Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/HIzqmN7sd7JyNnOlHaCxP6brals.roa
File: HIzqmN7sd7JyNnOlHaCxP6brals.roa (raw, json)
Hash identifier: xFvW8MewWEiCrSRUmpNGblltdMBwYCMjLk+GaDepbIY=
Subject key identifier: 1C:8C:EA:98:DE:EC:77:B2:72:36:73:A5:1D:A0:B1:3F:A6:EB:6A:5B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E38
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HIzqmN7sd7JyNnOlHaCxP6brals.roa
Signing time: Thu 28 Mar 2024 21:22:30 +0000
ROA not before: Thu 28 Mar 2024 21:22:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3640 (0xe38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 28 21:22:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1C8CEA98DEEC77B2723673A51DA0B13FA6EB6A5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:9e:a3:b0:01:ee:fe:8c:1e:80:0e:4a:ac:
53:9a:fd:7d:59:c3:7c:35:05:a5:c7:de:c0:5b:a3:
2a:87:2f:e1:71:da:b6:3e:f2:5d:37:57:05:51:1c:
62:b7:e6:3f:56:0c:bc:8f:79:15:7f:6f:73:17:2c:
b2:dd:58:20:c8:a6:e2:43:41:be:48:91:9c:12:25:
01:33:b0:9e:42:d3:a9:eb:86:14:99:ae:39:3f:47:
a3:96:3b:a1:0b:6d:d1:2c:81:c2:06:87:bf:33:29:
4d:af:53:7e:6f:d6:9d:84:98:7c:28:28:8c:bf:cb:
27:47:6d:87:98:97:fa:60:e7:97:7a:41:0d:b7:f4:
f8:8c:17:d5:0a:80:c5:60:8c:69:ab:4d:95:ce:f8:
e9:37:0a:a8:5b:83:9c:a6:ed:c2:1b:95:8d:1d:e2:
e5:35:16:72:5f:c3:49:63:97:80:c0:2b:a6:2f:67:
60:2d:8c:f1:50:a3:dd:7e:43:80:89:18:e1:0c:47:
fc:08:3d:2f:2b:1c:c5:6e:21:da:fd:d2:d8:7b:c8:
4b:ab:20:4f:82:25:9a:a9:30:d3:5c:df:4d:6b:e8:
17:6c:7b:33:4f:4c:5e:9a:35:72:3d:8d:17:6d:32:
d6:a2:64:c5:d7:22:4a:6b:9c:0e:59:98:55:00:ec:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8C:EA:98:DE:EC:77:B2:72:36:73:A5:1D:A0:B1:3F:A6:EB:6A:5B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HIzqmN7sd7JyNnOlHaCxP6brals.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:62:88:a1:61:b0:fe:69:97:00:81:6a:99:55:a9:51:65:41:
f3:f7:3a:8b:b2:69:36:e1:83:da:ff:77:fc:ee:d4:80:84:03:
48:68:9a:0c:14:a4:b1:4d:66:0c:6c:e1:92:f9:e5:74:48:89:
d2:7a:0c:5a:81:5f:fb:2c:1b:72:c1:6c:bc:fb:94:2b:ae:94:
53:d4:00:d5:57:55:b7:18:23:fc:6f:d8:4e:2f:6c:01:86:9d:
11:a8:c1:4d:3a:7c:47:47:95:17:49:c3:bc:a1:37:05:f7:c2:
02:b4:fa:87:11:c7:a2:6f:d2:b9:7b:0f:05:d1:9a:fb:fb:7c:
0c:ca:54:c6:40:a1:1c:a3:7a:9d:fb:6e:c0:df:58:90:98:e8:
5c:f1:0e:a3:00:a9:eb:26:6f:5c:7c:c7:a0:b4:7d:ab:c9:16:
c7:1b:a4:05:eb:18:61:eb:97:57:e4:31:37:29:58:50:67:3b:
62:fe:21:de:27:16:d1:eb:d9:c9:8c:b9:30:49:4a:49:61:4d:
be:bf:b9:ea:cc:0d:b9:29:bd:f0:fa:1a:8f:7a:ba:c6:04:9c:
e6:ff:7d:7a:21:ad:33:2d:ad:04:2f:3a:92:c8:42:91:9c:a9:
e9:48:18:aa:86:9d:7a:06:96:60:65:91:d8:50:08:bf:27:33:
9f:17:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:42:23 2024 by rpki-client on console.sobornost.net