Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0Y01l7HuBJ-iaDmdPX6t_lMEIa0.roa
File: 0Y01l7HuBJ-iaDmdPX6t_lMEIa0.roa (raw, json)
Hash identifier: 6MBzBnJVAnSD9T1Dy7kIuPKKUfRtLRW66Bc05KDhk5Y=
Subject key identifier: D1:8D:35:97:B1:EE:04:9F:A2:68:39:9D:3D:7E:AD:FE:53:04:21:AD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 33E1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0Y01l7HuBJ-iaDmdPX6t_lMEIa0.roa
Signing time: Thu 28 Mar 2024 18:22:02 +0000
ROA not before: Thu 28 Mar 2024 18:22:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13281 (0x33e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 18:22:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D18D3597B1EE049FA268399D3D7EADFE530421AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:aa:87:69:02:01:ab:40:0d:45:48:57:17:
17:19:88:5e:7d:04:de:7f:89:bb:c6:30:d0:71:8e:
48:bc:7b:5f:b4:97:8d:d5:61:38:5b:bc:0e:72:32:
3c:57:26:3d:14:fa:a3:75:bb:95:92:11:67:30:1b:
ed:e3:bc:9d:f1:5f:81:d9:3f:ed:f7:2f:bb:e5:04:
2d:6c:71:48:55:90:a3:1d:d8:38:10:b5:73:42:cb:
dd:0c:c9:5e:39:87:1d:c0:c9:e2:9a:dd:d9:11:f7:
e1:02:c8:af:e3:79:6c:35:3c:d8:a5:ab:a8:19:3e:
f1:79:71:19:4d:3a:04:03:d1:31:99:7b:7e:76:02:
cd:14:38:27:a6:5c:1d:7f:36:ec:4e:23:c2:06:ce:
6b:01:9e:1e:71:75:ef:16:32:a8:b1:06:d5:aa:37:
4f:84:26:d9:3c:1c:66:67:9c:c2:c3:51:b5:3e:27:
99:8c:f8:2b:39:0d:3f:6f:76:91:cf:63:88:5e:7e:
fd:a2:48:21:0d:65:40:c9:e3:5e:41:d2:34:7c:ed:
df:8b:62:3b:9f:71:6b:53:b4:6b:25:66:21:15:5f:
83:07:14:ae:b5:b7:77:3c:a1:d8:bf:08:cf:59:6a:
05:0e:22:80:49:81:78:f7:6f:0f:1f:25:ff:44:6d:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8D:35:97:B1:EE:04:9F:A2:68:39:9D:3D:7E:AD:FE:53:04:21:AD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0Y01l7HuBJ-iaDmdPX6t_lMEIa0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
07:89:6a:58:56:83:27:66:86:fc:67:34:86:c3:3a:ae:5f:f3:
fd:77:f8:83:04:17:d8:7e:58:e2:60:d4:1d:13:83:59:62:84:
5c:f7:fb:b5:0c:8f:8c:29:58:68:d8:b9:a1:7c:15:3d:89:c3:
93:ce:39:c0:e5:ea:4a:a5:7b:46:ea:1b:e3:41:12:73:60:89:
65:83:32:a6:9d:ed:9f:e3:cd:2d:6f:1a:aa:60:9b:52:e4:83:
6f:44:aa:cb:43:04:c5:75:8c:02:4f:2b:10:11:b7:5c:a8:e8:
f4:89:1b:a2:09:97:93:a2:b6:83:65:68:72:74:e9:94:aa:92:
7e:90:ed:77:cb:7b:cd:b5:52:77:34:3c:1a:ce:79:a6:67:27:
1c:c4:80:e4:6f:a7:73:c4:a9:3e:d6:d1:33:df:97:21:0e:d4:
2f:7a:ea:67:49:cc:f1:60:da:68:7b:cf:7e:d9:3d:78:e8:53:
5e:76:e7:14:4b:87:c8:1d:41:52:01:a1:cc:04:5f:32:e9:06:
db:8e:a0:58:60:2a:bb:da:32:e1:c5:3e:1a:25:5c:44:0c:f4:
c4:3d:e0:6f:6e:dd:12:7f:98:b8:d2:6a:e1:c2:d8:28:4d:b6:
82:da:36:90:f6:ac:96:4d:59:69:d3:33:cd:8b:fb:b2:c6:e6:
84:f6:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 01:32:39 2024 by rpki-client on console.sobornost.net