Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ItyI0rZp1msiO0Yt33fU-RTUS_U.roa
File: ItyI0rZp1msiO0Yt33fU-RTUS_U.roa (raw, json)
Hash identifier: pxOLPP/SuU9z9FSp4lv7LQtbH3S5J8Dhon8CA0EY51Y=
Subject key identifier: 22:DC:88:D2:B6:69:D6:6B:22:3B:46:2D:DF:77:D4:F9:14:D4:4B:F5
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16B4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ItyI0rZp1msiO0Yt33fU-RTUS_U.roa
Signing time: Sat 20 Apr 2024 12:23:33 +0000
ROA not before: Sat 20 Apr 2024 12:23:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5812 (0x16b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 12:23:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=22DC88D2B669D66B223B462DDF77D4F914D44BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:71:9a:c8:fe:c6:00:a3:85:b3:28:c4:8f:
74:32:52:85:a6:00:4e:71:ba:f3:0c:85:2d:c1:e5:
0f:ed:5b:09:2c:b7:e8:32:2e:f7:40:a9:8a:b2:79:
e6:d7:05:89:b0:42:0b:d6:25:17:44:26:30:c0:77:
8a:4c:ae:72:f2:a9:52:3a:f0:af:94:18:1e:bc:ed:
31:7f:3e:60:b0:c5:c5:dd:45:46:fb:32:87:9f:88:
96:86:54:eb:20:bd:da:6e:ca:86:61:b8:46:d0:f1:
3e:b6:61:f7:6d:95:e5:07:38:9d:a8:c8:5b:33:a8:
29:f8:a0:56:f2:7f:85:ff:d4:d0:45:4a:da:49:17:
10:85:0f:dd:34:59:68:ac:05:04:04:0e:75:e3:8e:
97:b7:85:c7:63:db:63:4a:6b:1b:37:ce:dd:56:b8:
0b:18:5e:ac:18:f0:46:d0:0b:45:bf:d1:d2:78:bf:
7c:ae:64:ad:58:1c:f3:6d:1c:48:e5:1d:62:53:eb:
25:c2:a6:1d:e6:b4:a4:d4:28:0e:f9:56:3b:50:eb:
63:d2:ea:da:70:31:4e:87:bc:8c:0d:98:ea:d2:39:
68:a3:11:12:4c:8c:ba:2e:08:8a:bc:46:01:ca:03:
a6:99:1b:44:e7:c0:4c:49:f6:7f:51:1e:c1:67:c6:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:88:D2:B6:69:D6:6B:22:3B:46:2D:DF:77:D4:F9:14:D4:4B:F5
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ItyI0rZp1msiO0Yt33fU-RTUS_U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:72:cb:84:d3:63:41:76:64:a7:c6:e4:ca:cd:91:d1:c0:ab:
7e:f5:25:c6:13:14:8a:b7:6d:b1:09:34:26:6b:df:d6:72:31:
f6:63:8d:ca:2c:be:88:80:2d:da:c4:62:63:e0:0f:75:4e:88:
4b:8f:81:e6:e1:41:e9:77:16:38:ce:90:d0:0e:86:84:c6:33:
0c:5f:23:78:30:fe:1a:ac:76:fc:54:48:53:6d:c7:07:ea:9b:
05:2a:80:28:66:2c:eb:37:b6:2c:6a:30:77:0c:dd:6d:5f:e9:
22:50:d3:cf:59:3a:f5:b0:39:5c:a3:3d:b0:2d:0e:f1:bc:71:
51:dd:e5:62:c7:97:e7:bd:2b:59:8a:b0:9e:de:73:52:92:1b:
ae:ed:89:b7:d5:96:e2:cc:fa:53:c0:10:6d:5a:82:6f:11:98:
12:b2:97:8f:72:1d:17:3e:a9:b4:08:b6:84:75:fc:35:5a:18:
9c:36:91:aa:3d:c0:23:a0:f8:53:57:fc:72:88:04:44:0c:dd:
b6:b7:32:f2:00:df:92:de:63:85:14:1e:5d:86:06:af:e3:91:
0c:59:c5:01:fb:1c:cc:25:e1:c8:56:4e:f3:59:72:c0:1e:fb:
0f:54:8c:96:be:80:fc:e8:ed:d1:9d:9e:f3:81:6c:08:90:0a:
76:03:e5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 17:31:01 2024 by rpki-client on console.sobornost.net