Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/34y0MVKothzx9rCYLIvGBKaVJ8Q.roa
File: 34y0MVKothzx9rCYLIvGBKaVJ8Q.roa (raw, json)
Hash identifier: 8+j82CwiLWMTW99Ufc7vpbNC32E/bQDyCz2qiafdgGw=
Subject key identifier: DF:8C:B4:31:52:A8:B6:1C:F1:F6:B0:98:2C:8B:C6:04:A6:95:27:C4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D5D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/34y0MVKothzx9rCYLIvGBKaVJ8Q.roa
Signing time: Wed 10 Apr 2024 09:52:40 +0000
ROA not before: Wed 10 Apr 2024 09:52:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15709 (0x3d5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 09:52:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DF8CB43152A8B61CF1F6B0982C8BC604A69527C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:1e:a1:a5:50:d7:2b:4a:31:9e:e2:97:13:
78:91:11:12:c1:65:d8:55:62:30:1a:0d:70:a9:49:
c6:5d:32:a7:43:8d:00:d9:97:26:bd:65:96:8f:45:
36:27:6e:4f:6e:c2:4f:37:79:de:41:4d:1f:aa:0b:
d8:7a:3e:5b:f9:54:9c:de:0f:70:12:ef:d7:c2:4e:
28:f0:13:78:bf:b3:ce:30:92:fa:11:b5:b4:1c:94:
6e:1d:8b:9a:de:c9:df:05:7c:58:f9:3b:12:39:13:
9e:b2:9f:02:93:db:aa:4a:9e:fc:ec:7b:5e:28:6f:
d7:39:94:50:fa:fd:63:61:cf:3d:95:2e:74:4d:0d:
33:a0:0f:14:f5:a6:59:ae:08:58:9c:99:a3:f9:29:
7a:21:1d:51:0c:f6:24:86:a4:d1:b3:3c:b8:4e:e7:
55:25:da:30:c2:c3:49:b8:d6:4d:d3:a2:3a:41:8a:
37:3b:f3:42:cb:01:fb:cc:dd:1e:86:b6:2d:46:27:
5e:fd:8d:a8:86:03:d2:0f:9b:35:49:91:b3:04:a7:
60:f9:f8:71:5a:8c:2b:22:80:c1:1a:20:0f:8f:96:
cb:65:79:bb:55:1c:aa:c2:f7:79:5c:19:32:b6:4e:
1f:24:67:6b:09:0f:f6:b0:e0:a6:b6:80:22:9b:b9:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8C:B4:31:52:A8:B6:1C:F1:F6:B0:98:2C:8B:C6:04:A6:95:27:C4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/34y0MVKothzx9rCYLIvGBKaVJ8Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:78:ba:dc:99:60:dc:61:33:cd:69:53:71:41:c2:4f:99:92:
9b:b7:9d:51:06:ea:d8:e5:b3:50:fc:c4:cf:65:87:9a:44:02:
52:2c:6d:7b:e2:3d:94:0c:15:cc:a2:73:30:80:d2:03:4e:f5:
59:21:b9:7d:2a:7a:48:0d:89:0e:6f:0d:7c:20:9f:d7:25:15:
45:a7:2f:d4:55:b5:8d:53:4a:fa:22:af:96:15:85:51:58:b1:
d1:28:59:72:b3:25:e0:94:f0:ed:8c:77:64:34:e4:7c:46:ab:
18:20:bf:a6:52:19:74:56:76:2e:05:8b:74:4c:9c:8c:e5:f2:
1e:2e:3a:32:0b:18:d1:f1:ad:81:71:bb:0e:10:a3:95:17:04:
71:b1:80:ca:79:04:ba:5f:bd:79:b2:af:dd:92:6a:02:4e:17:
0a:9a:1a:80:2b:ef:d9:ac:81:d3:86:3e:41:51:fd:cd:32:47:
50:48:b3:92:54:fb:b5:62:50:82:e2:63:c6:0c:f2:95:35:ce:
f2:97:1f:00:9c:60:6e:08:84:59:70:11:44:6f:0b:e4:92:f4:
b6:29:ee:9a:4c:4e:92:55:e2:d6:a5:61:af:2c:bb:c6:dc:83:
f4:c7:1b:8e:79:d4:c5:1f:3d:2f:31:82:24:9c:e4:0d:22:96:
d5:5e:49:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:17:28 2024 by rpki-client on console.sobornost.net