Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JISI15cfHtiggMY-59IBhNAW0rM.roa
File: JISI15cfHtiggMY-59IBhNAW0rM.roa (raw, json)
Hash identifier: MCiA+CJ9CUWY3LKSOew9ys8zsjQSkrFm83/QviGWyj0=
Subject key identifier: 24:84:88:D7:97:1F:1E:D8:A0:80:C6:3E:E7:D2:01:84:D0:16:D2:B3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55EA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JISI15cfHtiggMY-59IBhNAW0rM.roa
Signing time: Mon 13 May 2024 03:24:06 +0000
ROA not before: Mon 13 May 2024 03:24:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21994 (0x55ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 03:24:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=248488D7971F1ED8A080C63EE7D20184D016D2B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:64:6a:51:d6:d6:fb:7e:53:2b:05:80:db:
10:41:73:af:0b:b6:0a:14:fb:6f:b8:15:ed:6c:21:
44:6f:be:4b:7c:38:59:88:f7:cc:89:25:97:95:17:
2c:04:8e:60:84:fd:5f:13:c8:10:56:ea:33:bd:92:
f9:bb:b2:65:f8:eb:15:00:ef:b7:9e:4f:df:d0:ca:
d3:4f:57:96:d4:dc:c7:e5:6e:7d:3e:88:8b:80:62:
1d:bb:6b:0d:5e:29:ec:08:f8:78:0a:6a:7a:b9:9a:
e4:f9:91:3f:b0:70:44:bc:e8:30:1a:43:dd:1f:87:
50:b7:4d:e1:98:bf:87:18:7a:0c:58:fe:a6:9e:f2:
88:96:c6:a3:b1:90:5a:eb:ca:60:84:ae:21:c8:7f:
b2:12:1a:a2:cf:1c:52:2f:cf:74:cb:6c:bb:3c:39:
1b:8b:67:75:86:70:01:30:06:b4:ac:5a:73:11:3b:
e5:eb:aa:86:92:02:cb:ec:eb:3b:6a:84:24:e2:61:
b8:1b:04:5b:22:a9:9a:5f:ba:2d:e8:52:0f:98:6e:
9e:06:42:c9:4e:d3:a0:a8:ce:b0:83:be:8f:e9:a5:
56:68:fa:c5:04:72:4b:ab:bf:11:2a:07:dc:f0:30:
de:0d:39:37:9f:48:00:c0:b2:d7:c5:33:96:5f:32:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:84:88:D7:97:1F:1E:D8:A0:80:C6:3E:E7:D2:01:84:D0:16:D2:B3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JISI15cfHtiggMY-59IBhNAW0rM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:26:71:48:ca:e4:1b:95:cb:76:81:d0:44:26:c0:54:61:c0:
08:27:42:a4:ae:2f:e5:e8:dc:3c:e4:19:b0:39:0c:32:6c:08:
0f:53:dd:e4:88:80:b0:cc:42:cf:34:1c:20:2e:ae:59:d2:43:
68:ca:90:15:88:6c:3b:cd:b5:98:b4:1a:71:a2:3b:bc:3b:d1:
af:75:2f:ce:ba:a9:3d:fc:11:55:27:7a:81:41:05:19:30:a4:
f8:c9:db:75:6e:41:c2:3c:6e:47:8c:ee:d2:1b:db:0d:74:21:
79:fd:d5:3c:d3:90:f1:9b:d1:db:98:1f:3b:fe:ff:26:f0:2d:
f8:3f:a3:7c:35:66:13:e8:03:ca:bd:09:51:9e:d5:e5:e2:7d:
47:a7:4a:c3:3c:2e:87:b8:de:31:0d:d0:8b:3d:e4:b4:b7:96:
25:66:3b:b6:86:04:c1:51:e0:24:b7:a8:65:fe:7a:f5:d0:f4:
44:ba:9f:74:b7:3a:9d:6b:eb:f8:c0:d3:8c:bc:e2:76:73:a0:
aa:2f:d7:2b:6e:23:13:e9:36:c4:5d:b9:52:03:4b:38:9c:25:
95:67:fd:80:b6:d0:b2:1f:5f:96:ac:7b:07:89:4b:f0:8d:5a:
6d:e9:e8:5d:70:38:a4:8c:0b:70:58:a1:7a:63:92:40:2c:ab:
de:09:3c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:18:23 2024 by rpki-client on console.sobornost.net