Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/V7VrIg605SSFSHeyu_riJBITAcA.roa
File: V7VrIg605SSFSHeyu_riJBITAcA.roa (raw, json)
Hash identifier: 5ug6Nt5g1y6SHZR56XRmt7kqDnnKEu2f7ibwS3QlOTY=
Subject key identifier: 57:B5:6B:22:0E:B4:E5:24:85:48:77:B2:BB:FA:E2:24:12:13:01:C0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4802
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V7VrIg605SSFSHeyu_riJBITAcA.roa
Signing time: Wed 24 Apr 2024 14:23:13 +0000
ROA not before: Wed 24 Apr 2024 14:23:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18434 (0x4802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 14:23:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=57B56B220EB4E524854877B2BBFAE224121301C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:63:0d:d0:8d:d7:84:ce:b3:e0:75:a4:07:
35:1b:89:cb:88:34:49:12:10:c7:54:bd:c1:63:8e:
f5:34:df:9f:57:64:19:5a:41:1c:ad:62:b9:d4:12:
0f:ad:96:b6:c0:05:c3:55:8f:13:f9:50:d9:f6:58:
6c:d6:66:78:be:95:ba:4e:43:cd:02:be:9e:93:2f:
29:3c:59:1e:59:8b:e1:c1:39:a6:b8:cd:2c:5b:2a:
dc:4f:da:44:1d:dd:5c:df:0e:21:57:5b:c0:39:b3:
3e:b0:af:f9:e9:3e:b3:d1:3d:e1:b4:a0:5b:80:05:
23:f5:c5:8c:17:4a:b5:10:70:97:6c:05:b5:28:e4:
2c:19:5c:b3:fc:e6:43:b9:52:c5:c5:15:87:1b:23:
de:38:bc:11:43:43:46:39:9d:3b:b6:80:bf:0e:13:
26:22:14:ba:38:16:3b:87:ea:75:07:1f:22:a0:55:
db:c6:b4:88:f8:97:ca:e9:f5:f5:fa:e8:71:7d:1a:
dc:48:d4:2e:15:8e:1a:43:ff:65:5a:22:dd:b9:1e:
e5:4c:64:77:87:4b:b6:cf:ad:ce:fb:98:1f:d3:9f:
9d:39:07:dd:f9:45:2d:17:42:55:80:09:14:2a:99:
b2:e0:b7:ad:e0:d0:a0:13:c2:29:ac:92:52:82:6f:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B5:6B:22:0E:B4:E5:24:85:48:77:B2:BB:FA:E2:24:12:13:01:C0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V7VrIg605SSFSHeyu_riJBITAcA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:dd:e1:b5:b7:6b:d4:30:ad:0a:a3:5b:75:de:67:e2:6a:29:
6f:07:a6:30:ab:47:36:09:90:3f:0e:10:ce:82:d7:50:17:64:
3f:81:07:19:7a:0d:17:ac:62:5b:b3:8f:88:c1:36:c1:d8:45:
a1:9f:da:5f:71:88:9a:b0:a9:b6:04:25:53:3f:90:75:bd:b3:
45:2b:bd:c9:74:4f:91:06:90:54:e8:35:15:8f:10:4c:72:e3:
37:6e:d3:2d:28:76:6c:d0:a4:f7:8b:1b:91:b9:93:ac:47:8e:
b3:bb:1c:e7:55:74:ec:5b:fe:37:bc:51:8a:72:f7:09:89:d4:
52:c2:de:64:fc:52:34:42:c8:8a:c2:41:5d:a5:66:d9:e7:74:
f2:3e:d0:8d:2f:88:e9:f1:d0:7c:5e:de:bd:b8:32:f0:64:1e:
95:f5:82:e3:5c:28:72:9a:42:5c:f6:5e:96:2c:76:3f:04:aa:
06:71:8a:fb:b1:5f:d4:f0:0a:87:23:4d:55:9c:e2:66:68:c8:
24:87:d2:05:01:22:0c:99:66:d3:08:91:4a:80:6c:63:9a:c5:
8b:13:bd:bc:75:29:72:56:d1:b9:f5:c7:95:56:17:6c:e3:89:
36:7a:c3:93:de:37:9b:6d:2f:f8:b5:b4:c6:54:66:6b:5e:1c:
5f:2b:40:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 21:49:58 2024 by rpki-client on console.sobornost.net