Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/-c80_G-v7NfSjRNpoHBshrAn_t0.roa
File: -c80_G-v7NfSjRNpoHBshrAn_t0.roa (raw, json)
Hash identifier: byXzdA5Z1OimdBqcsj8j23m6tdUEi2tECTXbLCnczxs=
Subject key identifier: F9:CF:34:FC:6F:AF:EC:D7:D2:8D:13:69:A0:70:6C:86:B0:27:FE:DD
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A88
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-c80_G-v7NfSjRNpoHBshrAn_t0.roa
Signing time: Tue 30 Apr 2024 17:23:58 +0000
ROA not before: Tue 30 Apr 2024 17:23:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6792 (0x1a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 30 17:23:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F9CF34FC6FAFECD7D28D1369A0706C86B027FEDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:95:c6:26:a8:4e:cf:42:d2:9c:d6:f3:c1:
18:c1:1b:e3:a7:f3:c3:15:9c:77:2a:6b:1c:94:c7:
12:d5:ca:8e:ba:2e:58:39:bf:52:12:27:38:d7:13:
f3:3b:63:45:92:53:e2:c5:22:c2:0e:1a:ea:12:62:
e3:48:a0:88:85:59:62:96:ef:c1:7f:28:04:3a:e4:
31:87:14:27:3e:45:38:3d:31:7a:49:5a:57:ea:22:
de:cd:62:89:46:5a:dc:22:22:ca:9b:e9:0c:13:56:
cd:47:33:ed:d2:46:a7:f5:7c:66:66:9f:f9:c4:db:
80:f1:ce:30:0f:21:34:97:eb:c8:34:08:e3:99:4a:
d0:9a:2e:c8:45:ca:8c:2e:c8:f5:17:fa:34:c4:e8:
2e:bc:aa:c1:88:04:43:ea:e8:f4:9c:d4:90:8a:e3:
d6:61:cf:98:a3:af:2d:30:a9:e2:52:c3:06:61:69:
41:31:3c:6f:5b:c9:15:83:6a:97:d2:4a:bf:b5:dd:
28:87:c7:a9:8f:29:29:73:bd:ef:04:87:69:56:ac:
1c:4d:59:78:33:bd:f8:f9:6d:ed:ad:00:24:82:50:
ee:69:59:d9:bd:6e:e2:f4:2f:d2:ee:a7:d4:e8:7d:
c7:87:be:62:fc:af:d5:42:f0:d8:88:92:3e:69:d4:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:34:FC:6F:AF:EC:D7:D2:8D:13:69:A0:70:6C:86:B0:27:FE:DD
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-c80_G-v7NfSjRNpoHBshrAn_t0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:db:ab:fb:20:04:2f:04:81:b1:24:62:81:a3:41:e4:4f:20:
9a:3e:34:c6:61:b1:f1:1b:0e:e7:d5:fc:50:3e:cd:10:a4:20:
ae:9c:e5:c5:92:a1:86:81:b3:d4:24:6a:4c:ba:c5:61:0f:c1:
39:75:17:2f:5b:47:af:c4:9f:40:71:fe:89:ba:7c:74:c3:dd:
84:e2:01:96:f5:59:79:b9:38:26:fd:bf:ba:96:cc:58:bc:11:
c6:be:68:7c:b4:ff:b5:6c:36:94:88:be:77:d3:a6:f3:1a:2d:
54:87:24:20:67:b3:b9:4c:32:11:e9:b3:7a:51:c8:2e:37:3f:
f9:f3:a3:d6:88:90:2c:ae:1c:3a:8d:82:c5:90:19:32:ad:0d:
b4:e4:a8:82:eb:6b:e6:b8:93:4d:a6:36:1b:bc:b7:f0:08:fa:
6c:29:d2:da:49:d7:27:db:db:85:f3:e2:1b:dc:c6:b4:e6:78:
01:5d:ac:b3:73:dc:5c:8c:77:d5:f5:93:df:31:80:c3:61:f5:
81:b3:30:b0:cd:f6:d5:b8:8e:32:ea:03:b7:79:44:aa:c8:f6:
65:50:86:80:e5:aa:21:80:ce:2a:91:dd:b9:0b:03:88:63:c2:
97:f1:a0:80:1b:95:15:62:aa:27:80:40:71:b1:5f:55:4f:49:
81:81:d7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 22:25:24 2024 by rpki-client on console.sobornost.net