Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/opwhxDbELe-ubxnN0RYywmPDulk.roa
File: opwhxDbELe-ubxnN0RYywmPDulk.roa (raw, json)
Hash identifier: jgI084e6J9VFmHq3NhWsOLSncNmm993eaycZRWwB0PU=
Subject key identifier: A2:9C:21:C4:36:C4:2D:EF:AE:6F:19:CD:D1:16:32:C2:63:C3:BA:59
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15DE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/opwhxDbELe-ubxnN0RYywmPDulk.roa
Signing time: Thu 18 Apr 2024 06:53:33 +0000
ROA not before: Thu 18 Apr 2024 06:53:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5598 (0x15de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 06:53:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A29C21C436C42DEFAE6F19CDD11632C263C3BA59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:51:c6:7d:7a:c5:50:cd:c7:c3:0f:ab:cc:
52:3e:7a:ea:83:3f:1f:8c:56:5f:54:45:95:ae:04:
70:53:ee:d7:c0:1f:29:c3:00:81:c3:e4:20:e3:c8:
c8:b3:f8:aa:d3:72:b0:bc:da:bd:ed:49:0c:47:dd:
f4:88:69:2d:8b:bc:10:15:91:4a:04:04:ca:7d:37:
20:b0:4d:4b:0d:82:d3:23:d3:1e:dc:05:5e:79:aa:
11:82:11:42:de:19:9f:8e:38:39:7e:a4:d8:6f:7d:
49:c8:2f:01:67:22:2e:b8:f7:24:3e:18:32:0a:fb:
ee:6c:56:4f:26:06:71:8e:2e:1e:73:0f:03:f6:d4:
af:fb:b8:8a:26:ed:3e:cf:45:c5:cb:3e:cc:68:58:
d8:85:fe:ec:0a:88:10:f1:75:16:e4:5d:cd:af:40:
16:b3:ca:10:59:82:42:78:43:55:05:a4:01:02:77:
97:a8:21:a4:74:f4:88:95:d4:20:2c:94:76:5f:7b:
a5:2a:a4:8d:68:3b:c3:c7:50:7f:91:03:9f:bd:c8:
bb:d8:1f:fe:1c:64:60:f2:d3:d8:39:35:b1:74:3b:
e1:bf:b8:55:0c:00:ef:e5:4a:96:42:01:cc:d9:2b:
50:58:98:ba:15:15:f9:f5:15:94:47:6b:c9:93:fd:
15:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9C:21:C4:36:C4:2D:EF:AE:6F:19:CD:D1:16:32:C2:63:C3:BA:59
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/opwhxDbELe-ubxnN0RYywmPDulk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:3d:f0:07:93:6c:85:6c:be:c4:2c:49:e6:13:2b:2c:5e:c6:
ab:d6:c3:45:09:37:e7:d9:1f:ad:04:d5:3b:6f:8a:58:c4:3f:
53:63:b1:8e:b5:54:7e:28:7d:88:81:9f:a9:70:7c:23:fe:49:
ce:2f:69:08:1c:99:f2:43:67:1f:d9:60:28:13:26:46:13:73:
ef:dc:76:78:16:65:bd:d9:0b:9e:81:c8:62:0e:4d:04:cd:cf:
b4:f3:16:0f:57:c4:53:ff:45:5c:07:69:22:4c:fb:6a:76:9d:
77:cc:1a:34:ca:9e:ea:d8:34:5b:cd:96:ac:d8:d3:d0:7d:cb:
07:0c:6e:c6:18:2b:7a:e3:af:11:c0:85:3e:fc:ed:58:3a:13:
7a:12:39:9a:63:36:3a:d2:8b:16:92:ed:80:3d:13:41:7e:70:
c2:12:96:e7:1a:08:a8:9e:aa:6e:6c:6b:9f:96:f8:41:19:48:
8c:e7:85:93:cf:ef:16:18:fc:64:3a:c9:05:f6:c7:c7:25:4d:
ae:eb:39:60:7c:4d:e4:6c:c8:68:58:51:dc:80:a8:4f:89:c8:
83:28:47:59:67:03:89:16:f0:e5:16:d9:2a:da:74:1b:04:99:
44:e3:31:dc:37:d4:3c:8b:ce:ef:44:c6:99:28:b8:7e:47:22:
67:96:54:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 08:10:07 2024 by rpki-client on console-ams.rpki-client.org