:d3:be:5c:3b:e0:b6:5c:1a:7c:eb:93:fe:14:d6:08:a2:
96:7a:18:cc:f4:ec:1e:3c:8f:93:7e:d9:e5:a0:1b:be:6f:51:
a8:a9:20:2f:9c:60:e9:fb:8c:15:98:6a:95:86:cf:3a:51:39:
4a:5f:50:b3:3b:e7:8b:fc:9d:76:fb:06:30:52:a8:94:0e:ce:
b8:35:f4:63:bf:ab:2f:53:e4:c8:5e:1a:91:67:cc:9e:cc:f1:
d4:ff:57:c2:c0:69:07:7a:28:d1:37:ce:fb:3a:b6:d4:48:2b:
16:4e:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 04:10:29 2024 by rpki-client on console-fra.rpki-client.org