Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9Aa4sNPX9nKL39Fp3aEIFWrEhPw.roa
File: 9Aa4sNPX9nKL39Fp3aEIFWrEhPw.roa (raw, json)
Hash identifier: jVRCIoFlXqV1MdM4/c6MtLBDsvFUyAJHRX3kmONjhX4=
Subject key identifier: F4:06:B8:B0:D3:D7:F6:72:8B:DF:D1:69:DD:A1:08:15:6A:C4:84:FC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 455E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9Aa4sNPX9nKL39Fp3aEIFWrEhPw.roa
Signing time: Sun 21 Apr 2024 01:53:06 +0000
ROA not before: Sun 21 Apr 2024 01:53:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17758 (0x455e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 21 01:53:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F406B8B0D3D7F6728BDFD169DDA108156AC484FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:b1:f0:b6:d5:32:a9:9a:4b:8b:10:41:73:
be:60:70:07:64:26:4d:e6:59:de:6a:58:2c:87:12:
75:65:f3:48:47:8d:48:f1:68:f8:0d:96:f3:e3:c7:
98:80:e0:5d:b7:da:2e:70:84:ba:2f:16:2e:c5:03:
9e:f0:f3:e4:37:a2:5b:be:fe:e4:e3:66:0e:0c:fe:
74:42:2e:7b:54:67:85:47:2f:1d:7f:aa:3d:3d:aa:
3b:6f:3b:a6:61:e8:af:01:25:2c:89:67:0f:03:2a:
1e:fd:a4:74:d3:04:93:b4:fe:5d:1a:bc:bf:12:32:
59:a7:72:40:f9:d8:af:b7:fa:80:91:cc:2d:3a:3e:
c3:89:74:d8:f7:64:bf:2b:30:bc:a9:47:b0:65:c4:
40:37:53:2d:ea:6c:ef:de:fd:22:2b:76:c0:cf:46:
b4:c7:f4:bb:47:83:46:d8:db:a4:33:6b:5c:1e:35:
1a:20:98:ff:aa:4f:76:06:b1:e2:2d:71:96:a3:f3:
02:1b:be:e5:63:1b:0b:f3:80:04:eb:4a:d4:36:46:
4a:c2:0b:ba:a6:c8:54:85:c0:9c:5c:a4:95:e6:4c:
78:ea:63:e6:fd:da:d4:f3:c6:8b:0c:6e:6d:2b:6f:
95:09:47:8e:3d:e5:9c:6b:46:08:e5:0e:3c:16:8e:
df:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:06:B8:B0:D3:D7:F6:72:8B:DF:D1:69:DD:A1:08:15:6A:C4:84:FC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9Aa4sNPX9nKL39Fp3aEIFWrEhPw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:f3:ea:78:25:31:2b:b2:63:58:75:22:2b:72:26:13:9e:f3:
4b:61:4f:f3:ea:e5:dc:a5:76:03:93:80:9c:dd:e0:2e:25:ac:
11:0f:03:2d:c5:3f:28:cb:52:c2:75:fd:3d:65:6b:73:66:69:
01:78:19:5c:fa:2d:3f:d0:59:4d:f3:4b:f6:25:f9:fc:ca:e8:
56:6b:4d:2d:51:a5:48:64:13:a1:b4:fc:a0:90:e9:f4:f1:c9:
32:13:35:59:9e:e8:ce:53:f6:15:a0:db:1e:e8:9d:a9:d3:8e:
ed:91:80:6b:7d:a3:c3:13:51:51:32:57:89:64:83:49:4c:26:
f5:77:5d:83:70:fa:5f:15:1d:84:a9:68:fd:c1:9a:05:6c:df:
6f:55:44:a0:3d:f0:29:8f:80:c0:9a:8b:34:f9:72:c6:1d:a3:
cc:09:8b:ea:18:a7:a8:31:c8:1d:4a:8c:9d:4b:c7:03:53:3b:
f4:c6:96:b1:0c:e4:fa:d5:02:d8:42:53:f9:d9:9c:b9:33:f9:
c4:fe:7d:5d:93:4b:f3:af:38:42:b5:76:50:47:10:47:89:c7:
e4:f0:29:2f:59:a9:d1:41:77:7c:3e:7b:eb:9d:74:e9:ad:dd:
6f:2c:0d:7d:45:f8:ac:c2:82:63:72:55:22:55:0c:95:ac:1a:
a5:34:2e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 07:56:36 2024 by rpki-client on console.sobornost.net