Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NvWDmfMX5SwHFwu59zAg3nVh8xM.roa
File: NvWDmfMX5SwHFwu59zAg3nVh8xM.roa (raw, json)
Hash identifier: kpxhaKNrZujhmIbdOuWBeUSTHHYCixbQ4MtAiKjwI5g=
Subject key identifier: 36:F5:83:99:F3:17:E5:2C:07:17:0B:B9:F7:30:20:DE:75:61:F3:13
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 401E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NvWDmfMX5SwHFwu59zAg3nVh8xM.roa
Signing time: Sun 14 Apr 2024 01:52:52 +0000
ROA not before: Sun 14 Apr 2024 01:52:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16414 (0x401e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 01:52:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=36F58399F317E52C07170BB9F73020DE7561F313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:ab:43:22:51:08:0f:20:af:6e:25:64:ff:
01:39:80:b6:15:88:12:cd:d5:0f:c6:de:a9:36:be:
31:60:cc:33:c6:3f:4e:ce:5c:75:9b:43:dc:8b:cc:
78:5e:ae:0f:7d:5f:a9:d9:16:49:23:43:e4:5c:2b:
da:94:a7:49:c7:ee:bc:a5:4b:92:ca:cc:bb:68:16:
c8:13:51:ce:48:92:01:f1:2e:b6:b0:ea:ac:85:d1:
3d:bb:0b:b7:e3:50:84:28:23:cc:c1:87:f4:ee:b4:
a3:9b:83:d8:89:fc:27:bb:fe:fb:44:e8:a6:dd:df:
0c:bf:d3:ea:65:7e:9a:b6:b9:d8:37:c9:b5:c7:a3:
4b:6b:36:74:9b:ee:12:d1:d6:e2:97:46:6d:1d:de:
58:9c:d4:00:e7:82:20:5a:1d:82:84:7a:99:08:89:
63:ec:cc:8a:31:10:7d:ec:43:07:da:b9:f1:da:5c:
02:45:58:39:2a:41:7f:8d:f7:bf:8f:ce:12:31:e2:
2b:6c:88:fb:67:60:4a:8d:cf:af:b8:58:9f:da:d1:
71:4e:1a:68:91:64:8e:e2:de:b1:6c:e3:bf:40:bb:
66:26:4b:76:4d:e3:d4:f5:06:05:8f:47:a8:65:2d:
02:54:45:aa:7a:11:8b:fa:32:87:8f:3a:c1:18:a2:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F5:83:99:F3:17:E5:2C:07:17:0B:B9:F7:30:20:DE:75:61:F3:13
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NvWDmfMX5SwHFwu59zAg3nVh8xM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:33:10:5f:84:ee:1d:24:e2:bf:af:cb:69:91:f2:68:88:2e:
73:d5:55:4a:bb:d1:3f:a3:89:2c:86:31:b9:a1:96:c7:6a:9e:
e8:2c:d3:50:45:91:28:56:0c:ab:34:ad:47:8f:45:1f:d8:58:
0a:4f:6b:4f:a6:9e:57:35:b3:dc:71:dc:f7:36:f0:f2:92:0b:
c8:fa:43:3e:7b:ee:46:e1:4d:e2:fe:f5:14:29:ff:e8:e1:8e:
2f:17:95:0c:4c:28:9e:f4:bc:f2:d2:0c:86:61:01:a0:13:71:
6a:74:f3:7f:45:27:c8:ec:df:fe:6f:ff:cd:a3:53:99:9a:59:
8f:44:d5:4d:10:9f:62:0e:0e:ce:9d:f2:5f:7b:ce:5d:2c:b7:
23:54:20:9b:47:cc:4f:1d:07:57:89:05:c2:12:59:b3:0f:02:
19:b6:f8:39:d8:3e:e5:5f:e9:53:47:ba:ba:b8:56:32:3a:d4:
2f:10:0c:4f:f8:a9:9d:98:57:76:81:51:1e:60:d7:3a:13:ac:
70:21:1a:36:1f:0c:56:3a:e0:99:47:7e:58:d8:8b:93:72:a9:
41:b1:03:ac:87:95:db:d6:90:fd:01:27:dc:27:88:22:56:aa:
a0:0c:f4:9a:1c:52:4c:d8:05:a8:d3:c6:95:66:f4:1c:14:83:
f9:57:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 08:03:31 2024 by rpki-client on console.sobornost.net