Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/oHKe8aWFJeZmEzjgGL_JRymtb6M.roa
File: oHKe8aWFJeZmEzjgGL_JRymtb6M.roa (raw, json)
Hash identifier: p86xD3dOJYMJ7xPY3dzzxzjIh2gk1D96OZYgOfachIo=
Subject key identifier: A0:72:9E:F1:A5:85:25:E6:66:13:38:E0:18:BF:C9:47:29:AD:6F:A3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1950
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/oHKe8aWFJeZmEzjgGL_JRymtb6M.roa
Signing time: Sat 27 Apr 2024 11:23:49 +0000
ROA not before: Sat 27 Apr 2024 11:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6480 (0x1950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 27 11:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A0729EF1A58525E6661338E018BFC94729AD6FA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:66:96:16:a2:c2:4d:f8:25:e7:4e:65:5c:
65:06:3e:71:30:8b:0d:8c:53:cc:64:8e:9f:65:67:
0c:04:6a:b4:a5:c8:e9:15:63:c2:e9:11:41:77:7a:
2e:7d:11:90:ff:a3:d8:c2:43:6e:cf:84:5a:bb:7c:
5d:d5:c3:dc:f3:3d:5e:28:44:d0:83:fa:ce:f3:18:
4d:0c:e8:7c:3f:e3:b9:52:b2:19:27:3f:c4:77:16:
60:7c:8d:3f:3a:a4:c7:fb:bc:91:c5:71:7f:7c:ba:
31:5a:df:88:8d:7c:b5:46:1f:f2:ba:7b:54:47:c0:
1c:db:2e:d5:eb:3c:b4:58:04:9f:df:fb:88:2d:7f:
1f:95:f6:49:83:a2:92:ea:4d:1f:d6:16:00:66:39:
59:0f:4e:fb:66:cd:58:f8:56:41:5a:ba:70:92:e0:
45:47:09:42:34:bc:99:83:77:ae:06:bb:ae:d7:45:
2c:cc:4c:f5:5d:71:03:da:c5:a9:9f:db:27:80:ef:
a8:27:5f:ff:e6:f4:99:4b:67:7d:92:61:7b:ba:d0:
a3:9a:e4:d8:1a:78:1b:ce:51:10:d9:96:0c:8b:60:
06:41:c9:f8:ac:56:54:a4:c5:50:13:61:ce:4a:c8:
13:67:4d:18:24:c4:4a:8f:71:e7:2b:36:27:6b:3e:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:72:9E:F1:A5:85:25:E6:66:13:38:E0:18:BF:C9:47:29:AD:6F:A3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/oHKe8aWFJeZmEzjgGL_JRymtb6M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:c4:30:a4:18:dd:18:c1:ad:b2:12:39:13:13:75:64:69:4f:
17:2b:bf:cb:a7:1f:7e:fd:4f:2d:cc:e8:98:25:a8:f6:10:eb:
ee:2c:08:0d:b5:13:fb:0c:70:4d:1f:27:08:68:95:38:04:6f:
20:23:ae:54:49:6f:b3:da:68:c5:db:5b:d2:96:c1:62:b5:6c:
9f:7c:dc:3b:ea:8f:28:da:d9:7e:9f:2e:49:c4:34:c5:16:4f:
96:95:11:71:80:43:ff:69:b3:b0:9f:da:86:88:ff:2b:1a:28:
c8:27:86:b4:56:a0:c9:a0:df:c0:dd:bc:ed:43:81:e2:42:5d:
38:f6:96:74:f8:f9:27:8e:05:79:6c:04:e8:15:d0:f8:91:8f:
a3:e0:28:a1:56:b1:79:f1:d1:98:0e:f9:ca:56:6b:8f:e6:c2:
a2:1d:19:7f:8f:ff:9b:79:f2:4d:ad:23:dd:65:df:b2:e9:6b:
99:41:2a:f2:47:83:ae:a5:a1:f5:1f:86:6b:e2:aa:ac:17:fa:
67:63:39:8e:91:52:31:dc:27:7f:0a:11:4c:b6:8f:15:e1:bb:
10:f1:a0:a5:5e:60:84:57:c1:e4:55:75:ef:38:b7:8b:5a:8b:
6d:37:40:48:88:2e:3e:af:b9:12:8a:0f:6b:5b:5d:55:9f:2e:
16:10:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 16:48:26 2024 by rpki-client on console.sobornost.net