Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/d2lJ_D5gbLnmgAhQLTY-bUc3GLQ.roa
File: d2lJ_D5gbLnmgAhQLTY-bUc3GLQ.roa (raw, json)
Hash identifier: pq0pNR2lKEomUSBjx9dYJMBi5snMw4OdfduFWn7oMHY=
Subject key identifier: 77:69:49:FC:3E:60:6C:B9:E6:80:08:50:2D:36:3E:6D:47:37:18:B4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C74
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/d2lJ_D5gbLnmgAhQLTY-bUc3GLQ.roa
Signing time: Sun 05 May 2024 20:24:17 +0000
ROA not before: Sun 05 May 2024 20:24:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7284 (0x1c74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 5 20:24:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=776949FC3E606CB9E68008502D363E6D473718B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:f9:46:d7:17:90:6a:0e:39:9e:2f:b8:72:
0d:0a:ef:9c:9b:95:70:ff:27:fc:74:8f:e7:98:8b:
00:11:70:76:26:c2:1c:c6:65:26:4d:22:ac:cd:51:
24:f7:fa:bd:97:0b:04:13:47:6f:6e:e0:c2:4d:85:
b6:8d:7f:e1:af:22:ef:76:50:b0:c8:2f:58:36:0e:
db:00:c8:49:39:57:5b:2c:fa:7c:11:a9:4e:70:2f:
a6:4e:11:e7:f0:18:94:dc:e9:3d:c1:9d:84:41:fb:
d9:2f:44:74:92:41:f6:b1:42:66:50:af:58:81:64:
be:18:ff:be:00:38:29:43:8f:10:0d:21:c1:01:f2:
55:e5:82:01:66:ba:14:46:1a:fa:f6:5c:b3:5b:8b:
f4:60:15:f3:a6:c4:af:82:cf:03:d4:1c:19:8b:af:
11:c7:26:f2:69:cc:71:64:4e:9f:33:9f:5c:26:f3:
4f:f7:45:25:69:df:20:71:1d:8f:22:79:54:c5:0c:
0a:08:0f:cb:22:e5:0a:a0:f2:db:bb:b4:0f:08:37:
c3:85:db:70:02:93:42:2b:c8:bd:b9:b4:df:02:10:
a6:31:51:97:e9:01:89:e0:22:3d:ef:93:28:b3:8b:
f3:38:35:70:cb:87:14:25:ff:ab:72:42:56:32:ed:
4b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:69:49:FC:3E:60:6C:B9:E6:80:08:50:2D:36:3E:6D:47:37:18:B4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/d2lJ_D5gbLnmgAhQLTY-bUc3GLQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:4d:20:56:53:76:d9:b9:67:a3:ed:08:b4:01:1c:7d:f0:ff:
70:ba:dc:fd:24:94:7a:9f:07:9b:bb:6e:d9:de:76:90:6b:57:
51:86:27:40:10:b1:aa:7b:a4:ad:cf:db:d7:f7:4b:93:fd:f6:
0f:4f:bb:4f:82:90:02:f4:76:d4:3a:d5:90:37:03:ed:0c:94:
e7:61:77:d9:06:c6:51:9b:cf:7c:50:4f:b8:5e:c8:07:bb:5b:
14:fa:69:82:e5:24:e8:75:08:28:47:7e:cc:c3:72:c6:2a:26:
bc:4d:97:7c:c7:b0:87:73:49:e4:f4:3c:e1:f5:fb:c7:a5:8d:
49:63:54:7f:59:81:d3:6e:28:4c:5d:ae:b2:51:7b:a8:52:a5:
7d:57:23:d7:21:4b:63:6b:eb:f6:77:fb:e4:6e:b9:20:93:ae:
b2:82:2b:e7:10:73:dd:f1:d6:33:1c:b7:80:91:91:b3:1b:13:
5e:c6:ba:e3:3f:96:7c:6e:57:34:60:91:5a:4b:6b:d2:37:c6:
cd:0a:6a:3c:4d:12:bf:a0:8c:64:a6:1f:03:92:49:79:79:68:
0d:3c:50:ee:e2:75:80:c5:03:a8:a7:fb:f5:b4:88:41:23:e2:
55:b6:76:48:2f:34:3d:92:ac:a2:ab:05:26:ea:65:4b:79:89:
3f:3f:75:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:48:12 2024 by rpki-client on console-ams.rpki-client.org