Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/rmsLF2GLnccjuY45z6Ov5bfJNNg.roa
File: rmsLF2GLnccjuY45z6Ov5bfJNNg.roa (raw, json)
Hash identifier: 29FfCIrnjEBg7rod3SANG3QKvlqnWGH2Df54sH6ZAkY=
Subject key identifier: AE:6B:0B:17:61:8B:9D:C7:23:B9:8E:39:CF:A3:AF:E5:B7:C9:34:D8
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EBE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/rmsLF2GLnccjuY45z6Ov5bfJNNg.roa
Signing time: Sat 30 Mar 2024 06:53:25 +0000
ROA not before: Sat 30 Mar 2024 06:53:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3774 (0xebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 06:53:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AE6B0B17618B9DC723B98E39CFA3AFE5B7C934D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:13:b8:bd:c2:23:62:d4:a9:0d:e2:9c:aa:
86:ac:7f:7b:52:ad:ce:80:bc:eb:be:58:d2:1f:7f:
53:77:89:11:8a:81:ba:e9:36:5a:4d:7e:e2:d6:da:
c6:c2:92:e0:ef:f9:bf:c6:35:e0:c7:10:33:f7:0f:
57:70:a9:99:da:1c:5a:50:9d:8a:72:1f:9d:20:47:
9e:13:a4:fa:8a:66:ad:fe:e6:c1:78:36:bf:78:16:
25:35:81:a7:09:75:05:d9:c8:04:ff:a4:6c:3f:84:
49:23:f6:6f:79:c6:11:25:05:e0:f7:20:38:d9:fb:
ae:58:75:94:1d:f4:7c:fd:e0:4c:21:88:6e:22:b2:
e4:c1:ad:93:e6:c5:96:a1:14:a9:78:6d:7e:20:a2:
52:0a:cc:1a:4e:ae:0e:dd:89:9e:ad:f5:ac:69:11:
28:94:fd:ab:14:f3:f4:dc:9c:6c:36:ae:fe:3a:57:
e5:f8:bd:5a:ab:db:a2:18:d0:e5:3a:fe:c6:8e:9c:
a1:ef:f3:9b:a6:a6:4f:a0:52:80:36:16:3c:8e:f2:
9a:2d:34:3b:cd:63:26:a0:f0:b5:dd:d3:c3:79:4e:
67:cb:e9:4a:64:8d:e1:30:bf:e5:00:0f:29:dd:fb:
07:1d:ea:9c:4a:52:22:5b:12:39:d3:f4:a6:1e:c1:
c4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6B:0B:17:61:8B:9D:C7:23:B9:8E:39:CF:A3:AF:E5:B7:C9:34:D8
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/rmsLF2GLnccjuY45z6Ov5bfJNNg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:90:65:ef:27:45:b7:e5:0f:a2:22:5c:a1:dc:02:90:42:7e:
d7:99:07:f8:ce:b7:a5:d2:ba:c5:a9:4c:17:41:88:69:04:16:
10:4f:67:cc:cb:a9:58:c1:5e:17:1d:98:61:73:0e:e6:fa:c1:
9b:05:15:04:38:ff:0c:02:6a:2e:69:a1:9e:29:99:cf:54:16:
63:ca:f8:d0:36:ad:3b:eb:3d:33:76:70:46:fd:78:ab:a7:83:
e7:78:93:47:56:46:77:a9:2d:57:7e:f7:fc:f6:ab:8c:53:b0:
a8:28:ce:4a:b1:02:fa:6b:80:e2:52:0b:7b:c7:c7:05:d7:6d:
99:82:ee:78:d2:55:ad:5f:f7:fe:30:d7:dd:34:6d:d2:19:72:
ad:0c:49:36:11:77:79:cc:61:66:fd:b5:f5:89:45:5a:69:93:
b3:0f:88:90:e7:08:a7:fb:ac:54:dc:42:63:dc:a0:a9:0a:d1:
96:06:1c:18:85:1d:cb:01:57:60:68:91:ed:69:4e:62:78:d6:
c2:6b:a9:d9:45:55:d9:6b:10:b6:d8:79:f2:ec:51:31:d8:59:
a2:62:96:eb:34:7b:60:3e:ab:90:94:ec:b0:25:ec:a6:c0:e6:
8c:90:58:1b:94:20:ca:d8:6a:68:44:58:1c:b2:f4:0b:5c:3f:
ec:13:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 08:43:33 2024 by rpki-client on console-fra.rpki-client.org