Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/dFJmXNF1LqLZ0URYvIx7kJcCKRk.roa
File: dFJmXNF1LqLZ0URYvIx7kJcCKRk.roa (raw, json)
Hash identifier: oMPMGTp3pn2HgaiS/eX2LyqtiLb7f+QlaRIz6ybruWE=
Subject key identifier: 74:52:66:5C:D1:75:2E:A2:D9:D1:44:58:BC:8C:7B:90:97:02:29:19
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EFE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/dFJmXNF1LqLZ0URYvIx7kJcCKRk.roa
Signing time: Sat 30 Mar 2024 22:52:40 +0000
ROA not before: Sat 30 Mar 2024 22:52:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3838 (0xefe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 22:52:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7452665CD1752EA2D9D14458BC8C7B9097022919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:c4:d4:f9:39:e7:3f:74:50:f1:08:33:74:
07:23:c6:95:8a:b4:49:83:cc:8d:3f:66:90:ab:59:
10:b4:7d:c0:ad:83:bd:47:61:49:36:fc:23:f9:07:
df:e6:3a:9e:79:6f:b7:c2:68:83:ee:58:29:99:9c:
22:ed:6d:02:4d:2d:ff:78:1e:6d:aa:93:99:05:a9:
a7:16:70:71:f2:72:b4:50:38:82:91:4c:19:11:3d:
85:fa:00:ca:e9:76:c3:61:e7:70:f0:7a:52:08:85:
11:8b:c6:cb:35:87:09:32:56:04:ed:59:54:6b:07:
63:85:ad:52:ea:a6:d0:ed:07:54:1b:e0:93:92:6c:
bd:0b:90:03:3a:ad:f5:ff:09:b8:95:c8:33:04:17:
c2:f4:85:d6:ca:12:62:90:ef:c4:3e:cd:6c:d9:35:
bd:c1:bb:a1:35:6d:c0:c3:a6:a6:ca:eb:b9:a4:eb:
81:f5:43:29:b9:09:45:1f:e6:4c:ed:8c:1a:97:9c:
9d:33:54:3e:59:12:28:d5:c0:92:95:79:0d:30:0e:
71:e9:ed:e5:60:0d:19:74:b8:a5:8c:9a:97:18:09:
96:2e:dd:fc:e6:30:71:2a:4c:31:93:f2:32:4f:1d:
bb:27:7f:c3:be:7b:76:0d:32:c4:1e:5e:37:09:83:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:52:66:5C:D1:75:2E:A2:D9:D1:44:58:BC:8C:7B:90:97:02:29:19
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/dFJmXNF1LqLZ0URYvIx7kJcCKRk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:75:70:c6:c7:71:33:b1:b7:b2:c4:b3:b1:c5:42:6b:bd:16:
5d:65:88:60:ef:9a:23:ce:94:33:6b:a5:53:6b:e7:11:62:6c:
47:53:e7:e5:59:5e:2c:ee:40:01:fe:da:fc:77:14:d3:27:ec:
cd:f3:ce:7a:61:17:94:30:b4:6e:62:2a:36:10:95:b3:45:71:
1f:96:ff:6b:8f:5e:59:c1:56:52:83:99:3f:ea:a5:ae:af:ff:
40:64:4f:46:32:19:de:0d:65:93:2c:bc:3b:e3:dd:8a:47:22:
8f:44:f5:2b:52:ad:c2:14:0c:c5:c5:c1:b1:b8:fb:01:dd:ff:
54:ca:85:cc:f6:85:d2:f5:8a:8b:25:68:af:25:75:59:28:43:
29:5c:96:bb:3a:43:c7:6c:e3:39:05:85:15:f6:42:43:d1:13:
8b:55:66:18:26:35:7d:5c:33:c7:cb:0b:43:0d:8e:33:80:28:
7e:27:d5:ae:b2:75:5b:66:8d:c0:b6:d5:8e:4a:c6:63:94:66:
34:58:7b:12:70:70:cd:86:0d:63:ed:fa:0d:a5:48:f4:dd:b1:
a3:a6:7f:34:84:2d:b9:86:41:30:eb:b9:4d:32:7e:e8:12:1c:
bd:04:b2:fe:51:94:4f:01:67:26:fb:12:4c:81:da:9a:55:7b:
26:60:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 00:18:46 2024 by rpki-client on console-fra.rpki-client.org