Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ckKtMkTX98s34SsG-umFC746Fhs.roa
File: ckKtMkTX98s34SsG-umFC746Fhs.roa (raw, json)
Hash identifier: PzcdfNpPzvLIKeJaP9McrZ/2qqKVujjcxjaR4IOftmE=
Subject key identifier: 72:42:AD:32:44:D7:F7:CB:37:E1:2B:06:FA:E9:85:0B:BE:3A:16:1B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1166
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ckKtMkTX98s34SsG-umFC746Fhs.roa
Signing time: Sat 06 Apr 2024 08:52:51 +0000
ROA not before: Sat 06 Apr 2024 08:52:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4454 (0x1166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 6 08:52:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7242AD3244D7F7CB37E12B06FAE9850BBE3A161B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:0c:bd:65:ab:50:c8:be:40:42:79:e5:b3:
96:28:74:66:73:a7:79:db:a7:4e:b9:4b:eb:01:4a:
7f:e9:d6:97:e6:13:43:ac:f6:fb:00:64:cf:d4:9a:
a5:e0:eb:d4:d0:0e:6a:85:8b:ab:22:3a:7d:a0:07:
49:5e:f1:06:99:a0:35:83:e9:65:73:2f:fc:3f:20:
31:40:35:7e:d0:44:3a:1f:b5:37:62:f0:8a:36:9c:
29:24:fe:17:c1:d3:8d:2c:8a:8d:9f:62:24:f0:a3:
66:51:fe:25:77:c1:c3:9d:65:50:5c:80:37:df:80:
37:0b:12:d3:83:0e:5d:92:36:40:a1:03:e6:b2:d9:
04:51:84:ea:fb:28:74:3c:8d:a9:5c:25:5b:cf:7a:
ba:b3:3e:49:7b:4e:66:e6:cc:d6:f4:17:d6:8e:70:
63:25:10:e7:b6:08:f4:92:cb:62:25:02:83:5b:c3:
76:55:2b:eb:8f:96:dd:62:09:8c:6e:9f:42:3c:d0:
6e:28:5d:75:9e:c3:4e:40:de:2e:a5:92:4b:99:3a:
7d:58:98:b5:98:98:3b:f9:e0:11:bd:95:b0:32:68:
3f:b4:c6:98:3e:99:3a:30:a8:41:e3:19:02:03:ca:
ec:59:1e:9a:a7:b2:5f:92:5a:22:cb:52:d6:11:ba:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:42:AD:32:44:D7:F7:CB:37:E1:2B:06:FA:E9:85:0B:BE:3A:16:1B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ckKtMkTX98s34SsG-umFC746Fhs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:5c:92:bf:82:6e:1c:c5:6a:3a:3a:8f:5b:df:12:32:ca:b2:
4a:59:d4:e6:9c:b5:a6:ff:aa:e4:78:a7:9e:21:66:0b:20:2c:
42:06:7b:c2:3d:a8:7f:29:47:ba:e2:3b:b3:06:ec:2c:a7:e5:
8f:40:a7:0b:93:2c:2c:94:f8:88:1c:98:01:af:e1:b2:83:43:
fd:79:9c:8a:41:81:30:22:0d:2c:72:2b:e8:cb:2e:e0:59:5d:
ad:a9:1d:51:54:e1:31:56:c2:02:45:7a:b8:3d:44:23:4d:c2:
d4:47:b0:93:3e:22:bb:d2:f8:28:d4:06:82:11:aa:9e:81:7b:
c1:f4:51:45:d8:d3:4f:b7:ae:6f:68:79:38:06:32:20:94:49:
94:73:34:26:53:df:51:01:13:96:2e:da:0a:97:7b:17:bc:dd:
1f:91:0e:51:74:75:15:65:43:78:a1:7c:25:78:c0:07:8b:ff:
16:60:d7:8b:ba:5a:e2:b1:32:a4:b2:20:c0:9c:80:64:e0:83:
7d:3e:e5:11:37:3a:97:34:e3:ff:74:e2:71:36:f7:01:47:8c:
68:a5:ae:3e:e4:3f:72:17:a1:8b:10:d6:af:50:5d:3f:c0:0d:
e4:37:fe:16:5e:63:a0:7b:f0:d6:04:a8:e4:84:fa:6f:98:28:
99:88:04:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 10:33:25 2024 by rpki-client on console-fra.rpki-client.org