Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/LJxO8tUJSXxjRYCsLkwmwL4Z9fE.roa
File: LJxO8tUJSXxjRYCsLkwmwL4Z9fE.roa (raw, json)
Hash identifier: A3/Eqpu+yzwnEUVJW1CrJVy+fk24UCBVUMzZVvtTMOI=
Subject key identifier: 2C:9C:4E:F2:D5:09:49:7C:63:45:80:AC:2E:4C:26:C0:BE:19:F5:F1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 182E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LJxO8tUJSXxjRYCsLkwmwL4Z9fE.roa
Signing time: Wed 24 Apr 2024 10:53:40 +0000
ROA not before: Wed 24 Apr 2024 10:53:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6190 (0x182e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 24 10:53:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2C9C4EF2D509497C634580AC2E4C26C0BE19F5F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:fc:68:79:57:12:88:3c:a0:d0:b2:af:9f:
96:b2:ff:7c:8e:fc:e9:a7:e0:4f:7c:6b:04:f3:a7:
43:bd:db:14:e2:95:d4:cc:e1:86:43:7c:0a:a7:8b:
1b:b1:70:3c:b3:47:c9:e8:63:b2:9e:3b:ae:a7:f5:
14:bb:97:ea:7a:54:c0:6c:f3:83:d3:75:a4:9c:35:
79:36:d0:41:23:8f:21:4c:92:6e:18:3d:03:03:0d:
7e:be:f6:15:88:e6:3b:ff:8a:75:18:b8:36:51:8a:
1d:90:9f:83:ed:df:fc:f6:b4:8f:6c:9d:91:08:32:
a1:63:d0:57:aa:cc:7f:7d:bb:83:b1:c6:92:3a:42:
1f:92:b0:e3:08:46:a6:86:b1:57:a8:06:be:da:16:
0d:e2:45:6b:cb:f9:c9:e2:c3:d7:a6:fa:97:dd:20:
38:38:63:89:74:04:91:86:d5:fa:da:80:f4:bf:43:
60:fe:2b:e1:7c:7f:2b:51:ed:38:e1:6e:21:fc:f2:
10:b5:af:45:af:5e:9f:cb:25:68:fe:43:e3:30:66:
96:cf:93:c1:cc:9f:c6:8e:dd:96:3b:96:a9:5d:db:
2c:c6:9d:45:b2:99:b6:88:e6:ee:96:a5:e6:2c:34:
23:77:ea:de:81:f3:af:e3:83:8c:17:a0:ff:54:f3:
99:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:4E:F2:D5:09:49:7C:63:45:80:AC:2E:4C:26:C0:BE:19:F5:F1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/LJxO8tUJSXxjRYCsLkwmwL4Z9fE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d0:0c:41:7a:b2:9b:4d:92:bb:42:0e:3a:62:ff:2c:cc:88:37:
a4:19:75:9f:14:c7:d6:f5:29:fe:ea:6e:92:dc:20:77:fc:16:
45:4f:dc:31:f5:b8:c5:40:b1:a6:68:83:90:71:eb:bf:bc:ee:
cd:96:59:23:30:bf:cf:b1:d4:8f:57:09:b4:8a:ac:2b:94:68:
71:1b:6d:b9:6a:e0:4a:7d:24:25:07:23:17:d7:b8:9f:d0:61:
3e:ae:98:1a:74:f7:57:e3:b5:ae:e5:d7:f8:e9:fd:30:27:e2:
43:7c:77:3e:3b:8c:0d:9a:da:8d:cb:45:b2:80:a6:45:75:ad:
16:e2:ad:ff:6c:63:1e:8f:9a:20:0a:11:1a:2a:24:29:aa:ec:
d1:07:57:da:d0:9e:b8:8c:7a:43:8e:1f:5d:7b:a1:8f:a9:ee:
6e:8c:4d:6d:23:96:4a:40:de:61:2d:63:aa:a4:66:b0:84:f0:
59:6e:11:2f:fc:75:8b:da:13:c9:59:44:5d:70:91:ba:4e:1e:
6e:6f:39:82:63:e7:0b:72:95:17:c2:45:04:3a:83:dd:3e:fe:
94:fc:52:91:98:f6:e1:2f:46:4a:94:4d:f4:2a:da:80:ae:4a:
87:33:6d:75:fa:db:a5:86:6f:ac:0b:d6:38:51:33:8d:e3:ff:
29:b7:40:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 17:55:40 2024 by rpki-client on console.sobornost.net