Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/i0mTT5nsYs2-_lCeS3eDQtVThe8.roa
File: i0mTT5nsYs2-_lCeS3eDQtVThe8.roa (raw, json)
Hash identifier: bx+jrORK4EwjSPSIn2zbFzlwtVRotadg0ZFed6Ur/jE=
Subject key identifier: 8B:49:93:4F:99:EC:62:CD:BE:FE:50:9E:4B:77:83:42:D5:53:85:EF
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E22
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/i0mTT5nsYs2-_lCeS3eDQtVThe8.roa
Signing time: Thu 28 Mar 2024 15:52:52 +0000
ROA not before: Thu 28 Mar 2024 15:52:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3618 (0xe22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 28 15:52:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8B49934F99EC62CDBEFE509E4B778342D55385EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f5:9a:f8:6a:45:46:20:85:7d:40:0a:9e:f8:
c7:d7:d9:e7:db:44:a0:db:26:7e:96:01:98:84:ec:
0b:58:cf:32:51:dc:b6:3f:03:af:95:d5:5e:6e:cf:
48:f3:d3:48:b5:c5:61:ea:f3:33:66:c3:77:28:85:
e9:6e:6f:f3:e4:8c:df:26:ee:4a:da:bf:53:77:82:
f3:a6:f8:ea:4d:b7:99:42:da:1f:27:8f:58:50:0e:
d8:12:26:73:0a:fd:72:7d:80:03:e0:3a:71:0b:9b:
df:75:1e:0c:ea:d7:2f:3b:af:8d:4c:d7:71:eb:45:
f5:72:0d:de:11:94:36:ec:f6:92:a3:1c:3d:f9:86:
6a:86:53:b2:9e:c7:3a:41:f9:71:8d:e4:b3:56:a4:
fb:dd:e0:fc:dd:cf:12:65:83:bf:b5:13:20:e7:9f:
fa:88:01:a9:cd:61:cf:dd:95:d3:b3:9a:57:14:00:
bb:0f:da:e8:b0:09:53:9a:34:78:1a:45:40:4d:bf:
93:c7:41:22:61:7d:65:49:4e:79:f6:e2:06:43:4b:
55:df:e4:00:85:90:24:c9:65:55:a4:82:65:8c:3b:
af:d3:c4:49:0c:e6:35:64:80:e4:94:ee:c6:9c:1c:
77:9e:32:ab:bf:3c:57:b5:b1:b6:6f:68:08:6c:0f:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:49:93:4F:99:EC:62:CD:BE:FE:50:9E:4B:77:83:42:D5:53:85:EF
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/i0mTT5nsYs2-_lCeS3eDQtVThe8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
db:9e:01:20:43:4d:4a:96:a1:1e:6e:aa:df:9a:0d:50:27:8f:
e9:91:72:46:e7:47:84:32:a8:77:02:c8:3b:90:16:21:b0:b4:
eb:df:e4:86:5e:ac:03:ee:e4:cd:6d:67:8c:6d:dd:45:df:8d:
e9:51:07:c6:67:87:ee:2c:c3:8a:6d:88:de:03:61:c5:9e:ba:
27:d9:c7:b8:95:1f:8c:db:9c:ef:d3:8a:8b:cf:6d:db:0b:b2:
c8:6a:43:d0:70:26:a5:0e:f5:4a:d9:16:6a:8d:80:a4:e3:4c:
84:00:a8:d5:4c:7b:f7:af:93:6b:34:53:41:e0:9f:d0:37:88:
b2:c1:8b:5e:1f:6f:af:ca:56:f1:46:1e:c2:53:36:3c:21:8e:
bc:be:77:a8:c2:fb:65:47:ba:17:98:31:2f:fb:23:07:2f:68:
7c:45:fa:23:3a:9a:5c:a1:47:b4:83:72:4a:ad:5b:4a:79:b0:
8e:a1:2f:d7:80:6d:91:ff:0a:86:dd:70:c2:96:18:96:3d:d2:
59:90:2e:d0:0d:25:a0:9b:fd:94:f2:95:6d:c1:83:3d:ee:1b:
43:cb:2e:74:1d:0c:4c:d0:ae:c1:2d:19:66:5e:e8:e0:df:7f:
2a:9d:d4:21:90:4c:3a:f8:c4:26:f6:c6:84:b2:3a:98:2d:3f:
7f:45:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:42:03 2024 by rpki-client on console-fra.rpki-client.org