Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IQJB51hacsvF-FY_K-JnGGJoQdg.roa
File: IQJB51hacsvF-FY_K-JnGGJoQdg.roa (raw, json)
Hash identifier: Zjmtf3vPzCxIjLflj7IooZP7KCUb9S/ewuEHDJ5NBKo=
Subject key identifier: 21:02:41:E7:58:5A:72:CB:C5:F8:56:3F:2B:E2:67:18:62:68:41:D8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 453E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IQJB51hacsvF-FY_K-JnGGJoQdg.roa
Signing time: Sat 20 Apr 2024 21:53:12 +0000
ROA not before: Sat 20 Apr 2024 21:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17726 (0x453e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 21:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=210241E7585A72CBC5F8563F2BE26718626841D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:c6:2b:cd:7c:2e:08:86:88:04:3e:75:89:
63:bc:29:cc:72:67:dd:83:72:08:0c:ce:e4:55:8c:
99:d4:29:41:fe:cd:05:73:a3:4a:17:ff:15:a2:71:
02:ff:cb:05:31:1d:d2:60:cb:78:df:97:cc:c6:57:
71:b7:30:bf:d7:b8:b8:74:a3:c8:49:86:68:15:4f:
7a:22:5b:c3:06:ef:4d:15:bc:1f:59:f2:fa:62:32:
c0:0b:93:92:71:23:ba:06:4b:57:4c:c2:a0:5d:b6:
64:0f:51:9d:58:6d:17:46:b7:31:87:2d:e0:57:09:
8a:f3:0d:34:fa:87:00:5d:9c:d2:cf:90:36:a2:88:
c6:a3:28:fc:de:a8:95:8f:f1:79:eb:3a:35:fa:49:
19:00:f1:73:af:db:2d:72:c9:47:fb:1c:12:74:b9:
32:48:98:19:46:3e:64:e9:04:82:7f:9c:df:8b:39:
87:75:97:ab:78:9d:a8:b3:6f:e0:60:4a:83:50:9b:
f2:f9:44:96:0f:70:41:41:0e:e2:6a:9d:87:cc:88:
43:11:b0:89:81:09:9a:06:7a:f9:a2:38:b6:3e:db:
c7:2a:e7:55:f3:46:d5:63:8f:36:16:31:eb:32:66:
04:f3:47:2d:ee:68:30:f3:c3:15:92:c9:08:f5:79:
d3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:02:41:E7:58:5A:72:CB:C5:F8:56:3F:2B:E2:67:18:62:68:41:D8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IQJB51hacsvF-FY_K-JnGGJoQdg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:0c:79:e6:e4:f3:0e:6f:24:59:aa:6a:70:ff:f1:69:06:5d:
14:3c:f8:e6:16:62:08:86:67:1f:08:52:20:dd:28:c1:e6:9b:
5e:66:39:99:51:e1:bb:31:5a:1d:0e:b4:cc:d9:36:cf:74:9a:
62:b3:d7:f6:a8:62:83:d1:2b:51:63:37:98:5c:49:43:9c:3b:
d6:e1:10:11:76:0e:91:89:57:c7:f8:b4:d3:e0:44:2c:22:af:
70:8d:8b:2f:5f:f1:dd:53:45:63:82:9d:75:65:30:62:48:35:
57:33:94:a6:a0:fe:76:59:d7:c4:77:ea:83:40:d7:d1:c9:fb:
8d:1a:b5:54:f0:57:d7:fd:bb:06:d8:79:64:c4:3b:87:a2:32:
4f:79:27:9a:83:20:7d:db:0e:a5:58:78:25:4d:7f:99:a8:1f:
8c:46:7c:4f:ee:45:c7:e8:a4:c1:ec:9e:e6:80:f2:d6:c3:d9:
42:62:d0:94:c2:d9:c1:f5:7a:84:69:02:46:92:ec:86:13:91:
b3:bc:0c:4e:3a:2c:d7:03:3b:79:c8:ae:cc:dc:c4:e2:8e:b0:
a4:1a:f6:b5:9d:ff:14:59:2c:75:51:03:59:45:0c:cd:da:f1:
44:80:22:08:34:37:4f:c9:d9:a7:ca:4d:b2:33:c1:b3:a8:1d:
e6:31:09:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 05:41:57 2024 by rpki-client on console.sobornost.net