Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/qOEog_4AH6PUw-YzZqtx5mot8Vc.roa
File: qOEog_4AH6PUw-YzZqtx5mot8Vc.roa (raw, json)
Hash identifier: BB86SnvQDQhZIx55zF0yqjshczBzZ52yz69NNGKq6LI=
Subject key identifier: A8:E1:28:83:FE:00:1F:A3:D4:C3:E6:33:66:AB:71:E6:6A:2D:F1:57
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1626
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qOEog_4AH6PUw-YzZqtx5mot8Vc.roa
Signing time: Fri 19 Apr 2024 00:53:28 +0000
ROA not before: Fri 19 Apr 2024 00:53:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5670 (0x1626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 00:53:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A8E12883FE001FA3D4C3E63366AB71E66A2DF157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:e9:64:c3:3c:47:19:79:94:28:98:9d:ab:
d0:fb:58:3c:6f:26:0a:77:f0:62:81:b6:47:2e:30:
73:e1:a8:f7:37:8a:60:f8:19:a4:b1:b7:be:63:26:
68:bb:49:4b:0c:8a:07:c4:f2:79:a2:97:55:1c:0d:
0d:9d:53:63:c0:7b:77:15:06:34:a8:21:bb:78:5f:
35:a9:03:b4:86:4c:15:d6:b3:d8:cc:21:98:8c:76:
7a:62:10:99:57:61:1c:34:3d:40:36:07:81:88:c6:
28:66:32:56:42:88:76:eb:b7:d5:c4:23:81:fa:79:
fc:23:9a:b5:d3:01:9c:41:cf:03:f3:a9:3c:44:0c:
ea:cd:3c:c8:70:95:41:97:99:90:34:19:77:a1:73:
97:04:33:8f:72:35:dd:d4:2f:af:99:4c:1c:21:91:
25:41:f0:38:3d:80:fa:7f:fe:e2:92:5d:0d:d4:8c:
e5:d8:fa:5e:40:99:8b:06:b7:78:34:45:16:99:cb:
9f:a9:78:41:65:a2:f7:e9:20:19:d1:70:da:f8:e8:
42:b6:9a:3b:60:41:e2:95:46:b5:a6:3d:2d:4e:d7:
eb:1b:f0:a5:1c:d3:05:9a:31:5d:9c:09:c9:5a:f3:
77:9c:05:57:56:f8:4a:4f:c6:c8:7b:b0:2b:f8:ef:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E1:28:83:FE:00:1F:A3:D4:C3:E6:33:66:AB:71:E6:6A:2D:F1:57
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qOEog_4AH6PUw-YzZqtx5mot8Vc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:fe:cc:45:88:c7:da:fa:8d:8a:9f:54:27:79:ef:38:31:da:
ce:af:b9:3e:87:75:7a:56:70:cc:80:16:4b:4a:3f:97:86:12:
4d:97:61:62:42:6b:50:de:98:15:55:aa:ad:3f:28:8d:6c:d4:
7b:f0:64:55:f1:4f:64:05:8d:0c:cf:7d:af:df:ac:3d:f8:0b:
ca:d7:ea:7e:87:8d:7a:46:51:c4:72:0c:82:d3:88:9d:44:58:
52:11:4c:1f:20:1e:8b:23:58:0a:90:eb:60:f2:5e:9c:c1:bd:
8b:43:62:eb:ad:30:92:65:1a:b6:2b:47:55:01:85:62:26:f1:
c7:cf:7a:6a:4b:64:86:08:2f:7e:cc:cc:52:84:5c:8e:3d:69:
23:2d:3a:75:41:3a:b4:9d:ea:76:82:24:49:0d:ed:a2:36:6d:
23:66:8b:ab:aa:38:d3:5d:82:0b:8f:50:f5:c7:50:7a:b7:44:
d7:50:26:d3:c7:c1:87:99:6c:6c:e4:eb:a9:df:42:be:39:d2:
2a:24:2c:69:54:7b:64:4e:ca:2f:0f:ae:61:77:55:2f:89:c7:
91:4d:57:df:c6:df:6e:69:ae:4e:12:41:48:6a:1f:8b:b9:0e:
48:f6:da:33:b3:a3:de:98:6a:19:a3:ae:02:e0:a6:7f:ea:61:
6f:58:fc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:50:17 2024 by rpki-client on console-ams.rpki-client.org