Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/24tUf7JcezuBv8RXEA5QKp3zA2w.roa
File: 24tUf7JcezuBv8RXEA5QKp3zA2w.roa (raw, json)
Hash identifier: waXINMGV1fOIz66C1ykM3bwqScPWJU8Xz5c+DayOulQ=
Subject key identifier: DB:8B:54:7F:B2:5C:7B:3B:81:BF:C4:57:10:0E:50:2A:9D:F3:03:6C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 171C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/24tUf7JcezuBv8RXEA5QKp3zA2w.roa
Signing time: Sun 21 Apr 2024 14:23:32 +0000
ROA not before: Sun 21 Apr 2024 14:23:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5916 (0x171c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 21 14:23:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DB8B547FB25C7B3B81BFC457100E502A9DF3036C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:db:84:f4:ff:88:12:99:c9:b6:83:d6:17:
59:5b:a0:b1:d4:0e:39:db:b8:c2:70:a2:7c:f1:9f:
de:6b:82:03:7e:a1:4f:44:0a:ed:35:97:6d:4b:38:
03:44:61:51:e3:a3:cf:5e:aa:d4:f0:6e:66:f2:2b:
9a:50:7c:f7:ab:5e:62:1b:21:7a:a9:7b:93:a6:66:
2b:f2:f0:b3:83:e5:57:7c:e2:f3:91:f9:ec:c8:97:
93:6a:57:ea:47:3b:a6:9b:82:9a:6c:42:db:b9:e3:
0f:26:09:e5:50:a3:f8:f3:77:8b:50:a9:f8:9c:c9:
d1:fc:55:8f:90:69:32:2e:14:72:4e:3f:17:47:cf:
b5:20:6d:7e:5f:36:66:2c:6b:12:2a:13:c1:e4:af:
ef:ab:fe:a8:ae:46:4f:4d:3d:39:cb:60:a1:dc:03:
fd:b4:a0:e1:08:2b:31:82:00:53:a2:ef:a5:15:6f:
d2:b6:46:c4:64:38:dc:df:dc:6e:29:f8:55:bb:6c:
9e:61:48:36:83:44:38:d5:c4:9a:7d:a7:c0:b8:2e:
4a:52:7d:ee:4f:77:07:80:4c:34:4b:f9:ed:9e:fb:
87:0e:c8:aa:7b:91:e4:5f:4c:be:1c:45:64:68:0f:
19:8c:ab:0d:f7:66:fb:e2:1b:85:40:80:cc:46:fb:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8B:54:7F:B2:5C:7B:3B:81:BF:C4:57:10:0E:50:2A:9D:F3:03:6C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/24tUf7JcezuBv8RXEA5QKp3zA2w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:d3:82:4c:fa:cc:2c:ba:bc:fa:fd:63:32:fc:56:db:24:89:
6e:57:37:ca:8f:51:5b:79:a1:13:e0:d8:75:b6:72:2f:04:e7:
fa:06:0b:5f:4b:cb:4a:07:52:69:59:c3:3a:8f:78:71:87:40:
50:ca:60:2b:a5:26:9d:32:3a:25:49:d1:20:40:10:99:90:66:
2b:ba:f2:75:e8:95:ff:48:0a:cb:c0:cc:72:f5:32:2b:07:6e:
3f:79:87:97:7f:62:21:69:fa:8a:16:74:62:67:62:20:14:78:
60:74:0a:4e:2b:3b:eb:82:5c:82:b8:96:99:b3:e9:c4:b8:e1:
ff:62:d3:6b:84:a3:2e:76:d9:77:b5:d4:f5:88:b7:d4:a9:7c:
ee:d7:51:cb:ae:fa:0b:05:75:05:6d:06:43:81:c1:2e:b7:c4:
3f:1e:b1:6e:a2:cb:79:f8:46:69:cc:6a:0a:3e:81:ff:f8:57:
b8:6d:10:20:ab:4a:40:22:5f:d3:c8:ed:05:d6:cb:27:25:25:
33:f1:5b:20:26:74:ca:64:e0:ba:5a:1f:a9:93:5a:c6:19:07:
53:ee:6f:91:d0:52:e2:97:6f:38:83:f4:1e:b1:f9:57:42:a7:
aa:22:19:54:cc:7a:99:0a:bd:6d:03:81:94:fc:40:ac:0f:85:
14:12:65:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 19:48:16 2024 by rpki-client on console.sobornost.net