Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/S5jfwRj1gETxPaGQtbaNqD2fnBc.roa
File: S5jfwRj1gETxPaGQtbaNqD2fnBc.roa (raw, json)
Hash identifier: Fwu0YiajIuXgQPEBgl8Fu1jZLI10XvjML9CeHwFcBz0=
Subject key identifier: 4B:98:DF:C1:18:F5:80:44:F1:3D:A1:90:B5:B6:8D:A8:3D:9F:9C:17
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E00
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/S5jfwRj1gETxPaGQtbaNqD2fnBc.roa
Signing time: Thu 28 Mar 2024 07:22:28 +0000
ROA not before: Thu 28 Mar 2024 07:22:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3584 (0xe00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 28 07:22:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4B98DFC118F58044F13DA190B5B68DA83D9F9C17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:49:44:d5:b2:0f:f9:bb:e5:29:f4:b5:d2:46:
93:e7:eb:e2:a9:34:3d:68:a4:ca:09:1a:fd:cb:b2:
82:d4:d4:5b:ce:3d:17:1f:01:be:90:8b:e8:c1:aa:
39:a0:06:42:39:c6:7b:e9:67:4c:c1:80:08:f2:38:
05:39:7a:75:bd:c0:d2:40:05:73:07:f0:42:bb:b6:
c9:71:f9:02:5a:88:3b:86:bb:19:6d:a7:b5:8a:7b:
e3:c7:d6:c1:ed:a5:7d:f6:a4:74:7d:ff:c5:27:7a:
04:ac:58:45:6c:31:e2:02:dd:b6:3c:0a:5d:aa:41:
97:b3:b4:84:5f:9c:77:bb:29:e8:52:cb:38:88:1d:
cc:a7:de:22:96:0b:25:d0:70:61:d3:0a:78:72:03:
c8:cd:c3:57:fe:62:15:bc:5c:ed:3d:af:a9:b6:5c:
ed:4d:5d:90:e6:04:40:f7:76:33:77:6c:0c:3f:62:
ad:d4:b1:18:e6:03:18:0c:88:16:40:2b:91:92:d6:
7e:a4:dc:7b:a0:7e:6f:1c:26:32:0f:66:bd:25:c0:
b0:b1:21:b6:25:e0:c4:36:08:10:03:37:1a:9e:f7:
b2:59:b9:ba:b4:f8:e2:49:c5:e7:cf:bd:0c:30:7f:
81:15:ed:55:00:bf:5a:27:60:66:32:68:78:98:66:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:98:DF:C1:18:F5:80:44:F1:3D:A1:90:B5:B6:8D:A8:3D:9F:9C:17
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/S5jfwRj1gETxPaGQtbaNqD2fnBc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:45:43:c5:3e:94:5e:60:d2:95:b7:97:a4:7c:eb:f6:03:4b:
01:81:5f:77:02:93:21:fb:03:7f:09:20:63:c6:75:78:95:54:
7b:2b:e4:03:13:73:db:fe:f1:63:ef:4e:05:c9:d1:c0:58:74:
d4:a5:81:5f:fe:25:96:52:0f:f5:81:cc:27:d8:15:bf:fe:8e:
ca:93:a0:7f:0b:bb:6d:a0:ce:7a:ec:98:fd:87:73:28:b2:7d:
12:f9:22:c6:39:9f:ca:89:4b:e4:8d:ac:87:6b:65:ce:d6:3a:
05:3e:60:d6:f8:c7:b2:5a:8f:68:e9:92:8e:90:7a:e8:e6:f1:
fb:fd:ee:98:66:7b:02:b7:35:f0:1e:6f:46:6e:d2:37:57:66:
f3:ae:18:95:6f:e8:62:9e:ba:d8:02:e8:eb:df:b6:41:3b:b9:
bd:19:a4:a4:18:03:c3:7b:88:0e:ae:57:9d:15:af:1d:8c:c4:
42:ed:3f:20:96:b1:09:b5:62:ec:c1:3b:d7:3d:1b:9d:19:cc:
1a:36:00:84:db:7e:b0:ab:48:87:cd:9c:46:5d:52:20:93:89:
45:a6:10:f1:63:8e:1d:f1:a7:eb:e9:4d:f6:de:e8:cb:53:24:
8d:c1:9f:79:d0:31:22:2e:1b:71:0d:ad:e7:20:b8:19:2e:74:
5f:84:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:11:46 2024 by rpki-client on console.sobornost.net