Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/iMKATvuB3US9NoyG8PL_Vuh1evU.roa
File: iMKATvuB3US9NoyG8PL_Vuh1evU.roa (raw, json)
Hash identifier: vOUFjcLJy96NFrDGH+REboeHNpHkKUG8B7M+LSmK5DA=
Subject key identifier: 88:C2:80:4E:FB:81:DD:44:BD:36:8C:86:F0:F2:FF:56:E8:75:7A:F5
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1AA4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/iMKATvuB3US9NoyG8PL_Vuh1evU.roa
Signing time: Wed 01 May 2024 00:24:03 +0000
ROA not before: Wed 01 May 2024 00:24:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6820 (0x1aa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 1 00:24:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=88C2804EFB81DD44BD368C86F0F2FF56E8757AF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:75:6a:25:a7:95:7e:15:9f:90:93:25:76:
62:02:e6:f1:dc:a7:46:7a:87:fa:d0:b7:dd:cf:51:
f8:ac:16:3b:44:ba:04:24:ed:88:6c:6b:e8:2f:3a:
b5:6b:e6:0c:6f:bc:10:38:20:c1:ed:8c:f7:85:18:
c7:cf:37:16:03:c0:55:7e:ea:8c:97:f6:f3:c8:92:
14:59:62:93:46:d0:34:64:31:ba:39:45:14:1c:61:
e4:2c:02:43:3a:71:d6:bb:81:78:c5:18:ea:8d:cb:
f4:12:a8:41:6f:a8:64:65:a5:e3:06:c1:75:07:e8:
00:83:1b:e4:0f:dc:60:3f:61:09:b8:4b:6c:f0:ae:
52:b3:a3:09:e3:11:d7:75:12:44:46:72:ef:94:3c:
20:c6:eb:5e:5d:02:f1:54:b7:84:a7:8f:fc:78:c8:
69:50:39:13:5d:e6:8d:58:70:3e:92:21:bb:78:12:
2a:d7:af:49:9a:4a:6b:14:02:e8:ba:5c:0a:9a:86:
ba:7d:7d:05:12:7d:0f:6f:14:fd:e2:08:8a:11:54:
c9:aa:a6:bd:2b:a1:03:6d:78:53:b6:ed:01:19:af:
40:19:b5:8b:f7:84:40:3b:21:56:54:2b:55:85:ab:
7e:62:73:d8:77:70:95:6d:8e:e3:6f:8c:f3:7b:75:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C2:80:4E:FB:81:DD:44:BD:36:8C:86:F0:F2:FF:56:E8:75:7A:F5
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/iMKATvuB3US9NoyG8PL_Vuh1evU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:fa:04:0f:57:82:2d:85:34:8d:4d:a6:3e:0f:fa:15:77:ca:
96:6d:47:f5:c4:c3:e1:41:30:b4:27:c0:c5:e4:8b:81:fc:67:
66:85:01:b0:a1:ec:43:f7:23:4b:bc:9a:4a:10:3f:d9:e5:84:
fd:3e:c3:6a:90:da:40:35:a5:47:68:be:9b:e2:67:83:44:a6:
21:fa:ee:81:af:02:2f:11:e7:32:56:bd:bc:e8:43:ac:bc:60:
21:7b:fd:64:27:61:51:79:b5:0c:08:4a:a7:1a:ad:4d:de:22:
6a:4c:61:b8:b4:02:73:40:83:d9:bb:da:db:24:32:4c:5a:9d:
70:5c:89:fc:4f:fa:68:7b:92:18:31:03:52:5e:30:29:bf:47:
9a:53:28:e0:a8:80:27:bd:74:8d:60:91:fe:66:0d:14:24:30:
c4:ae:d8:ea:fc:11:97:01:97:11:df:92:36:0b:03:72:51:ed:
86:e2:26:61:62:3b:61:50:61:34:f9:42:16:c0:dd:10:cc:1b:
20:6a:2f:80:a3:74:39:ae:6f:20:4d:4b:9d:58:be:45:2b:0b:
51:85:c4:c6:ee:f7:4e:22:a1:6f:a2:fa:80:13:80:f8:d7:23:
2d:b0:ae:12:e2:d5:3f:b6:19:6e:22:55:e8:81:fc:4d:f9:a6:
05:e1:f1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:38 2024 by rpki-client on console-fra.rpki-client.org