Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/czxYZBAdVBoFl3cE29Gepc-BEHE.roa
File: czxYZBAdVBoFl3cE29Gepc-BEHE.roa (raw, json)
Hash identifier: rKtzzU+VswwGkYnyZXBHahwIDk1aXC5agBctbM0GWiA=
Subject key identifier: 73:3C:58:64:10:1D:54:1A:05:97:77:04:DB:D1:9E:A5:CF:81:10:71
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1628
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/czxYZBAdVBoFl3cE29Gepc-BEHE.roa
Signing time: Fri 19 Apr 2024 01:23:30 +0000
ROA not before: Fri 19 Apr 2024 01:23:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5672 (0x1628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 01:23:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=733C5864101D541A05977704DBD19EA5CF811071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:17:88:ee:9e:7e:42:52:03:07:a2:7e:d5:
f9:46:2a:f4:78:bf:2e:44:aa:26:cc:c4:64:e5:1c:
f3:fd:ac:09:07:31:9b:b4:f5:3d:32:46:ac:6d:c5:
3a:be:ef:e6:ed:54:ca:46:b4:af:cf:a4:66:03:5d:
de:ab:56:9a:32:8f:b5:d3:f0:81:5e:95:fd:eb:a0:
3c:7f:b2:a6:20:5c:4a:f3:0a:d0:f5:29:98:90:6f:
91:3e:7f:07:76:0f:78:46:ca:a0:0b:68:0f:2b:91:
f7:09:c4:0f:59:3e:c4:b8:61:84:fe:88:8e:84:a0:
17:c5:3c:8f:6b:39:b4:d1:b9:1b:90:17:35:dc:29:
01:5e:57:15:87:fe:8b:09:22:54:ff:df:84:99:72:
43:af:d6:bf:bf:bd:f3:7f:07:a8:fe:ed:a7:4b:28:
a0:1f:9b:5e:11:26:8b:e6:00:ea:e4:b7:5e:d5:0b:
74:f8:17:64:3d:08:89:3a:53:a1:34:77:4e:1c:4a:
e5:f3:25:e1:21:b2:ad:bf:aa:96:db:75:a0:03:25:
50:88:2c:b1:fe:20:89:8a:34:ce:41:d3:aa:c2:e5:
63:43:23:e7:88:d7:af:f3:e7:e9:a7:77:87:7c:54:
1a:8c:3a:d5:41:79:53:43:b8:96:14:26:d0:49:3f:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3C:58:64:10:1D:54:1A:05:97:77:04:DB:D1:9E:A5:CF:81:10:71
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/czxYZBAdVBoFl3cE29Gepc-BEHE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:ce:15:c7:33:7f:c5:6a:66:41:8c:97:2f:7d:96:a8:4c:07:
4a:3f:d6:d3:cc:01:8b:e0:5a:6e:94:5c:17:c5:60:14:31:49:
21:fa:13:c8:a1:c7:2d:9d:fc:7a:75:0e:34:a0:ff:5d:c1:9c:
a7:81:20:92:04:80:70:c7:19:12:04:3a:5b:9e:53:6c:a2:64:
0d:d4:80:53:4e:9a:4f:5e:0c:ae:ce:2c:b7:73:fd:dd:ff:3f:
ad:e4:52:b8:6c:3d:7d:0d:d7:da:1f:35:63:a5:43:d1:b9:6b:
a2:a4:f8:24:1d:ed:31:57:31:bd:5b:38:6c:53:1a:02:42:af:
c5:39:a9:e0:49:41:62:8c:f6:67:0d:25:fc:ae:bc:64:19:4d:
6f:62:ef:13:67:19:bc:52:e4:be:b6:f5:c8:85:9d:87:c3:f8:
c4:95:07:b5:ff:5e:15:9c:88:bd:88:69:e9:6f:b3:8f:43:90:
85:62:40:a3:85:e5:e7:cc:4c:09:d6:1a:33:cc:9f:ea:01:0e:
1b:2c:42:68:57:6a:26:d8:5c:17:5a:2f:1b:e5:80:2e:80:c9:
1d:1a:7b:6d:46:84:fd:bc:54:cd:3e:e2:b5:b4:ed:28:35:ce:
05:bc:99:03:21:15:aa:4e:c9:97:5d:6b:d8:e1:7f:a5:8a:f2:
0e:c0:82:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:44:14 2024 by rpki-client on console-fra.rpki-client.org