Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/f7Z6PEJW3U6w-ze7f-05T28HWC0.roa
File: f7Z6PEJW3U6w-ze7f-05T28HWC0.roa (raw, json)
Hash identifier: BEp7Zfq7BGW+UYNG/Or7bfXreckf1c6mIiWjS7HIlKE=
Subject key identifier: 7F:B6:7A:3C:42:56:DD:4E:B0:FB:37:BB:7F:ED:39:4F:6F:07:58:2D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D38
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/f7Z6PEJW3U6w-ze7f-05T28HWC0.roa
Signing time: Tue 07 May 2024 21:24:21 +0000
ROA not before: Tue 07 May 2024 21:24:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7480 (0x1d38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 21:24:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7FB67A3C4256DD4EB0FB37BB7FED394F6F07582D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:47:46:20:98:96:3f:19:aa:35:21:42:9e:
bb:6b:d3:4b:95:ba:e1:b9:38:df:2b:8d:16:9f:37:
26:12:ae:34:99:ad:5e:2c:4b:8c:85:1e:e1:52:ce:
55:4c:b8:71:2b:f3:73:3d:d7:62:77:6e:81:7a:41:
c9:28:06:34:83:9d:ad:d6:41:4f:70:49:6e:2d:6c:
a3:6b:ec:fd:db:4b:6d:9f:0a:f9:70:b2:e2:97:fa:
44:aa:03:7f:fb:ab:a9:2e:0f:7b:b1:9d:76:dc:c0:
6d:6d:47:ac:ab:5e:70:57:74:e5:d4:21:ba:55:a6:
02:05:b3:9b:8c:c9:13:db:a7:5e:2f:8f:1b:ba:3e:
d1:2e:44:51:0b:06:6a:86:91:d1:ca:19:13:09:b0:
03:12:cb:65:fb:4e:2a:1c:ef:ad:31:8f:98:60:0c:
4c:b2:0b:4c:9f:c7:36:b8:0c:10:81:f5:31:55:c0:
37:00:59:5b:94:08:11:77:8f:e6:c7:38:8a:54:b7:
55:32:fd:cf:6b:57:a2:b9:92:ca:e1:b7:e8:15:77:
3b:51:b2:94:96:96:61:3b:46:1d:2a:74:96:f3:02:
11:2a:a4:c8:eb:2e:5d:fa:d8:63:1e:2d:e9:4a:7f:
94:48:61:b9:f6:c7:7a:ef:53:40:fc:cf:91:93:9d:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B6:7A:3C:42:56:DD:4E:B0:FB:37:BB:7F:ED:39:4F:6F:07:58:2D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/f7Z6PEJW3U6w-ze7f-05T28HWC0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:8a:da:16:4f:a5:16:84:80:8e:93:ca:ee:18:7b:e6:01:e3:
9f:a3:b2:19:0f:9d:d4:b1:20:ca:ab:1a:ed:85:e4:a9:10:8e:
3d:65:76:6a:82:c4:c3:ff:8e:a5:5b:17:1a:64:d9:13:96:9b:
04:b7:6b:33:59:92:65:94:9d:6d:8e:3b:98:5d:49:f8:92:bb:
ad:16:f7:3c:89:1d:bc:cc:43:67:45:8f:bf:fb:e1:d0:ec:1f:
07:a1:80:3b:f0:ef:ab:21:b3:3a:8c:3f:72:f6:a9:00:5d:18:
04:04:52:43:63:1f:a7:4e:d1:be:40:29:f8:3d:27:77:e8:54:
f2:8a:5f:2b:50:e2:ec:fa:f7:b7:04:1c:df:21:38:24:80:6a:
f8:18:15:57:89:07:fd:c3:12:e1:49:cd:f5:ef:bb:e3:29:11:
52:c4:45:36:36:6b:51:e5:ca:d9:e7:ae:42:de:e4:c7:97:e0:
b9:b8:6f:a4:59:41:4e:cc:d0:13:fe:9b:15:5d:d2:23:fa:94:
c9:c2:31:b0:6c:53:5b:ac:3c:38:bb:ad:94:e6:a7:cf:a3:a4:
36:1a:57:36:85:57:a6:47:53:dc:1a:63:5d:09:e2:31:c8:26:
c5:9d:81:b7:d4:e9:44:c2:38:21:49:9b:b4:b3:5f:a6:25:ee:
90:60:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:26:40 2024 by rpki-client on console-fra.rpki-client.org