Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vBzVMRkOH9Ux0Ht_7dQuKtAQAew.roa
File: vBzVMRkOH9Ux0Ht_7dQuKtAQAew.roa (raw, json)
Hash identifier: 5OiW++kq8NM0lGQor1KNUc+5dp4w/MlRTmudvvgwl0I=
Subject key identifier: BC:1C:D5:31:19:0E:1F:D5:31:D0:7B:7F:ED:D4:2E:2A:D0:10:01:EC
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CFA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vBzVMRkOH9Ux0Ht_7dQuKtAQAew.roa
Signing time: Tue 07 May 2024 05:54:21 +0000
ROA not before: Tue 07 May 2024 05:54:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7418 (0x1cfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 05:54:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BC1CD531190E1FD531D07B7FEDD42E2AD01001EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:93:c6:19:44:b7:eb:e8:5d:68:8d:88:5d:
a5:28:16:18:7e:8d:34:a9:39:94:d7:38:ef:cc:01:
a5:f2:49:8b:44:a1:6b:4c:93:37:4e:d5:de:72:53:
d4:9e:27:5d:5f:74:ca:78:1c:57:bb:b0:68:e3:ef:
26:10:9a:1d:e6:7b:0b:2e:bb:5f:b5:c7:74:9e:49:
ad:12:0e:0b:f9:c9:3f:d8:c2:fb:5b:ad:4d:46:0d:
69:c9:74:30:63:ca:02:63:b6:90:af:76:19:b0:35:
ca:36:1b:85:f6:24:9e:53:20:58:de:be:a6:f5:1a:
28:09:07:dc:45:14:37:a9:96:ea:5c:f1:e0:0f:66:
21:3e:20:f3:5b:f5:9c:55:92:f6:ee:38:02:14:e8:
69:5d:95:cd:16:a5:c9:bf:2e:84:50:b1:ea:07:5d:
01:76:d5:2f:b6:15:23:71:2d:1e:ed:1d:7f:1f:74:
91:63:0a:ed:e3:33:77:4f:3f:8c:be:32:42:b4:b1:
f7:11:07:ff:b6:92:84:29:60:17:3d:76:f3:41:ea:
79:97:98:08:60:32:78:86:e9:59:2c:cc:fe:cf:18:
68:c0:85:98:b6:ba:48:d7:63:b1:1c:e0:59:98:09:
c9:13:71:f4:91:11:fc:8d:9c:ef:6a:fa:f3:e4:9e:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1C:D5:31:19:0E:1F:D5:31:D0:7B:7F:ED:D4:2E:2A:D0:10:01:EC
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vBzVMRkOH9Ux0Ht_7dQuKtAQAew.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:ae:ce:3c:79:1c:9f:d4:d1:2e:3d:35:41:70:a2:b3:74:16:
1e:71:e2:9d:50:41:e6:99:e6:0b:42:c4:b6:c1:76:0f:a9:76:
84:aa:37:17:6f:17:9e:3e:95:fd:bc:6c:6e:8f:95:fc:39:86:
99:66:bd:3d:23:42:3e:f3:87:d4:0c:b0:c6:11:0b:d4:7a:00:
60:32:ba:96:c3:2f:6a:17:7d:01:4c:d5:dc:d2:72:2f:19:ef:
92:79:8d:5e:73:b0:65:a4:4c:82:3c:74:8c:a4:8e:1b:1a:94:
5c:4b:cf:63:13:c5:8b:c6:92:8d:4c:7e:fb:8f:b6:26:20:54:
e3:ed:4b:de:48:c6:34:78:ad:e0:5b:21:e7:3f:cc:73:33:c6:
a7:7d:8c:e5:93:09:14:63:bf:68:8d:df:fd:fc:e7:4a:a9:fe:
b4:21:a9:08:3e:74:db:5d:a3:e7:09:96:8a:36:97:62:3f:52:
5f:14:b3:91:02:62:55:52:d3:5a:12:6d:fd:27:68:06:b8:a7:
52:ce:3e:d3:a2:7a:14:91:b6:5a:8e:f7:bf:76:bd:7f:2a:b2:
f4:d6:b6:f2:7e:68:cc:35:85:f7:c2:01:96:94:e1:1f:9d:cb:
9f:a0:af:7f:a6:04:7c:9a:60:91:e2:59:8e:41:06:cb:1d:7f:
4e:e3:ae:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:01:23 2024 by rpki-client on console-fra.rpki-client.org