Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/UqWI83Yw1NwvQHYoMLv-mC5cY6c.roa
File: UqWI83Yw1NwvQHYoMLv-mC5cY6c.roa (raw, json)
Hash identifier: oTcc+tOLJOTZswoLkNrSPCa4peMEW2Xev1GDj4hU23o=
Subject key identifier: 52:A5:88:F3:76:30:D4:DC:2F:40:76:28:30:BB:FE:98:2E:5C:63:A7
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15B0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/UqWI83Yw1NwvQHYoMLv-mC5cY6c.roa
Signing time: Wed 17 Apr 2024 19:23:24 +0000
ROA not before: Wed 17 Apr 2024 19:23:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5552 (0x15b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 19:23:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=52A588F37630D4DC2F40762830BBFE982E5C63A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:3b:58:41:7d:58:f7:b5:d7:eb:1f:00:59:
21:1d:8d:74:f9:6c:b4:e5:98:f6:7b:49:dd:f8:8e:
e0:a8:bb:2f:8e:08:45:27:3c:52:f6:5d:fc:1a:74:
c5:d0:1c:3a:a4:f7:af:6f:a7:c5:26:1c:a9:f2:87:
c7:3f:6c:7d:bf:97:47:6f:7c:48:1a:e6:39:d5:d3:
3f:e9:3b:0f:ef:48:c4:0f:f7:8c:25:3a:47:90:65:
aa:14:fa:e6:3e:47:c8:57:38:8e:84:95:f9:4d:72:
62:e8:3b:ba:f0:d2:62:b3:06:33:e6:a4:c5:fb:59:
17:45:8c:d0:06:3f:ad:ac:ff:f5:5b:63:e5:73:b2:
51:d0:ac:9e:03:6f:79:e4:7d:15:63:6d:b1:f3:82:
0b:c4:95:46:96:bc:19:8b:82:52:f4:07:e3:64:46:
ae:6f:1c:c3:31:a8:24:4b:ed:27:a0:a7:d0:49:13:
75:37:6c:5a:52:4b:cf:e3:f5:9c:fd:fd:2c:55:95:
ec:f5:fc:68:a1:66:ea:6a:e8:02:90:b2:22:b1:77:
c2:0e:da:e5:e0:a9:1a:4a:84:c2:79:cb:13:db:fe:
84:af:1f:ae:cc:d6:d8:6b:05:ce:be:ac:fc:eb:a1:
19:a6:45:5c:f4:19:a6:1b:4f:18:02:ec:64:09:f4:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A5:88:F3:76:30:D4:DC:2F:40:76:28:30:BB:FE:98:2E:5C:63:A7
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/UqWI83Yw1NwvQHYoMLv-mC5cY6c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:e4:d0:81:98:d0:60:69:b8:1b:2d:ce:79:d7:de:83:d6:ef:
05:a3:48:18:00:d5:c8:3c:bd:7d:38:c9:d8:fb:79:8b:1f:df:
83:ac:d4:4d:1b:c1:08:73:17:88:a9:26:94:2d:4d:e9:6e:99:
bd:3b:fe:6e:4f:d4:ef:dd:8f:d9:82:40:cc:cd:98:48:d4:b5:
e3:4c:8b:fa:ae:de:f4:b8:6e:5d:8f:39:b8:5f:7b:6a:ab:87:
d7:a8:96:de:60:9d:9c:5b:e7:20:0d:d1:52:c9:51:94:07:33:
8c:07:c5:09:01:a0:24:03:d8:e0:b7:39:3d:23:73:8f:72:b2:
c5:1d:65:f6:ff:c0:fc:08:3b:d8:89:fd:d7:9f:74:ee:88:1d:
6d:1c:24:aa:20:bf:fe:a6:ff:f9:dd:ce:a0:d8:73:ea:c9:e1:
38:07:d9:b1:22:5a:6b:77:ba:2c:a9:45:28:23:97:83:a2:74:
65:ea:21:d1:2d:18:71:1e:7a:60:56:b0:a1:84:e1:09:82:6a:
14:dd:9f:3d:b7:67:54:98:2b:d7:14:ff:24:83:e2:04:bd:06:
9c:43:48:dc:e1:56:70:6f:1f:f8:6c:31:62:ba:07:38:a4:de:
8b:44:a0:f6:66:cb:88:d3:a3:64:d8:b7:6d:33:d2:28:6b:8a:
41:a1:b4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 09:19:26 2024 by rpki-client on console.sobornost.net