Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8VoHVlgwv60FZJu-V2AJjT5C_VM.roa
File: 8VoHVlgwv60FZJu-V2AJjT5C_VM.roa (raw, json)
Hash identifier: DS5c0AGK/MFfz9kSF7L2s6opi7N32XBHVULfExlaB+0=
Subject key identifier: F1:5A:07:56:58:30:BF:AD:05:64:9B:BE:57:60:09:8D:3E:42:FD:53
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FBD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8VoHVlgwv60FZJu-V2AJjT5C_VM.roa
Signing time: Sat 13 Apr 2024 13:52:52 +0000
ROA not before: Sat 13 Apr 2024 13:52:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16317 (0x3fbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 13:52:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F15A07565830BFAD05649BBE5760098D3E42FD53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:6c:09:e7:16:ad:e1:5e:1e:a9:d5:12:5e:
75:9e:05:02:64:a7:32:a5:b1:28:e4:1f:c8:a4:da:
a2:a9:40:ea:2f:3e:8d:dc:55:19:ff:38:28:64:4c:
3e:ca:36:a4:c9:6f:5e:63:e5:25:55:3e:94:59:c8:
17:47:07:b0:93:eb:9a:c6:98:d0:6f:04:98:d8:cd:
cc:92:ce:b2:b0:60:49:68:66:3b:58:0f:65:3f:a3:
e3:ab:3a:44:17:80:91:bd:cf:d8:51:71:00:d5:aa:
8a:f2:17:12:eb:43:78:ba:3e:c7:9f:f5:6f:f5:78:
45:8b:ae:26:e2:cd:7d:bf:4b:62:af:81:7a:94:6b:
aa:98:ee:27:0a:10:c3:34:50:35:7c:22:5f:ea:7c:
2c:c1:83:ef:7a:2b:9d:f0:44:23:33:b9:e1:18:66:
3c:24:3a:73:a5:43:76:35:b7:89:c1:9a:fa:d1:6b:
dc:c2:f5:cb:34:1a:41:0a:3d:04:36:59:83:e6:63:
59:50:0f:5e:6f:82:50:24:2b:f7:86:d8:9f:95:52:
92:7d:b5:cd:0f:d1:9e:07:8b:4b:48:b4:3e:c5:de:
b4:6a:6a:1a:23:8a:7c:2f:5d:4d:33:6a:34:ba:b4:
dc:86:78:c7:60:f2:23:e4:c9:71:93:f1:d9:79:2f:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5A:07:56:58:30:BF:AD:05:64:9B:BE:57:60:09:8D:3E:42:FD:53
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8VoHVlgwv60FZJu-V2AJjT5C_VM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
96:8d:1d:9d:fe:0c:27:85:f3:28:40:6c:49:db:94:6e:46:12:
5e:32:cb:7a:f3:0b:47:a9:69:9e:b8:97:60:92:e1:1b:99:9d:
47:01:f1:23:c5:6a:19:28:13:56:6c:00:b2:0c:13:ce:07:3c:
dd:14:c0:e4:07:eb:24:93:05:78:59:f2:e8:f2:2e:8b:0b:68:
ba:c1:ff:ad:50:3b:05:26:46:f2:44:1a:34:c7:a3:dd:34:7b:
31:d1:a1:36:68:4b:7c:c9:5a:db:3b:f3:5d:9b:d0:a4:de:3a:
69:e4:99:53:b7:2f:c4:75:24:d7:d8:89:d0:4b:ad:d8:29:b6:
d4:1e:cf:e3:37:7a:aa:22:4a:92:1d:61:03:09:91:8d:55:aa:
82:b9:cf:31:ce:3c:77:e2:cb:d9:ac:07:cc:fc:fa:63:55:f2:
e2:91:e9:36:4a:9b:d2:8c:0a:48:8a:db:75:37:a4:17:49:de:
2f:60:a8:8f:61:fe:ec:f1:b1:e2:d0:75:0d:ac:6c:b8:17:9f:
ff:0e:49:c9:09:33:56:79:f5:b2:68:47:45:49:50:b4:00:2e:
16:2d:6c:7c:ee:fb:fc:52:ed:25:12:d6:d5:38:5a:5a:fb:55:
7b:55:d5:e0:91:5d:e9:c0:f2:d6:4c:a1:81:4d:d6:4f:54:cc:
43:3f:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 19:10:14 2024 by rpki-client on console.sobornost.net