Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/HRp4nEp6YGQ_oM2ZiPbaG8Ek4xU.roa
File: HRp4nEp6YGQ_oM2ZiPbaG8Ek4xU.roa (raw, json)
Hash identifier: PAJYaCBBVB2EdKRXNzVTZbBXVWUtQ1OXJ8YZvdn5D6o=
Subject key identifier: 1D:1A:78:9C:4A:7A:60:64:3F:A0:CD:99:88:F6:DA:1B:C1:24:E3:15
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4846
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HRp4nEp6YGQ_oM2ZiPbaG8Ek4xU.roa
Signing time: Wed 24 Apr 2024 22:53:19 +0000
ROA not before: Wed 24 Apr 2024 22:53:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18502 (0x4846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 22:53:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1D1A789C4A7A60643FA0CD9988F6DA1BC124E315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fb:ae:42:3f:f9:4f:b7:4a:4c:aa:da:d1:d5:
41:82:55:c2:d0:1e:f7:38:6d:d5:80:b7:cb:e6:41:
cd:a9:7f:5e:c2:89:2d:61:48:a1:a8:99:9f:b4:8b:
b9:57:ba:a0:86:76:9f:63:70:a0:9b:3e:2e:61:be:
a7:54:48:db:90:d8:f6:f4:84:60:c1:45:ee:93:4f:
fa:5f:bf:13:ab:31:6e:74:6e:c7:9c:0b:e8:6c:b7:
9a:ac:da:79:da:8e:ef:81:eb:3b:5f:fb:59:0e:62:
3a:4a:f7:07:bd:f5:d3:43:11:32:f7:6d:ae:07:5e:
d3:ed:33:b4:ce:b5:e1:55:5a:fc:2e:50:ff:4e:74:
e9:78:17:73:19:ba:1b:72:c4:64:bf:89:80:73:f0:
eb:4d:68:9b:79:59:a3:f0:8e:37:4e:4c:17:f3:d5:
35:17:4d:1b:a3:46:00:92:a5:f4:7e:21:f7:63:bf:
2e:d4:03:ac:37:dc:35:95:b2:ef:fe:1b:60:b2:92:
05:7e:b0:90:1f:ae:a3:36:35:9a:88:ad:ea:c7:b3:
df:b6:1c:fc:01:2f:c3:83:0a:89:fc:14:dc:c6:10:
25:16:35:0d:d2:5f:ad:ce:b8:21:64:59:a4:77:1c:
c4:7c:be:1a:cb:b9:12:18:7d:e5:94:7a:2c:ba:b2:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1A:78:9C:4A:7A:60:64:3F:A0:CD:99:88:F6:DA:1B:C1:24:E3:15
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HRp4nEp6YGQ_oM2ZiPbaG8Ek4xU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:cc:6e:90:64:2c:c1:5e:17:be:b3:a9:28:4d:f8:4d:87:4c:
f7:44:f5:38:5b:79:9c:7f:4a:0f:95:7f:49:3f:f9:1c:e8:f8:
66:71:5e:2a:d5:3a:05:97:93:3a:65:bf:6f:bf:3d:d9:cc:ee:
8d:d4:a4:e9:ab:b8:2c:30:54:c0:c6:7e:a2:d9:e9:56:a4:a9:
20:22:82:ee:45:7f:85:09:95:fa:82:fe:f1:df:94:38:75:9b:
88:53:11:9a:93:e5:94:28:3a:a5:f0:a7:33:d0:fe:12:4a:9c:
b4:4a:12:81:9c:b8:57:ed:9e:5a:8b:01:68:16:f2:cc:20:07:
96:46:f8:ae:aa:c8:aa:17:f3:13:f7:2f:0b:4a:ba:1c:76:0c:
67:3f:04:3a:31:69:94:e6:5f:0a:73:59:28:83:b8:9a:45:42:
19:85:a6:3e:98:2f:ee:c5:8f:3a:ac:3e:b0:e3:20:43:05:84:
24:6b:51:9e:63:41:93:44:a1:2c:11:fe:c5:97:99:90:22:ca:
2f:ae:9a:10:6a:ae:6b:c7:99:0e:45:0d:d4:f3:01:2c:3f:a5:
03:c7:69:70:94:db:ec:fe:15:e8:e9:8a:3d:27:44:65:2d:f5:
19:b5:e8:39:20:13:09:a2:90:98:0c:76:6a:37:59:da:97:2c:
e1:c4:73:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 03:43:41 2024 by rpki-client on console.sobornost.net