Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/GD5iA5gjvE_r6__zbFQ2mCl94OQ.roa
File: GD5iA5gjvE_r6__zbFQ2mCl94OQ.roa (raw, json)
Hash identifier: XNq9ZuKYOhJAg1HjPZb5skv+3OS3oAGSBaG/1/kDx9I=
Subject key identifier: 18:3E:62:03:98:23:BC:4F:EB:EB:FF:F3:6C:54:36:98:29:7D:E0:E4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16EA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GD5iA5gjvE_r6__zbFQ2mCl94OQ.roa
Signing time: Sun 21 Apr 2024 01:53:31 +0000
ROA not before: Sun 21 Apr 2024 01:53:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5866 (0x16ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 21 01:53:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=183E62039823BC4FEBEBFFF36C543698297DE0E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:90:af:f2:d9:58:a4:23:ca:80:48:13:db:
97:52:26:2c:eb:44:bb:9b:2d:c5:76:d2:1f:63:49:
99:20:62:05:7d:db:50:df:15:a6:6b:5f:e3:76:95:
24:dc:8a:4a:49:9a:0a:a6:c0:fe:2a:45:2e:6d:cb:
b3:ff:5e:2a:de:0c:09:fd:ce:61:18:e4:63:f6:bf:
4a:5f:fb:96:2b:71:f1:fb:67:db:f3:c4:16:0d:53:
5a:2e:14:e7:27:d7:ea:59:bf:7d:17:37:9f:a2:94:
6f:3c:ef:94:79:d5:28:58:02:4a:3c:32:bd:76:d7:
f0:6f:71:54:f6:f1:50:05:5b:00:eb:74:66:f2:ee:
46:56:09:dc:c0:63:d6:f5:59:6d:a7:c9:d5:89:89:
7a:a1:c8:54:ec:73:3c:12:07:37:ca:1c:93:23:9e:
ee:9e:2b:a2:a6:55:d9:75:65:02:2a:a5:f5:a3:91:
0a:03:bf:fd:d2:1b:4b:cd:a5:86:7c:61:e3:dc:c2:
c7:f7:a7:39:cb:87:41:5b:21:06:34:e4:d5:12:5a:
e9:21:a6:ee:00:04:28:34:fd:43:ba:a8:1f:44:85:
dd:a8:25:b0:bf:7d:a7:16:77:ad:6b:5d:f0:ca:1c:
20:b5:53:57:c9:22:20:60:75:dc:ff:46:f5:a3:a0:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3E:62:03:98:23:BC:4F:EB:EB:FF:F3:6C:54:36:98:29:7D:E0:E4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/GD5iA5gjvE_r6__zbFQ2mCl94OQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:64:86:12:c3:55:95:b2:ed:ea:f1:fa:3f:26:f6:b6:ff:72:
e7:20:e0:69:1a:81:6c:f7:aa:83:5b:f0:19:57:fa:10:81:f9:
d2:14:89:9f:06:3c:73:aa:dd:59:4e:10:fc:5f:68:54:61:74:
f2:ce:c6:ae:bc:10:be:02:d1:63:ad:27:56:84:9c:d1:5a:17:
c1:5a:9a:f4:e8:d5:a0:06:27:72:c9:0b:45:3c:bc:a4:d8:34:
b4:c2:d5:b8:81:f0:c0:8d:29:2c:ab:af:c6:53:80:34:e2:ab:
31:91:e8:f4:e4:b0:31:0e:ee:a5:05:c0:a8:dc:f0:6f:e4:5d:
51:da:b0:80:6d:c7:34:27:b8:5a:70:f5:01:60:21:9d:b3:29:
96:f9:0e:54:f0:b7:5e:c3:f1:fe:e6:99:12:0a:86:eb:d9:8e:
f3:d9:70:7a:c9:fe:c1:68:4f:c5:90:ca:19:e8:77:49:45:d4:
e7:4a:48:f5:08:05:e2:ee:67:a3:9a:cd:e9:fd:c8:cd:22:03:
93:50:78:7c:13:ef:1e:72:7d:1f:cc:43:20:b8:f8:cd:38:63:
cd:33:a6:3b:8b:9d:90:30:0b:08:d2:a9:65:49:3a:66:ea:c1:
2b:91:9d:89:15:05:a8:f1:88:96:52:4b:a3:52:c3:3b:81:b1:
2d:18:d2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 07:56:36 2024 by rpki-client on console.sobornost.net