Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/OPLGYK046pWTtWjrlYakbN3DUpo.roa
File: OPLGYK046pWTtWjrlYakbN3DUpo.roa (raw, json)
Hash identifier: e6iDa2P3wWg/6ETSiiaVK+auxqJa2qIKJ0+og9zVdow=
Subject key identifier: 38:F2:C6:60:AD:38:EA:95:93:B5:68:EB:95:86:A4:6C:DD:C3:52:9A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1016
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/OPLGYK046pWTtWjrlYakbN3DUpo.roa
Signing time: Tue 02 Apr 2024 20:52:41 +0000
ROA not before: Tue 02 Apr 2024 20:52:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4118 (0x1016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 2 20:52:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=38F2C660AD38EA9593B568EB9586A46CDDC3529A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:58:1c:81:0f:80:b6:53:fb:52:ee:a3:cd:
59:7a:c0:60:5c:0a:97:3d:c5:3c:1f:88:78:bc:29:
3d:ee:32:c9:48:8f:37:e3:56:bc:8e:e0:fc:fd:d1:
f0:a7:07:66:67:c0:cf:67:b2:c5:ef:11:6d:fa:c9:
18:9f:39:63:9d:90:2f:40:c2:46:01:14:d9:c0:2c:
5a:9e:ae:2a:b6:6e:95:42:11:52:b9:8b:5a:70:47:
b8:1d:cb:96:1b:9e:d4:2e:e7:87:bd:ed:c0:bb:4d:
b3:06:f7:7f:d7:1a:aa:9e:ac:ba:a6:65:54:49:55:
06:a2:05:4d:77:b3:7c:b9:cc:15:24:d0:27:5a:e3:
79:40:d3:0c:25:79:ab:29:f4:3f:1a:1e:c1:a6:f9:
b0:73:91:53:5d:53:ab:62:b7:82:93:ce:1c:74:68:
d9:be:79:50:53:57:12:08:09:ae:12:63:07:04:ba:
e3:e6:4e:cc:57:d9:f4:14:d4:f8:ea:e8:e5:34:29:
07:c3:ee:11:7f:f7:11:86:c1:2d:48:79:76:7c:af:
be:37:23:a0:6a:b7:33:39:7c:9e:88:f8:60:cd:55:
53:cd:5b:5c:d5:85:b9:59:cb:bb:21:1c:ca:7f:c7:
e2:75:c3:6b:34:6f:87:4a:a3:a1:b1:28:c7:ad:2b:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F2:C6:60:AD:38:EA:95:93:B5:68:EB:95:86:A4:6C:DD:C3:52:9A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/OPLGYK046pWTtWjrlYakbN3DUpo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:dc:ae:50:89:8c:5e:e6:40:af:36:d6:69:76:28:b4:21:89:
a6:f9:0d:a0:bc:27:2f:91:95:37:38:a2:ea:ee:9d:69:12:bb:
a9:bd:4b:af:f1:9f:af:68:83:2e:62:99:06:2f:9a:e0:a5:7d:
4f:3d:f2:1a:0c:7e:8b:56:9f:9a:80:42:3b:ed:fa:f9:d0:c5:
27:f4:76:3e:13:9d:df:b6:aa:71:f0:cf:36:93:16:58:4b:fe:
66:01:62:49:71:03:b3:a8:6f:17:7f:77:9b:f8:a1:9b:91:7f:
55:e5:62:7b:d5:1f:0d:77:92:fa:ae:9f:0f:11:b3:8c:22:ce:
49:bb:a9:b4:44:3a:7c:51:ab:34:02:0a:1a:82:ee:1c:4d:69:
3b:1a:45:3f:df:68:95:e5:91:83:5c:9e:cc:25:58:59:87:58:
21:cb:49:7c:22:e4:20:a3:86:aa:5f:b5:59:a6:84:19:e1:8d:
92:af:e4:7e:c1:43:20:30:2c:4d:26:5e:7d:88:f9:d2:5b:2b:
7e:77:3e:3e:9d:4c:e2:52:10:72:e5:4b:62:bb:a2:fa:80:66:
67:00:a7:05:fd:3b:0b:a1:e7:ee:ac:be:bd:66:c0:46:cb:f5:
35:34:3c:fd:0a:a0:a0:c5:10:74:e2:00:7e:5e:df:3c:74:bf:
84:43:78:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 02:19:31 2024 by rpki-client on console-fra.rpki-client.org