Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/A4BdiJeOHoVhWP1HMOkfIl5KAJw.roa
File: A4BdiJeOHoVhWP1HMOkfIl5KAJw.roa (raw, json)
Hash identifier: mteqSLZoJJorZEGq7Qs/kUWlyOeRZXYZjDiMboGP/rw=
Subject key identifier: 03:80:5D:88:97:8E:1E:85:61:58:FD:47:30:E9:1F:22:5E:4A:00:9C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4A7A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A4BdiJeOHoVhWP1HMOkfIl5KAJw.roa
Signing time: Sat 27 Apr 2024 21:23:27 +0000
ROA not before: Sat 27 Apr 2024 21:23:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19066 (0x4a7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 27 21:23:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=03805D88978E1E856158FD4730E91F225E4A009C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:a9:d1:c0:88:52:ee:11:cc:52:44:f6:95:
1b:95:fc:3d:60:97:4e:13:79:fd:47:57:c9:a7:b6:
4e:8e:01:aa:bd:a9:de:ba:14:5a:7f:6c:90:e7:a3:
e1:d1:63:09:32:8a:04:9e:ec:53:b9:ac:79:d9:b5:
8f:7b:fb:40:ff:79:9d:e7:ae:65:fa:54:98:44:7f:
0d:73:ac:be:f8:02:44:22:f6:88:bd:25:03:e9:f6:
df:2d:0b:74:f4:8a:44:93:a3:b8:46:41:ba:e4:8f:
3c:71:0b:6c:61:4e:29:4e:94:b0:43:b3:2b:f2:ad:
f4:ff:bd:17:4f:00:fb:7d:02:61:b2:f2:06:ed:1f:
5f:0c:04:4c:18:14:dc:ed:44:9c:5f:4b:89:f3:59:
3f:28:d3:a5:b4:72:11:fa:be:88:be:ce:e3:57:85:
65:0c:84:42:b2:bb:f8:c5:40:77:27:48:96:07:06:
2c:0f:b5:e7:cb:46:65:3d:84:18:79:b5:21:b0:0f:
4b:6a:15:7a:c3:bc:a0:be:a3:20:06:0c:c3:dc:ba:
3e:00:09:94:93:77:d5:9d:8c:54:59:07:a3:48:08:
1c:81:fd:ad:1d:96:19:43:13:5b:cf:db:06:19:4d:
26:dd:9d:bc:6e:a1:2e:03:85:49:f3:8c:b0:53:7d:
5f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:80:5D:88:97:8E:1E:85:61:58:FD:47:30:E9:1F:22:5E:4A:00:9C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A4BdiJeOHoVhWP1HMOkfIl5KAJw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:cc:08:5e:72:30:2b:49:2b:fd:33:d5:d4:89:0a:3a:34:3e:
48:06:52:78:a9:3f:ce:cd:fa:1f:ee:0b:2e:2e:72:bc:57:b6:
b9:f1:d2:4b:20:b3:6d:f5:48:48:b9:49:8e:4c:89:94:fb:91:
46:bc:f0:1a:7a:46:a1:c3:90:d3:3e:fa:f8:d3:b2:ae:82:9f:
11:0c:df:92:dd:7a:ce:be:63:40:da:42:7d:8a:c5:11:08:36:
33:8c:55:e2:9c:42:c2:22:1c:dc:3c:48:01:21:07:36:84:79:
96:0d:c2:c1:1c:1a:09:dd:de:46:60:f3:e1:76:5a:12:a8:65:
ac:81:d7:ea:f9:42:dd:b2:b6:ad:b3:90:55:d4:62:d6:8a:c9:
5e:35:7f:09:29:95:eb:2a:e3:90:2f:e0:58:00:2b:06:d6:da:
e7:20:bf:da:b8:e7:fa:b6:a3:ed:56:8e:60:1b:7a:bd:f8:1f:
cc:91:58:82:76:a6:d1:2f:9e:5b:79:8d:98:e2:25:49:af:ce:
f5:95:35:6e:f2:6f:11:b7:04:fa:98:5a:f6:78:f2:48:c8:c9:
a2:7a:31:3e:6d:56:fa:93:a5:b2:58:9c:6c:a3:9e:6a:e0:5e:
00:f1:90:ec:66:fb:40:5c:68:6c:2b:26:11:4b:4a:fe:d0:18:
a4:cc:ad:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 23:07:05 2024 by rpki-client on console.sobornost.net