Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/jp0ZjDvTjZltUpSuu5axg5VEnhE.roa
File: jp0ZjDvTjZltUpSuu5axg5VEnhE.roa (raw, json)
Hash identifier: afYLZfLqa74C/NTQ5JwZ4c51ex+y8LTiaCO6xdtioE8=
Subject key identifier: 8E:9D:19:8C:3B:D3:8D:99:6D:52:94:AE:BB:96:B1:83:95:44:9E:11
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1680
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jp0ZjDvTjZltUpSuu5axg5VEnhE.roa
Signing time: Fri 19 Apr 2024 23:23:29 +0000
ROA not before: Fri 19 Apr 2024 23:23:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5760 (0x1680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 23:23:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8E9D198C3BD38D996D5294AEBB96B18395449E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:5e:58:6b:84:fa:0e:3c:a2:47:04:40:4f:
25:3a:d6:d2:4b:4f:85:50:6e:5b:1d:f6:ff:ca:d2:
1f:c4:d1:5c:d2:f7:65:83:bf:d5:38:55:0c:cf:dc:
6c:72:79:2d:de:42:f8:86:0f:7a:bb:a0:dd:e2:46:
44:2a:65:5b:48:60:8f:e0:a5:5e:99:c3:da:44:d5:
d5:64:41:29:0d:7a:a5:aa:c4:30:97:82:47:86:a0:
b4:b5:96:0a:bb:ef:5f:c8:4d:cd:fb:c8:db:39:82:
87:1e:27:28:d2:99:55:74:20:5e:a1:ba:a0:97:d1:
d8:a0:f6:fb:ac:39:4c:7d:99:0e:40:ea:7f:8c:76:
ce:86:3f:aa:0f:57:78:0a:7d:15:0e:4a:c1:d5:ce:
9e:8a:c1:6b:cb:19:75:a4:a3:b0:a1:cd:89:bc:06:
86:95:61:89:31:f2:ba:0d:47:9a:aa:07:c1:44:52:
84:8b:70:74:cf:d1:c3:b2:fa:6e:40:8e:0f:d4:55:
c8:97:86:b0:0b:ea:9d:50:a8:98:e0:79:fd:72:08:
e6:e3:c7:0d:c1:eb:27:d8:df:0a:8d:8d:ce:f4:cb:
c3:7e:64:20:4d:be:c6:d7:b7:9b:bb:5c:06:a4:4f:
b8:50:0b:59:76:a1:7d:15:66:d2:9e:de:f7:8b:71:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9D:19:8C:3B:D3:8D:99:6D:52:94:AE:BB:96:B1:83:95:44:9E:11
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jp0ZjDvTjZltUpSuu5axg5VEnhE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:25:12:e9:07:4c:db:23:3e:fc:ef:19:d1:17:6a:e3:8a:5b:
01:85:65:30:37:63:52:a5:a9:8a:d5:16:e9:2f:b1:48:c2:1d:
b5:09:20:b5:a9:8f:2f:11:9f:9e:bc:6d:2f:89:51:72:cb:a5:
42:9f:55:db:05:ae:3a:d2:65:5a:73:78:b1:50:50:56:7a:81:
22:25:2a:13:e7:9f:4c:c6:59:46:ac:1d:bf:39:1e:48:46:a4:
6d:17:d7:c8:36:02:01:83:75:8c:1c:99:88:b9:ee:dd:fb:2a:
fb:f5:3a:21:7c:ee:f5:81:35:47:a6:33:73:09:63:1a:85:db:
d3:89:da:5c:aa:26:3e:15:d3:58:73:ad:f8:b6:eb:17:56:f6:
10:bd:36:19:8a:61:e8:9e:fc:26:59:da:ed:c0:90:20:5a:c4:
55:49:ee:e2:73:da:05:d1:8c:71:34:bb:01:db:9b:92:e5:2a:
47:b3:34:be:f3:e8:4a:70:e8:fc:52:4b:24:3e:59:10:67:af:
64:3e:43:53:01:34:47:97:e9:bd:7f:de:b3:cd:13:03:67:50:
81:0e:bc:50:64:d7:4d:63:c8:48:1a:74:7b:a1:f5:34:d6:82:
b9:e1:40:3c:04:72:89:08:7a:e8:75:6c:3a:d8:12:1f:b3:b8:
92:17:68:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:14:51 2024 by rpki-client on console-fra.rpki-client.org