Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/MoyQsHlSkPefGlhtlUTm55EBEp0.roa
File: MoyQsHlSkPefGlhtlUTm55EBEp0.roa (raw, json)
Hash identifier: ocMY7QmwWWfoSGAV8c56UksaIoJLXMXe9N7OM4O9Z9s=
Subject key identifier: 32:8C:90:B0:79:52:90:F7:9F:1A:58:6D:95:44:E6:E7:91:01:12:9D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1AD4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/MoyQsHlSkPefGlhtlUTm55EBEp0.roa
Signing time: Wed 01 May 2024 12:24:01 +0000
ROA not before: Wed 01 May 2024 12:24:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6868 (0x1ad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 1 12:24:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=328C90B0795290F79F1A586D9544E6E79101129D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:78:c5:d0:d5:ec:68:92:ab:a8:ab:94:52:
ff:db:0e:fd:2a:5c:8e:d1:30:6d:ed:a3:ef:5d:2d:
ca:79:8e:67:43:e7:28:cc:ed:44:a7:f1:07:58:1a:
2b:66:21:48:4e:2d:a8:b2:30:ad:74:9d:8d:21:c1:
cc:f8:67:80:4f:5b:6e:ed:39:b9:bb:9e:fa:74:1d:
50:03:24:69:79:25:87:29:2b:df:10:38:96:6b:09:
c6:d0:b2:40:55:5d:43:90:16:09:4f:c7:84:e2:2b:
72:1f:cc:b5:91:c3:06:4f:ca:dd:6a:6f:4d:a3:bb:
58:5d:01:70:b0:b6:48:e0:78:62:e6:c3:9e:bc:46:
06:97:78:fa:da:d3:60:30:c1:ea:a0:a5:d7:1f:0b:
93:81:64:f2:ee:ec:bd:74:77:e3:15:35:1a:79:71:
d2:28:9a:2b:8b:97:dc:e4:93:13:7f:b4:cd:65:0c:
9b:a0:93:65:c3:a4:f6:a0:ee:00:64:3b:4d:be:64:
e2:3d:a4:72:33:20:ea:c3:ac:63:7b:14:cb:da:e8:
67:87:48:c9:b8:a3:15:6c:7a:9e:c8:69:0b:eb:72:
05:4c:88:4a:4f:87:ba:02:a4:94:5f:79:89:56:95:
42:17:b2:d3:11:ad:5f:2c:72:8f:88:13:e9:42:69:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8C:90:B0:79:52:90:F7:9F:1A:58:6D:95:44:E6:E7:91:01:12:9D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/MoyQsHlSkPefGlhtlUTm55EBEp0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:f4:ab:44:71:51:35:12:6c:64:9b:f3:9f:f1:43:a0:00:4d:
aa:d1:2f:53:9c:76:b1:6b:96:ad:53:73:92:52:a2:94:70:6e:
48:96:a2:9f:5a:be:b3:1f:24:5e:27:a4:ce:96:92:40:fc:b5:
fc:cc:e9:f6:b5:99:f0:4a:13:64:53:ad:4f:a3:30:0b:e0:b6:
18:24:9c:3b:78:0e:00:3e:93:67:d2:ce:aa:87:9a:7b:59:03:
60:56:00:71:d5:0c:fd:19:76:79:da:50:6f:4a:02:ac:4e:0f:
a6:62:c9:40:5e:0d:2e:de:d9:ca:41:f2:c5:08:50:bd:29:38:
d9:74:75:b0:f2:41:79:f2:62:46:ff:18:66:c9:2b:c6:f8:3b:
42:d2:0a:6a:c4:c0:a2:89:c1:0c:1e:39:2d:92:84:4e:01:b6:
9d:8a:4e:3f:78:72:17:ac:57:e2:74:7e:25:39:04:54:cc:22:
a3:1c:35:2a:19:8c:0a:e8:6f:04:10:0f:c3:fd:9e:b4:dc:fe:
94:49:16:f9:56:16:51:1c:b8:3e:48:37:07:e0:f3:10:0e:ed:
ba:82:91:d5:a3:59:5b:51:8e:16:8d:87:b3:10:4f:bc:d2:ae:
4d:05:4e:04:46:6e:75:c0:39:8b:12:74:3c:92:e8:58:4f:65:
23:c9:7e:ce
-----BEGIN CERTIFICATE-----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Generated at Wed May 1 16:08:49 2024 by rpki-client on console.sobornost.net