Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/YUtpAeX897yD-VqJTGFu6tk6ZGg.roa
File: YUtpAeX897yD-VqJTGFu6tk6ZGg.roa (raw, json)
Hash identifier: /6TyRSQmsX08Q9GJNwv0klpCENTI0gtNfDe3v2/8XCI=
Subject key identifier: 61:4B:69:01:E5:FC:F7:BC:83:F9:5A:89:4C:61:6E:EA:D9:3A:64:68
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1968
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YUtpAeX897yD-VqJTGFu6tk6ZGg.roa
Signing time: Sat 27 Apr 2024 17:23:52 +0000
ROA not before: Sat 27 Apr 2024 17:23:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6504 (0x1968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 27 17:23:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=614B6901E5FCF7BC83F95A894C616EEAD93A6468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:b8:4f:9a:f1:63:12:5b:a8:e5:f1:40:82:
ae:76:89:97:90:b8:c4:1d:1c:cc:29:b0:2c:0d:b1:
a6:a3:41:c3:c5:0f:58:62:a4:36:54:c8:04:ea:79:
b0:48:c3:05:87:e7:d3:e2:c1:04:f7:04:51:1d:64:
2a:fa:41:37:56:f9:e9:07:71:a6:43:e7:20:8e:35:
9e:73:2e:8e:29:dc:f5:50:0a:62:d3:64:ca:2d:37:
3e:35:b4:67:10:59:a0:0c:a0:47:a4:cb:e5:82:b6:
34:86:1b:26:4b:05:62:29:0f:c9:70:f1:f1:19:17:
eb:7d:28:06:91:70:85:28:83:6d:5c:88:da:af:2c:
e0:3f:ce:6e:ae:9c:9e:0f:4d:c4:f0:40:e3:03:58:
72:9a:6c:31:5b:0d:c6:10:ac:82:36:57:62:ca:b7:
40:75:fd:db:f1:03:12:a2:b7:e9:b7:29:2c:33:d7:
68:84:0b:72:6a:23:d0:cd:fc:a9:ff:15:d3:52:23:
f6:b8:48:bd:44:b1:50:f1:b3:f2:d5:f7:d9:0e:f2:
78:fc:14:e7:20:b6:8b:cb:c2:6f:dc:41:1e:e5:89:
b8:83:61:88:41:83:4c:7a:dc:38:db:bd:c1:c7:bb:
28:39:e3:85:dc:97:9e:ae:58:ea:a4:ff:9f:83:60:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:69:01:E5:FC:F7:BC:83:F9:5A:89:4C:61:6E:EA:D9:3A:64:68
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YUtpAeX897yD-VqJTGFu6tk6ZGg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:2b:8e:d2:67:f3:97:8d:b9:91:fe:8e:dc:c5:bd:81:29:c1:
11:4d:cc:39:19:b6:b6:7a:61:0e:c6:18:df:f5:f7:be:4e:44:
7d:30:56:0e:90:c2:bf:ac:f1:e1:18:0a:71:02:b5:a0:60:7c:
85:08:49:72:b7:a7:59:ce:ce:3d:23:06:18:76:e4:9a:64:0b:
b7:88:d5:52:4e:51:44:6a:56:c9:3d:64:3e:65:1c:ce:30:35:
cb:c7:a6:46:e9:db:df:0a:a2:1d:6f:cc:05:0b:8a:27:a0:e6:
8d:c0:f4:f7:d5:e1:ef:9c:22:a4:6a:4f:26:e0:cb:e1:b0:ac:
99:9e:c5:11:20:ca:dc:05:da:22:dd:91:67:bb:df:9e:52:e2:
c3:4f:8a:3d:98:3c:1c:8a:9c:f2:2c:c8:ee:54:4c:96:e5:56:
36:7d:a6:6e:ec:e3:55:29:71:e3:1b:ca:4a:57:d5:11:d0:b3:
27:9c:ea:df:31:0f:9a:84:24:f8:94:35:65:66:6f:d1:6e:1b:
f0:e2:3a:8c:07:3d:eb:1f:82:cb:7a:5f:8a:79:02:c9:a5:45:
ac:35:17:1a:ac:a7:82:01:3c:de:e1:67:37:b3:f0:71:be:34:
60:86:87:35:00:d6:73:73:46:ac:5d:34:cf:87:2b:70:75:9c:
7e:b6:53:30
-----BEGIN CERTIFICATE-----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Generated at Sat Apr 27 23:07:35 2024 by rpki-client on console.sobornost.net