Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Mp8sqlxbTtvC-YsHEqS_NBjtEZM.roa
File: Mp8sqlxbTtvC-YsHEqS_NBjtEZM.roa (raw, json)
Hash identifier: +KIcCsfrDcuQSXBA5tjz0VK448L+WfeSmRPX96u33pg=
Subject key identifier: 32:9F:2C:AA:5C:5B:4E:DB:C2:F9:8B:07:12:A4:BF:34:18:ED:11:93
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15EC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Mp8sqlxbTtvC-YsHEqS_NBjtEZM.roa
Signing time: Thu 18 Apr 2024 10:23:27 +0000
ROA not before: Thu 18 Apr 2024 10:23:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5612 (0x15ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 10:23:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=329F2CAA5C5B4EDBC2F98B0712A4BF3418ED1193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:0e:92:40:a1:29:f4:b8:fb:57:a4:2c:95:
88:80:4f:dd:54:3c:7d:a0:a7:c8:03:93:98:b2:0f:
a3:52:d8:a6:ca:f9:4a:ca:f3:66:72:0f:77:1e:89:
4f:86:64:3d:d2:c9:c7:45:fa:ec:dc:a5:bf:db:d3:
d7:f2:7a:65:bb:b7:77:1d:81:94:7b:68:c5:8e:b2:
16:fd:a6:59:c7:97:35:32:8f:5e:4c:26:3c:36:99:
98:5d:6a:ab:f4:a2:e0:7c:a6:e9:41:de:1c:21:12:
f3:76:0d:57:02:a2:54:5b:60:f7:86:c3:a9:e1:6c:
c0:e0:1f:4b:c8:7a:5a:4a:d4:48:df:85:56:56:c1:
4c:33:d7:59:d3:ac:44:69:fd:4c:7b:7c:aa:ac:4f:
e2:56:e0:86:aa:47:b8:f4:39:c7:42:5e:35:3f:41:
8c:5e:98:79:eb:e7:7e:3b:d2:43:fc:39:3a:6e:f2:
11:f1:83:fe:bc:2b:7e:25:e0:c2:80:b2:53:0e:57:
ea:57:30:fe:e0:3e:01:61:c7:3f:9e:50:46:cd:4f:
38:38:9c:cb:53:ed:52:ba:c7:f6:c6:11:4d:c3:c9:
c4:38:3b:76:63:e6:20:c9:0b:6b:43:67:b3:7b:ef:
24:57:16:bc:67:28:49:c5:1d:7b:5b:49:6f:b6:37:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9F:2C:AA:5C:5B:4E:DB:C2:F9:8B:07:12:A4:BF:34:18:ED:11:93
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Mp8sqlxbTtvC-YsHEqS_NBjtEZM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:10:ae:4e:ef:b1:2c:35:0e:55:32:1c:a7:47:c4:7e:9d:26:
7d:7d:57:d4:ea:14:99:7d:f1:e8:a6:38:5a:6e:c2:3b:85:80:
37:87:a4:5c:7a:6d:73:4c:b6:5f:c6:bf:fa:da:3d:6b:39:50:
85:3d:8b:73:ac:09:ec:1c:dd:61:43:6c:f0:bf:da:68:8e:5e:
6b:ac:3f:58:a9:12:df:55:9b:b2:94:1d:fe:7e:1a:f2:0a:ce:
ab:07:fa:18:12:71:a7:f6:d0:88:d4:22:69:f3:8b:64:e4:d0:
b1:47:52:c4:77:4a:e9:3b:01:e1:2f:09:b8:19:2b:9a:eb:9d:
95:ad:aa:02:ae:3e:b2:63:c5:da:4c:71:fa:2e:7e:51:5e:68:
d5:a7:9c:10:aa:b7:e9:05:b0:eb:1e:ca:1b:a2:47:d2:de:23:
11:39:82:2d:41:3a:78:2a:a9:03:86:27:85:3e:3d:0c:e5:75:
cb:5f:c1:05:fd:45:a0:01:b9:4a:d0:2e:d5:7c:c1:d8:28:7c:
38:3c:5b:0e:7d:1a:ab:05:e9:a1:5f:bf:29:de:98:ea:13:e6:
50:19:aa:36:4b:d0:cc:25:ff:9f:1c:83:65:f3:21:3f:47:34:
08:ad:53:60:d8:70:00:8a:dd:c9:9e:a4:13:4d:22:fc:8e:6f:
fe:69:ca:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 18:13:36 2024 by rpki-client on console.sobornost.net