Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/pZ_LZub7R3Zt7TGcFS5subdzM-Y.roa
File: pZ_LZub7R3Zt7TGcFS5subdzM-Y.roa (raw, json)
Hash identifier: 9jEQgvT64m7YXPXkjKpw2KbA4AuzqJKP/EbQ/Q2BD2g=
Subject key identifier: A5:9F:CB:66:E6:FB:47:76:6D:ED:31:9C:15:2E:6C:B9:B7:73:33:E6
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1238
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/pZ_LZub7R3Zt7TGcFS5subdzM-Y.roa
Signing time: Mon 08 Apr 2024 13:22:57 +0000
ROA not before: Mon 08 Apr 2024 13:22:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4664 (0x1238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 8 13:22:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A59FCB66E6FB47766DED319C152E6CB9B77333E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:ba:91:fe:3b:71:85:27:9a:78:53:37:cc:
b5:c2:f6:f4:de:b3:12:de:ab:35:e7:4f:4a:b9:7a:
7f:ed:4f:6d:02:a2:13:36:61:96:7d:92:0c:9f:7b:
58:78:c2:f4:e2:55:01:f0:c1:33:0f:c3:b5:4e:45:
f6:54:9f:14:24:aa:3a:02:f1:7c:60:99:e3:96:15:
f1:b8:4e:93:c3:e7:fc:5e:33:20:3e:31:b2:14:b0:
c8:ac:cf:fe:e6:06:60:37:19:d3:2d:d7:fe:12:a1:
df:db:f4:d8:a9:b8:50:a2:3e:f1:6e:d2:cb:57:e5:
97:3f:af:e4:52:28:5e:fe:b9:0e:fc:33:68:92:8d:
a9:85:78:e6:ca:0e:8d:89:28:a1:53:04:26:a5:d4:
4f:0f:b2:a6:cf:66:79:e5:09:d5:96:65:f8:20:75:
56:30:50:49:2d:a2:55:4d:79:38:f5:b4:98:a5:13:
cf:73:26:64:2d:ce:71:e4:84:17:0c:91:15:ef:a9:
73:b7:07:4f:56:9e:09:c3:a2:4f:1f:13:2b:61:4f:
e1:4e:8d:f6:b8:bb:98:57:07:8b:9b:ee:62:94:88:
9c:5c:19:99:3d:2d:c5:a9:2e:ad:70:08:cd:c8:37:
e0:9b:42:57:7d:89:31:03:54:2f:cd:ae:6a:a9:a8:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9F:CB:66:E6:FB:47:76:6D:ED:31:9C:15:2E:6C:B9:B7:73:33:E6
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/pZ_LZub7R3Zt7TGcFS5subdzM-Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:98:67:be:77:95:4d:29:1d:dd:b8:db:16:e1:0a:93:fb:50:
ce:36:9f:f1:04:15:01:eb:06:a4:10:26:a0:5c:a4:67:89:95:
e3:59:c1:ec:58:5f:4f:74:c8:25:b4:59:4a:5d:fc:d3:99:94:
ef:a1:58:fd:2d:1e:07:63:f7:0e:f9:c9:8c:32:c4:4e:ad:b0:
63:fe:4c:98:59:01:e0:ae:aa:69:7d:48:66:24:bb:50:fd:bf:
3c:03:4b:a3:9f:9f:f8:f3:92:d5:3f:50:47:f1:82:4d:37:5b:
23:2d:2d:0f:8a:ac:92:93:9c:38:7e:31:10:e7:1f:f0:44:d4:
6e:61:77:27:6b:b0:76:dd:ef:e6:24:e8:80:4a:85:97:3e:77:
c3:f3:16:b7:e9:7d:72:12:e2:e8:a9:16:62:f1:84:7f:56:11:
f2:07:19:48:fb:83:a2:6f:4e:71:81:f8:9f:3b:66:34:b9:fa:
4e:ac:ac:ee:f4:8c:7d:58:25:48:69:27:44:a8:d0:d2:44:7b:
77:90:fb:b4:1a:96:d1:26:13:21:93:ad:e8:9b:69:6c:45:d3:
a9:ff:1a:e2:34:fe:0d:7f:78:75:87:0e:d1:04:5d:d8:aa:f0:
32:16:3a:be:85:b0:d0:a6:25:a3:b9:32:30:d9:76:fb:ad:84:
1d:0d:6e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 20:06:37 2024 by rpki-client on console.sobornost.net