Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IBp8XvCteci4EY7P0GtNSqqTwrI.roa
File: IBp8XvCteci4EY7P0GtNSqqTwrI.roa (raw, json)
Hash identifier: xbcAHZs3065CBbbBYqX6WPBGevc0+b9npUf51jAmD3c=
Subject key identifier: 20:1A:7C:5E:F0:AD:79:C8:B8:11:8E:CF:D0:6B:4D:4A:AA:93:C2:B2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BC1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IBp8XvCteci4EY7P0GtNSqqTwrI.roa
Signing time: Mon 08 Apr 2024 06:22:37 +0000
ROA not before: Mon 08 Apr 2024 06:22:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15297 (0x3bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 06:22:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=201A7C5EF0AD79C8B8118ECFD06B4D4AAA93C2B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:04:53:05:a4:b3:13:51:b8:23:41:e7:e3:17:
bc:c2:a3:2a:1e:5a:f6:16:f8:76:04:9c:ad:c7:f7:
2e:78:dd:dc:ba:2e:be:8a:7e:c3:d1:1f:54:1e:cd:
73:63:a3:ca:f6:42:b0:d5:47:d7:49:a0:a1:40:30:
04:e4:f6:c5:49:5b:4f:ea:31:95:c2:0c:81:84:9a:
c9:9d:57:4e:a3:3d:6a:ac:56:c9:41:fc:36:be:84:
77:5c:52:bf:78:07:30:6f:19:cf:46:7b:ed:46:38:
51:5c:8b:d5:00:35:9f:de:cc:3f:5f:0f:3c:9f:95:
fe:48:6e:1a:45:3c:e5:f0:44:ae:04:f9:d2:53:35:
a9:35:bd:0b:be:30:1e:e2:d0:a1:0b:67:93:89:79:
8e:fe:92:45:85:d0:8a:ef:b5:40:b2:11:cf:c2:d9:
5c:c5:ed:11:49:0d:d7:bd:a0:55:81:ef:d7:a8:3d:
2a:89:78:70:d4:dc:a3:09:0d:e1:f1:5c:36:ba:4c:
a5:20:5f:2e:ed:d4:f2:dd:a0:db:b8:c3:9b:70:ec:
b4:ad:bb:c9:68:97:85:16:98:c6:1f:8c:eb:88:26:
70:8d:d2:5d:dd:80:2a:fb:11:f6:7e:23:c5:fc:3a:
c9:ce:47:9e:24:a6:4e:03:6f:f4:0d:59:4f:95:79:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1A:7C:5E:F0:AD:79:C8:B8:11:8E:CF:D0:6B:4D:4A:AA:93:C2:B2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IBp8XvCteci4EY7P0GtNSqqTwrI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:f0:5a:67:da:57:01:b0:96:22:5d:c5:5f:e9:72:ff:c8:2d:
a9:af:a4:8e:ce:bf:41:4f:b6:eb:c3:55:12:3f:1b:d7:a4:0e:
85:29:51:3a:d7:fd:06:49:47:c9:e5:cd:84:cd:d3:7a:ae:43:
1f:a8:64:7f:43:ec:19:01:f2:f0:7c:33:8a:5f:27:d5:10:c5:
35:26:1c:a5:73:36:13:89:f6:de:3d:13:29:dc:5b:73:18:e0:
d0:72:02:9b:d4:dd:13:0a:02:e8:3b:26:bb:57:3a:f8:ee:cf:
ea:d4:dc:70:7b:3f:92:c8:78:a9:cc:76:6a:19:c0:2b:9a:3d:
6f:ec:67:94:f5:19:5b:0a:c3:7c:6d:c3:cd:30:6a:0e:ef:01:
19:d9:96:e2:b5:19:4d:dd:01:ff:60:8a:c0:97:2d:5b:d2:76:
b4:c8:87:37:03:20:e8:2d:a9:d6:6e:a2:00:31:0e:be:b0:bb:
f5:a1:85:fb:28:ec:c1:09:dc:44:87:b9:01:76:71:86:63:b9:
c8:73:cd:f0:52:5e:2f:c9:c1:3d:b3:d0:b4:15:85:76:e6:b1:
e3:ce:bd:76:de:b6:e5:0c:eb:d9:aa:1c:fa:fa:20:68:b5:4b:
ef:75:af:c1:0c:37:f6:80:8a:c9:93:40:b5:4a:06:1a:09:e5:
e9:b5:61:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 12:58:56 2024 by rpki-client on console.sobornost.net