Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FN0uh8Z385BVho-HOnXeIOgeJcs.roa
File: FN0uh8Z385BVho-HOnXeIOgeJcs.roa (raw, json)
Hash identifier: HUb3ojwKoaauSnmSN7NdAxx3FfrFefJSS4fn2B5uiJ4=
Subject key identifier: 14:DD:2E:87:C6:77:F3:90:55:86:8F:87:3A:75:DE:20:E8:1E:25:CB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 494D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FN0uh8Z385BVho-HOnXeIOgeJcs.roa
Signing time: Fri 26 Apr 2024 07:53:36 +0000
ROA not before: Fri 26 Apr 2024 07:53:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18765 (0x494d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 26 07:53:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=14DD2E87C677F39055868F873A75DE20E81E25CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a8:73:2b:7a:77:5c:28:a1:27:e8:1a:f8:a8:
f3:b5:b4:8c:63:2e:0d:d9:7f:8d:97:b4:47:4d:93:
17:ba:83:ec:a2:37:7b:a5:2e:da:3a:84:eb:98:2a:
31:0e:09:84:30:60:f4:41:b8:56:bb:bf:75:f4:af:
2c:2c:e1:cd:74:e9:e1:dc:73:4b:19:79:9b:2e:85:
7f:ab:9e:bd:a5:7c:ed:ad:26:6f:a8:e3:5e:a8:06:
24:ab:a5:7a:df:8f:6c:45:1a:53:66:f0:26:59:39:
64:d2:9a:95:bf:fe:11:7a:e0:42:44:ca:df:2d:62:
14:07:b1:51:84:9b:f9:9e:43:42:fb:4a:24:23:29:
a9:45:c6:7e:a5:0a:67:83:3c:58:96:cc:e4:17:5b:
18:d1:71:95:a8:4a:e9:fd:e0:ea:0b:4f:d3:bf:6e:
14:b0:d2:a8:dc:96:2b:5c:3e:d3:59:8d:4d:37:7e:
1b:5c:0d:a0:3f:c8:78:ef:52:84:c4:5d:7f:13:f0:
21:9d:5c:32:f9:b8:24:e8:f1:01:31:2b:60:84:94:
17:c5:25:4e:71:ff:09:b1:91:3e:08:2c:4f:45:0f:
fb:6c:9f:79:1b:17:d5:c2:0b:2a:cc:93:d6:2d:a6:
0a:96:61:fc:83:a8:00:bd:a5:c8:98:0e:59:2d:18:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DD:2E:87:C6:77:F3:90:55:86:8F:87:3A:75:DE:20:E8:1E:25:CB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FN0uh8Z385BVho-HOnXeIOgeJcs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
89:02:a1:c6:8e:c7:81:93:d8:df:b6:59:c7:4e:f9:9d:f9:af:
b9:9a:c3:ec:05:18:ad:27:f7:c9:92:07:6f:23:6f:f6:05:6c:
8a:df:58:04:96:2e:1b:73:d7:ff:dc:84:6f:e6:0e:a4:98:e4:
f8:1d:a3:aa:0e:36:ad:b0:20:11:71:20:b7:de:fd:11:f6:4b:
fe:6b:35:2c:be:89:ae:f8:6c:23:46:52:48:26:cd:cd:5d:16:
f7:24:94:8e:40:99:e2:b1:05:24:81:16:77:65:ad:f3:ea:de:
f3:9a:6b:af:9e:c0:df:c0:60:ab:4e:fa:3c:60:f1:e3:60:2c:
07:da:9c:3c:bb:6b:1a:75:f8:2d:ea:d7:2d:c9:0e:d5:01:6d:
c2:b5:cd:2e:76:ae:b3:fe:aa:10:7c:bb:b9:a3:60:84:2c:6c:
4a:2d:c5:79:d0:45:d2:44:92:36:85:a6:db:85:76:5e:f2:e6:
14:f6:88:2b:45:1f:79:53:fb:fb:fb:dc:df:49:24:ba:b7:23:
ef:a5:95:90:d8:76:e3:e4:5a:9d:24:4f:38:da:bc:aa:1e:4a:
a5:84:64:63:36:5f:c5:b6:86:e4:59:57:9f:e8:69:51:a5:e5:
22:cf:8d:eb:92:14:e2:1f:b5:46:b8:20:6f:8b:56:aa:93:bd:
95:9e:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 14:43:23 2024 by rpki-client on console.sobornost.net