Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/SKi-nMESf9R7M0N0bmoetxDaZfw.roa
File: SKi-nMESf9R7M0N0bmoetxDaZfw.roa (raw, json)
Hash identifier: pMx7LBnaHbz74vGSmzV6ncTkxWYquOZFQ5DQcTgGuhI=
Subject key identifier: 48:A8:BE:9C:C1:12:7F:D4:7B:33:43:74:6E:6A:1E:B7:10:DA:65:FC
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A40
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/SKi-nMESf9R7M0N0bmoetxDaZfw.roa
Signing time: Mon 29 Apr 2024 23:24:44 +0000
ROA not before: Mon 29 Apr 2024 23:24:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6720 (0x1a40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 29 23:24:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=48A8BE9CC1127FD47B3343746E6A1EB710DA65FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:0b:ef:31:8d:94:4b:2d:12:34:0d:ce:fb:
60:a6:12:68:4e:ff:e8:72:18:de:26:89:94:b8:9c:
49:42:6b:33:93:7f:14:6b:32:4f:bc:96:1d:8f:93:
c8:2e:59:10:dd:52:29:ee:b4:97:9b:b4:33:6a:d6:
72:fd:1a:f0:b1:6e:39:69:7d:b5:72:d8:71:77:bf:
6b:f8:f6:90:3f:99:e2:1a:43:65:b8:98:a0:2c:72:
f3:6d:9d:cd:22:cd:13:24:58:cb:85:1a:ea:d6:11:
d6:98:5e:fa:fe:2e:72:1e:9e:bd:b8:d1:e4:f3:a9:
8e:44:7c:14:ae:66:29:f7:53:1a:b6:1c:5c:fa:8f:
4d:6c:80:74:6e:ef:98:a2:33:fd:53:03:4f:88:24:
97:71:f4:41:98:4b:8b:97:52:21:9d:0f:f9:58:4c:
2b:28:1a:00:03:f7:eb:ea:c3:93:92:b0:c5:9e:58:
6e:9d:f9:2a:ff:fb:60:20:cd:b9:52:40:3f:c6:e5:
cf:24:10:fb:00:9c:d6:41:7e:bd:f5:aa:29:d7:c1:
78:af:78:cc:ef:69:13:40:d9:3a:91:3d:49:be:54:
f1:f9:d5:ee:70:06:9f:1b:58:92:18:f8:fd:5b:a0:
18:e2:2d:12:cf:1f:94:6c:ad:2b:5c:af:09:e0:60:
51:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A8:BE:9C:C1:12:7F:D4:7B:33:43:74:6E:6A:1E:B7:10:DA:65:FC
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/SKi-nMESf9R7M0N0bmoetxDaZfw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:cf:ef:dc:5e:92:27:a7:69:9e:4a:ab:f6:44:75:a7:03:92:
60:ab:ba:2e:75:7d:6e:6d:0f:91:da:db:5c:7f:9b:5e:ad:7c:
df:3c:98:0f:d0:a3:cc:53:bd:e1:3d:0e:dd:e0:28:6d:be:a7:
d9:0f:52:80:5b:b5:19:e5:a3:d9:2e:c6:14:3f:68:47:a6:d8:
85:e5:e2:73:7f:3d:22:eb:7c:8c:36:db:53:5d:71:8a:98:60:
03:a3:de:0a:3f:a5:e5:fb:15:5f:f3:8c:10:4f:07:88:14:56:
b6:02:7e:ae:0e:25:90:b5:4b:27:40:d0:3a:7e:56:8d:fa:8f:
e9:15:d6:c9:1b:74:c2:ba:25:36:52:7c:71:56:2d:68:f3:58:
d8:ac:92:c8:54:0d:72:e7:a3:23:16:ab:69:82:27:95:5f:ed:
b0:83:72:51:4a:1b:4f:5f:e6:b7:09:99:d6:79:c9:85:29:86:
d0:aa:4d:cd:38:9c:51:1b:6e:59:bd:78:f7:22:c9:ab:5e:b5:
1f:a3:8c:f6:3c:53:c5:99:47:ed:f9:3d:76:69:10:61:70:fc:
1f:cd:de:d9:20:d3:5d:db:6b:c5:ec:92:92:d6:45:39:cd:fb:
49:5e:05:4e:33:46:ed:c0:18:53:28:74:86:73:e2:4b:5e:28:
f7:51:8e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 04:46:16 2024 by rpki-client on console.sobornost.net