Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/WifbV16gpUy4Pd0VQdiL2yc6qZc.roa
File: WifbV16gpUy4Pd0VQdiL2yc6qZc.roa (raw, json)
Hash identifier: 1qTnsN3peks16LTbFxabStF9hIQ5+gNoS7aXITuqGCw=
Subject key identifier: 5A:27:DB:57:5E:A0:A5:4C:B8:3D:DD:15:41:D8:8B:DB:27:3A:A9:97
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 141A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WifbV16gpUy4Pd0VQdiL2yc6qZc.roa
Signing time: Sat 13 Apr 2024 13:53:18 +0000
ROA not before: Sat 13 Apr 2024 13:53:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5146 (0x141a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 13:53:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5A27DB575EA0A54CB83DDD1541D88BDB273AA997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:c6:84:29:1f:14:80:b3:29:47:e4:d9:24:
62:df:ef:55:0a:39:4e:48:9f:46:07:88:dd:85:9c:
1c:ef:a0:f2:1b:36:f7:cc:26:65:01:4c:ce:f7:aa:
83:a1:38:e6:e2:ce:78:12:6f:44:73:96:e9:14:d3:
a0:8b:e7:6a:28:6b:1a:4c:dc:33:43:27:43:55:fe:
65:83:7b:00:7c:43:1e:79:8a:5b:f8:86:25:7e:4c:
2b:3c:a3:1c:a9:b1:5e:40:e7:d4:f5:4a:5a:d1:d6:
60:1c:51:4a:6c:e8:0b:b0:8a:9f:7f:c5:bc:89:ca:
c6:56:e1:7f:7a:20:77:42:fe:7b:cf:7d:ff:a5:50:
66:da:e3:c2:af:f8:d8:f6:1f:18:30:93:7d:5c:d0:
7a:cf:7c:3b:11:e9:d8:f4:8b:be:6c:d7:ef:1c:b9:
16:1d:75:aa:1e:e4:e1:64:b6:df:f6:d9:e8:3d:9b:
2f:e0:26:cb:c1:c7:57:29:49:ef:4f:22:01:2f:d2:
3c:d3:24:fc:72:bf:0e:54:66:00:2f:b2:d7:00:13:
13:77:19:1d:44:0f:e7:c8:dc:8a:18:2c:52:42:ad:
4f:0c:a0:35:fd:3c:5f:ae:28:b4:59:57:09:5d:64:
00:60:5f:19:a1:32:7b:39:1c:8f:a1:d1:06:36:c5:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:27:DB:57:5E:A0:A5:4C:B8:3D:DD:15:41:D8:8B:DB:27:3A:A9:97
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WifbV16gpUy4Pd0VQdiL2yc6qZc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:cc:1b:31:b7:5a:eb:4c:43:b6:22:aa:06:d3:56:40:c5:9d:
93:ad:b5:7e:18:8f:0a:de:ec:32:30:46:78:d5:81:9b:db:bd:
dd:90:e7:ec:1b:54:82:84:6b:0a:95:46:fd:a7:0c:98:ea:9a:
6b:84:83:ee:23:05:99:db:ee:4a:64:35:ec:25:59:0a:df:a2:
b3:57:02:7a:c3:be:46:1c:49:d2:7c:72:b1:ea:a6:69:e2:84:
33:40:74:15:f3:47:76:64:c5:29:b4:29:c1:8f:75:fe:07:22:
c7:ab:70:44:c5:c6:9d:4b:5e:27:3e:50:12:11:f0:14:80:12:
f3:91:8f:ce:e2:90:64:49:c3:c8:3c:57:45:78:4d:30:7a:6e:
7b:88:76:4b:c1:e0:aa:ca:d7:60:ed:8d:38:c8:aa:c1:a3:8e:
a0:d5:50:53:62:77:89:ec:99:0e:36:3d:ca:60:56:19:e2:91:
dc:a0:fc:c3:a4:37:dd:a8:52:77:41:7a:e8:08:8a:f3:7d:8d:
69:d2:f8:fc:b7:f6:e2:66:de:c6:14:fc:11:c8:e7:34:1a:1f:
0b:38:48:08:5b:78:09:b6:1f:97:11:db:c1:ce:c4:0e:e6:2f:
b9:4a:f8:c7:c6:8a:a7:08:89:19:1f:78:15:58:cb:cd:4a:6a:
e0:a8:07:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 19:10:14 2024 by rpki-client on console.sobornost.net