Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/o48o_8m--tqQzkfGuci3UhlOW1M.roa
File: o48o_8m--tqQzkfGuci3UhlOW1M.roa (raw, json)
Hash identifier: sK0LmKNBcvHTfJ35miueGVAxKwU1F0qUfUdRFM4Zu/Y=
Subject key identifier: A3:8F:28:FF:C9:BE:FA:DA:90:CE:47:C6:B9:C8:B7:52:19:4E:5B:53
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 134E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/o48o_8m--tqQzkfGuci3UhlOW1M.roa
Signing time: Thu 11 Apr 2024 10:53:12 +0000
ROA not before: Thu 11 Apr 2024 10:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4942 (0x134e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 11 10:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A38F28FFC9BEFADA90CE47C6B9C8B752194E5B53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:44:22:c8:b9:23:b1:51:c4:91:7a:9d:72:
2f:d9:00:7a:fe:7f:7d:c4:e4:ae:17:78:43:c7:d2:
ff:9e:5c:8f:e0:ee:16:b0:e5:d0:20:07:bf:ff:77:
b6:11:3f:94:12:5b:e4:bb:98:9e:2c:44:9f:47:7f:
80:2c:0a:fd:6f:85:d6:41:0c:85:14:7e:ef:39:d5:
5d:4f:e5:6c:63:99:6a:30:10:53:aa:ec:bb:75:4d:
cd:0f:2c:d3:55:c4:b7:26:71:74:02:22:3f:87:07:
46:aa:f0:1a:cc:f3:e8:06:af:92:a7:fe:b7:1d:d9:
de:45:ac:dc:d7:de:d2:36:cd:63:32:a5:6c:44:22:
74:88:f7:98:95:28:12:d2:f8:79:93:dd:9c:c0:cd:
52:7e:73:50:d2:cf:b7:ff:dc:2a:9b:d6:c4:e6:d6:
57:cb:5c:65:bd:88:3d:d6:97:7b:f8:74:43:c1:24:
99:90:b9:8c:fe:22:c4:17:d9:cb:a9:2e:f0:0f:a0:
4b:c2:da:76:03:a8:65:64:30:5d:fb:92:51:90:03:
df:61:4c:9c:21:f3:63:be:2a:a3:74:72:d5:81:f9:
7a:bb:ac:b5:16:71:d6:cf:8b:d1:3b:b3:f8:d9:60:
f4:58:1a:3f:0c:14:c5:ca:ab:5f:70:58:dd:56:65:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8F:28:FF:C9:BE:FA:DA:90:CE:47:C6:B9:C8:B7:52:19:4E:5B:53
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/o48o_8m--tqQzkfGuci3UhlOW1M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cd:27:f3:bf:50:44:1b:10:7e:c7:ac:19:8f:9e:97:e3:a5:45:
4d:df:25:58:83:b5:f8:0b:ed:7c:90:7f:87:33:5e:12:cf:bc:
bf:d7:97:45:4d:45:52:a6:7b:b5:56:4e:1b:27:8f:45:ce:0f:
1c:10:08:f2:01:b6:ba:9b:bc:65:ef:5c:8f:74:62:62:09:e7:
f1:03:26:f1:10:c7:59:52:d4:c4:c4:10:7c:08:e2:3c:9d:25:
21:96:2a:0b:80:b4:84:35:09:fa:e9:26:75:fc:44:d2:ee:9b:
a7:02:5d:e2:4d:b4:22:16:97:e5:f7:f4:47:ff:59:db:57:fa:
ab:ef:8c:1f:9f:ac:97:c2:1c:38:9d:c9:8a:1f:d2:a6:29:d9:
dc:c2:7d:2b:5a:c4:ea:40:6e:c0:51:46:66:fe:0f:d5:ae:b5:
7e:2c:19:60:fe:1a:eb:93:d4:80:4b:5c:54:ed:17:57:c4:90:
ba:f5:ac:ca:33:20:90:62:98:e3:1c:7a:38:e2:e2:d1:6a:25:
cb:54:40:ca:2b:00:e7:b1:32:b3:ac:12:45:87:5e:66:99:29:
34:f9:27:df:37:51:68:39:f3:2a:b2:fd:e5:17:ad:be:1f:5a:
90:09:95:7b:45:da:bb:3d:c5:d6:05:da:b6:b9:83:3f:9b:cb:
de:78:2c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 17:36:05 2024 by rpki-client on console.sobornost.net