Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/HUX8TsJgdQlq7vxpMHiaYupTyPE.roa
File: HUX8TsJgdQlq7vxpMHiaYupTyPE.roa (raw, json)
Hash identifier: SV2ojUE/zfS5btdE3sIHv2QQiblmin5BcYiXxNovIRk=
Subject key identifier: 1D:45:FC:4E:C2:60:75:09:6A:EE:FC:69:30:78:9A:62:EA:53:C8:F1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A4A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HUX8TsJgdQlq7vxpMHiaYupTyPE.roa
Signing time: Tue 30 Apr 2024 01:53:55 +0000
ROA not before: Tue 30 Apr 2024 01:53:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6730 (0x1a4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 30 01:53:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1D45FC4EC26075096AEEFC6930789A62EA53C8F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f4:75:45:96:e0:0a:5e:3b:0c:27:5d:d3:a9:
7f:b9:7d:21:e8:4c:f2:72:2e:a3:f6:28:79:ac:40:
41:d3:9c:d1:e0:ef:7e:b6:50:6f:82:0d:bc:40:75:
c1:a7:66:00:2d:28:80:e6:f0:f0:72:3f:19:ee:32:
6a:86:32:74:7a:01:f8:4f:d9:7c:b7:b1:d5:d7:d4:
d4:fb:b6:fe:26:42:55:9e:02:ff:75:d3:1f:9c:24:
3f:4f:da:e5:1e:74:0e:3a:4e:a2:dd:b2:8a:4f:74:
17:3e:0e:35:f3:b4:e7:cd:dd:eb:d0:50:dd:0b:43:
e6:7e:34:a3:c7:0a:de:b7:92:9a:ca:f2:dc:8e:b2:
2c:08:76:d5:91:a2:cf:49:76:99:07:44:34:95:de:
58:98:9b:25:e3:c9:34:db:e2:88:50:d8:ce:09:1a:
30:02:d4:46:f7:ab:a4:07:95:c0:2e:76:64:f9:6c:
cd:41:ef:b3:17:c4:a1:57:38:8c:18:e8:33:ad:4d:
27:e4:a0:42:01:95:8a:08:4c:c1:a2:20:ff:02:e4:
0c:38:bb:63:53:c3:2e:9e:f2:40:9c:ca:12:b4:08:
c1:88:a0:0e:8e:9d:54:46:b2:7c:f2:61:c0:1e:91:
ed:f3:04:e0:05:bb:e5:9d:12:25:b4:4b:ec:ff:87:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:FC:4E:C2:60:75:09:6A:EE:FC:69:30:78:9A:62:EA:53:C8:F1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HUX8TsJgdQlq7vxpMHiaYupTyPE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:84:3c:aa:37:86:8a:3e:41:61:13:cb:e0:f5:21:0c:d1:e4:
d3:24:1b:65:9b:63:b2:ea:6e:68:87:ac:b2:c2:98:4d:9d:e7:
2c:ff:89:0b:70:3a:02:1a:f4:da:3e:61:51:0d:b1:e8:a1:a3:
4b:02:57:7f:46:12:ba:0e:63:95:93:de:30:03:6d:c9:08:09:
dc:0c:13:45:cf:14:ee:0c:5c:f1:81:2d:8c:b7:ce:b5:3d:ad:
dd:be:0c:aa:ca:bc:9e:26:af:62:45:9c:c7:56:48:e9:d0:d5:
fa:5b:94:08:58:f8:01:92:66:48:81:a6:3e:ef:75:3c:48:0c:
0c:93:6e:f2:c8:47:24:8d:c0:90:1d:be:4b:47:f6:05:ad:4d:
63:98:a2:d2:74:07:e7:d8:7b:90:6b:67:f1:4c:09:51:8d:ab:
51:89:ae:6e:f0:61:5c:c8:37:71:a9:b7:57:31:9f:05:66:e7:
e4:d0:94:a6:2b:57:90:36:18:17:53:8c:9c:5e:6e:79:38:f0:
57:58:08:36:88:7b:ef:58:69:3d:5a:9d:88:5e:31:a5:39:75:
50:e9:66:af:02:a4:db:4d:4f:42:cc:48:1b:59:35:8c:15:c9:
ac:97:99:8d:04:54:8d:8a:e6:92:57:95:e0:53:3d:7d:bd:6f:
ec:9c:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 14:15:40 2024 by rpki-client on console.sobornost.net