Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ccwe5gukuTUYTXkT6xsZq5251oo.roa
File: ccwe5gukuTUYTXkT6xsZq5251oo.roa (raw, json)
Hash identifier: yq823V688hxtT/Q0YCzwwr/y5tBf5ffuGT3BA5YWlEw=
Subject key identifier: 71:CC:1E:E6:0B:A4:B9:35:18:4D:79:13:EB:1B:19:AB:9D:B9:D6:8A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1378
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ccwe5gukuTUYTXkT6xsZq5251oo.roa
Signing time: Thu 11 Apr 2024 21:23:12 +0000
ROA not before: Thu 11 Apr 2024 21:23:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4984 (0x1378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 11 21:23:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=71CC1EE60BA4B935184D7913EB1B19AB9DB9D68A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:42:5b:03:ea:1d:f7:44:83:60:9c:61:0b:
64:80:2e:70:d9:b4:f5:ab:a1:d7:17:71:a6:20:91:
3f:0a:23:e2:90:36:47:6f:f5:c1:4d:41:59:34:f8:
fa:94:16:f9:be:69:2a:9d:2f:4f:6b:33:80:23:9d:
1c:d0:69:c7:18:16:31:08:6e:ba:a9:9d:e1:f0:b1:
f3:79:6d:43:81:09:57:1d:34:1e:1b:e6:57:f5:e8:
5c:14:3c:5f:ad:9b:3c:5c:50:30:e7:3d:74:92:2a:
af:6b:d1:66:f0:f9:c7:53:a3:5e:be:b0:fd:7a:c2:
76:78:03:8e:69:4c:aa:c4:16:92:72:f9:57:4e:0a:
9d:ab:6c:3d:13:44:a3:49:a7:89:a2:cd:a1:b5:0a:
24:84:63:12:54:47:75:2e:16:c6:d7:1b:6b:63:bf:
87:cc:be:c7:15:a7:a5:bc:18:f3:fc:a8:b0:71:08:
f8:ce:a3:8f:15:ce:ed:e8:af:eb:38:d9:af:63:5f:
bf:bb:2a:2c:c0:d5:6a:e7:49:15:25:7d:a7:0e:52:
5a:ce:97:77:09:4f:03:d0:77:9e:11:71:87:c8:d8:
d4:98:e2:4d:67:48:76:bc:e6:3c:7c:b7:94:08:0c:
9a:78:21:4e:e1:b4:ba:e0:5c:16:33:1e:8c:86:dd:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:1E:E6:0B:A4:B9:35:18:4D:79:13:EB:1B:19:AB:9D:B9:D6:8A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ccwe5gukuTUYTXkT6xsZq5251oo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:96:b7:0d:f1:e6:de:98:68:c5:f2:25:5e:67:1c:a7:a5:60:
19:c0:7e:97:8e:c1:55:58:84:d2:a3:b3:b8:a9:eb:66:28:9b:
0a:0f:35:cd:59:c6:56:a0:18:bd:8e:4c:86:a9:29:1d:59:e5:
c5:57:9e:ec:5b:80:4b:6e:fa:ba:a6:01:9e:c3:f2:66:7e:30:
99:42:5a:a4:4e:3c:7b:4d:ca:1b:01:e8:d2:11:50:c0:5f:fa:
6d:68:dc:de:7e:69:e7:22:74:31:cb:4d:45:1d:37:08:13:25:
6d:68:7a:ad:84:36:20:b8:99:1f:b8:a9:35:b0:f0:56:0f:4a:
70:04:0e:c9:21:ed:90:39:c5:ad:2f:09:65:4a:97:80:ab:4a:
0d:39:ca:71:aa:59:ea:88:20:0e:ae:56:83:16:1c:b9:56:66:
60:c5:34:43:df:30:db:22:3e:f3:a8:59:47:d6:0f:82:7e:a7:
46:08:9d:52:08:aa:cc:f9:bf:ca:a7:07:ba:9c:90:b4:6b:93:
ba:bd:9f:97:9b:46:05:a5:e6:2d:28:fd:58:d4:a1:88:e6:8a:
47:d5:dc:ef:50:39:0d:4c:36:f7:58:16:a0:50:cd:d1:81:9b:
a6:e9:51:7a:9a:4c:05:ab:ac:f5:4a:52:e2:de:11:51:91:e9:
f3:3c:ea:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 04:03:54 2024 by rpki-client on console.sobornost.net