Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/lsMnP6Wc1JT48AD7scU6oqtiIss.roa
File: lsMnP6Wc1JT48AD7scU6oqtiIss.roa (raw, json)
Hash identifier: oL3oJ/n4h6bwX2XQeWKzxQ9CHfi7w4TxSqxZzotYA6I=
Subject key identifier: 96:C3:27:3F:A5:9C:D4:94:F8:F0:00:FB:B1:C5:3A:A2:AB:62:22:CB
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1650
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/lsMnP6Wc1JT48AD7scU6oqtiIss.roa
Signing time: Fri 19 Apr 2024 11:23:29 +0000
ROA not before: Fri 19 Apr 2024 11:23:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5712 (0x1650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 11:23:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=96C3273FA59CD494F8F000FBB1C53AA2AB6222CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:29:77:22:94:dd:2f:47:e0:f3:b1:f8:00:
66:b0:6b:7d:ae:a0:50:c2:db:26:8b:52:f3:65:b6:
6a:f0:85:e8:2b:46:5e:16:63:a4:37:f1:70:b9:c7:
80:50:6f:18:c3:8b:61:d9:37:ab:e0:b1:ce:c6:e9:
1c:99:bf:0e:c8:35:70:17:c0:97:17:d2:b4:5a:b7:
49:e5:33:72:d7:b8:9b:08:f9:bb:37:d0:60:5d:62:
19:1d:be:c5:54:1c:96:2f:a8:5a:53:a0:a5:a2:f3:
41:76:9a:55:b7:90:57:c2:b8:b1:99:14:44:fc:d2:
64:45:2a:6b:66:76:f6:ee:61:fe:39:25:03:5c:d1:
8a:a0:1e:7c:80:69:cd:e9:c9:15:2e:46:c1:4a:6b:
78:8b:97:b0:68:ff:53:08:e0:eb:24:da:4f:90:74:
b7:1a:e1:d2:e7:48:74:33:f8:5d:82:23:c5:a0:a4:
56:61:d3:4f:cc:39:a7:a1:df:b3:ff:18:27:38:e1:
61:8f:29:27:bc:64:4a:60:f0:be:2c:60:eb:74:08:
c0:2d:16:bd:1e:2e:94:69:1d:ee:38:c4:91:4c:4c:
ce:8f:dc:26:4b:a0:57:c2:a7:7d:a2:2c:fd:34:8e:
af:df:e4:1d:99:2c:fb:d7:e6:83:8a:c0:17:77:ef:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C3:27:3F:A5:9C:D4:94:F8:F0:00:FB:B1:C5:3A:A2:AB:62:22:CB
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/lsMnP6Wc1JT48AD7scU6oqtiIss.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:fd:6a:3f:87:9e:5e:25:a1:e8:f7:99:19:b1:54:14:f5:02:
c8:8a:14:5b:26:c9:5c:d4:90:cc:42:8d:9b:db:46:6f:f5:6c:
dc:4c:83:fa:47:59:3f:58:6e:7d:d4:a2:96:cc:6e:03:4b:c9:
d9:d2:d4:e2:00:94:fa:54:a8:9b:d2:e6:d3:35:88:a5:c1:d8:
17:65:2d:f7:c4:3b:a9:a0:12:a3:ea:fc:d5:82:ab:55:18:e9:
98:e5:60:4b:00:99:af:fe:1d:48:d6:3b:8f:7a:4c:ad:79:16:
84:77:0d:0d:18:b8:7a:3c:d0:dd:ac:42:5a:2e:53:09:23:06:
d2:02:80:88:69:ba:ce:99:e3:19:b1:d5:51:ea:f9:d4:dd:6d:
7a:0c:13:d1:29:1b:3b:27:92:9b:3c:25:16:74:bc:3b:ec:21:
5d:10:71:44:64:88:f4:a3:40:17:51:92:5d:74:25:4b:3c:72:
df:d4:7e:e8:4f:f2:19:5a:74:32:02:ad:8a:16:69:d2:e3:6a:
8f:58:a7:08:ec:c1:da:85:56:bd:03:45:56:61:db:d5:0e:f9:
37:15:a8:1d:3d:37:ac:2f:dd:dc:28:df:85:64:eb:60:a4:77:
14:22:b5:8b:39:25:cf:39:0a:e5:41:ab:b4:03:2b:ff:89:cb:
71:0e:93:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 15:09:47 2024 by rpki-client on console.sobornost.net