Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-SplCvNJjGWztJmVi-V1lAPpUKo.roa
File: -SplCvNJjGWztJmVi-V1lAPpUKo.roa (raw, json)
Hash identifier: SwebJvQuUe8MQLyNqt6uNiKwpaO0+OYlQJYmiXmEg94=
Subject key identifier: F9:2A:65:0A:F3:49:8C:65:B3:B4:99:95:8B:E5:75:94:03:E9:50:AA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D32
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-SplCvNJjGWztJmVi-V1lAPpUKo.roa
Signing time: Wed 01 May 2024 12:23:36 +0000
ROA not before: Wed 01 May 2024 12:23:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19762 (0x4d32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 12:23:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F92A650AF3498C65B3B499958BE5759403E950AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:3c:07:02:76:72:18:5d:32:5d:ac:15:9d:
1b:f0:ee:27:6b:3f:59:52:37:57:7e:f5:60:e1:ea:
1b:1f:26:c3:06:13:5c:c8:4d:e2:7b:d5:45:ec:b4:
87:89:cd:19:46:a3:ad:0e:67:f0:49:cd:31:d0:d2:
91:6e:86:39:06:24:20:bb:6a:9d:8b:e8:25:ab:97:
a7:09:76:b2:33:3c:42:1a:4d:6f:be:c7:2b:be:11:
92:dd:09:f6:ee:3b:25:9c:94:35:f3:89:2e:e7:64:
11:a0:e3:8c:10:c5:f5:d3:c4:2c:17:ed:95:72:8d:
3d:91:42:c5:b1:37:97:c5:39:22:69:e2:82:93:12:
a1:c3:6e:af:ae:01:22:a7:8d:73:8e:cb:dd:00:41:
7d:ce:82:c8:d0:f6:2e:99:56:39:c5:4d:d8:74:47:
a7:87:41:e2:7f:17:3a:14:0f:c7:12:d8:7b:69:09:
e3:65:5b:5b:8a:58:c8:0b:36:0e:1c:fe:5d:08:a6:
d0:c7:8f:b1:b9:a7:1a:51:02:fb:a2:56:7b:57:0c:
41:13:94:92:c9:f5:62:d1:2b:26:64:4e:a3:ee:6a:
7f:b6:c1:a0:6b:03:ae:39:4e:80:e5:5e:4d:e7:4b:
73:f6:9c:67:db:7d:89:27:20:f8:26:82:74:0d:b1:
b5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2A:65:0A:F3:49:8C:65:B3:B4:99:95:8B:E5:75:94:03:E9:50:AA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-SplCvNJjGWztJmVi-V1lAPpUKo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:03:9f:f9:d8:d1:67:6c:22:93:cd:e5:ad:78:23:e2:17:59:
93:54:fd:33:db:a7:a9:da:94:27:47:e2:7d:00:3e:53:bf:ad:
60:0e:33:80:4a:e6:9c:e8:46:6a:85:d9:76:f8:ad:c3:b2:6c:
29:9e:3c:09:e0:44:ed:60:2a:45:f6:c1:94:ad:7a:92:34:1a:
21:ba:6b:d6:e8:c5:80:74:97:5b:6d:af:8f:19:5d:ad:f2:0c:
f7:be:bb:1e:92:46:1a:53:3b:7b:c4:69:7a:98:f1:83:3b:04:
b0:fe:66:07:6c:32:0e:8f:23:ea:6d:7c:fa:bf:c6:de:07:55:
91:66:c5:f3:4a:f2:c6:00:b0:a7:e5:a8:9c:54:16:29:e0:31:
d7:9b:4c:bd:22:62:9a:81:a2:8f:0d:4e:19:8f:7e:15:e1:59:
20:76:e6:2a:dd:e7:04:a0:81:d7:0e:89:b3:40:34:38:03:12:
4d:ff:e7:6d:69:4b:4c:aa:5c:df:1e:ad:4c:4d:75:43:6b:a9:
33:ed:eb:ac:22:db:00:6d:cc:dd:91:16:e1:b1:36:8a:56:9a:
e3:38:df:c4:bd:09:f3:d6:b7:9c:9e:aa:4e:53:d8:76:46:be:
65:9d:53:12:c8:b4:6b:b2:5f:c4:30:f3:d5:bd:2c:a9:2e:81:
51:08:24:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:08:49 2024 by rpki-client on console.sobornost.net