Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/fkU9YiWTDv6jf4ai0scnVbx3ADs.roa
File: fkU9YiWTDv6jf4ai0scnVbx3ADs.roa (raw, json)
Hash identifier: oqlkzyDXT5OUQ1Mb8lEkQfJQ59BM3Sk9rYNL6GRisFM=
Subject key identifier: 7E:45:3D:62:25:93:0E:FE:A3:7F:86:A2:D2:C7:27:55:BC:77:00:3B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C8C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/fkU9YiWTDv6jf4ai0scnVbx3ADs.roa
Signing time: Mon 06 May 2024 02:24:55 +0000
ROA not before: Mon 06 May 2024 02:24:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7308 (0x1c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 02:24:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7E453D6225930EFEA37F86A2D2C72755BC77003B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:fa:c2:35:1c:a1:79:72:d9:22:d9:a8:38:
c6:34:77:fa:18:31:83:ab:db:31:95:fe:6c:3d:c5:
e2:78:84:0e:1c:62:b1:3d:17:07:a3:ba:51:a5:f1:
9d:3a:c7:6c:fb:28:7e:8a:34:4b:69:00:e7:15:d7:
8b:fd:4e:93:3a:d6:5a:8e:ca:38:8f:ee:47:e9:25:
6b:3a:24:f3:46:4a:53:38:dd:cf:12:6a:55:b0:3f:
e2:b7:77:9b:31:cc:d5:59:bc:50:3f:e6:42:42:c4:
95:e1:91:30:1d:65:56:8b:de:0d:45:c5:a3:8f:03:
8a:7a:c7:79:2c:6a:1e:93:d5:3e:5e:9a:97:bf:30:
3b:be:bd:85:2b:bb:75:f2:34:0b:73:54:4f:d0:fc:
ed:f9:08:3c:08:2e:e3:ff:cc:1d:36:b6:bc:e8:64:
59:31:28:71:b9:40:3d:95:68:26:74:28:b6:c2:10:
ad:0d:2f:b1:49:9e:cb:d5:9e:bf:e1:87:11:44:d5:
b3:a8:b8:a2:e3:04:db:37:31:a5:22:c8:ad:f5:5e:
b9:3e:43:a4:20:f4:f4:93:d3:c3:ed:09:8d:ac:fe:
91:94:dd:d8:e3:fd:2b:21:9f:f2:2c:32:1e:48:71:
a8:32:cb:59:4b:54:48:9c:8c:5d:52:81:3d:e0:11:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:45:3D:62:25:93:0E:FE:A3:7F:86:A2:D2:C7:27:55:BC:77:00:3B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/fkU9YiWTDv6jf4ai0scnVbx3ADs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:05:87:2a:71:01:62:f1:8c:97:7d:a9:dc:bf:9e:14:d4:48:
90:69:ad:ca:86:d7:ad:6b:96:32:8d:33:90:58:bb:4a:6c:d4:
1f:83:95:03:4b:cf:fd:ff:46:75:90:f9:0a:ee:39:3e:5f:7c:
86:06:d9:dc:cf:f9:34:1a:b0:99:34:43:20:a3:d6:c7:41:a0:
6c:f2:69:3e:93:d2:89:45:de:b0:01:f8:d5:5e:9d:f3:b4:76:
20:8a:64:47:4c:29:75:83:57:0f:b8:de:31:77:b9:43:ed:da:
15:74:17:4d:60:fd:e8:5f:55:68:71:88:2b:4c:18:ce:4c:24:
81:7b:47:07:17:3f:6c:f9:eb:b5:ac:8d:89:c7:9c:c8:1b:17:
f6:13:82:a9:84:0d:40:4a:46:aa:e7:60:9a:2e:ef:7f:90:b5:
96:83:82:1f:57:8e:dc:bd:be:9f:39:07:93:39:c6:74:09:60:
8a:06:d9:76:b8:9f:03:de:42:4d:53:77:e5:a2:09:ff:5a:00:
3f:66:cb:57:40:a5:f2:25:bc:b1:65:31:c4:4a:ff:d2:ed:e4:
fb:9a:d9:1a:3f:a5:15:17:c3:2e:fe:a7:62:1c:00:ce:55:3f:
68:ed:f3:b7:13:d6:57:4a:07:a6:61:12:f4:1d:f8:4b:24:c5:
e8:f8:cb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:46:26 2024 by rpki-client on console-fra.rpki-client.org