Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WSHf9JEWwyizO7EObyv7j3Qt6po.roa
File: WSHf9JEWwyizO7EObyv7j3Qt6po.roa (raw, json)
Hash identifier: VO4OMzfCf+O4A1qKOE/Q1Ei0YnF/lqt1RgmBOWRIIDw=
Subject key identifier: 59:21:DF:F4:91:16:C3:28:B3:3B:B1:0E:6F:2B:FB:8F:74:2D:EA:9A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5409
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WSHf9JEWwyizO7EObyv7j3Qt6po.roa
Signing time: Fri 10 May 2024 15:24:01 +0000
ROA not before: Fri 10 May 2024 15:24:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21513 (0x5409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 15:24:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5921DFF49116C328B33BB10E6F2BFB8F742DEA9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:5c:d3:b9:34:56:52:dd:40:ac:0e:25:77:
52:93:bb:64:4e:af:1f:18:5b:9f:5d:59:5e:9c:0a:
1a:5c:1e:5b:45:4c:7d:58:ea:28:5e:34:57:35:bf:
37:87:2c:3c:1d:0b:98:7a:a2:dd:ff:13:a2:4e:3e:
f2:04:ff:67:ea:14:55:55:de:e4:54:06:60:ef:df:
77:b3:70:c1:d2:11:95:d5:23:ae:9c:d9:66:e2:90:
0a:19:8d:f7:71:17:29:c9:26:de:09:df:09:a3:e6:
2e:ed:31:83:d4:11:16:ef:05:65:ab:c6:9e:02:72:
3d:85:80:7e:10:f4:75:d4:9b:25:e7:db:f6:01:91:
2b:30:79:82:6d:04:f8:6d:81:58:ea:a4:48:4c:2b:
04:97:b9:63:3c:82:c6:25:e3:37:4f:7d:94:e6:65:
68:7a:09:0b:3f:5b:5d:fc:f4:7c:b8:0e:81:97:94:
6c:00:fb:71:07:b5:2e:c2:3b:31:c4:3c:23:e7:32:
4c:67:b9:c8:5a:55:15:94:68:5a:5d:0e:58:22:d2:
aa:9f:9f:e5:2d:f8:de:1e:be:04:bc:3d:c4:e5:20:
24:ed:6c:66:6f:76:b8:4f:bf:14:d9:45:7c:8c:2a:
88:a3:ef:b6:0a:63:e1:4d:8e:ff:ff:98:d7:dd:a8:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:21:DF:F4:91:16:C3:28:B3:3B:B1:0E:6F:2B:FB:8F:74:2D:EA:9A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WSHf9JEWwyizO7EObyv7j3Qt6po.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:ca:75:83:99:de:1f:2b:04:d3:5f:89:75:c3:cc:00:6d:63:
bd:34:47:e8:79:6f:a4:66:75:d6:fe:7d:71:b6:b4:bd:67:cb:
0a:4f:f7:52:26:6b:58:23:85:8e:11:e0:0c:73:ab:00:93:69:
d1:4c:54:e1:cd:c1:ec:a5:b1:21:7c:31:22:fe:e3:cc:53:1f:
2e:5c:a1:39:1f:5c:8f:b3:74:21:3c:7e:40:b9:91:81:98:fe:
03:db:92:16:4e:ba:65:da:e1:ec:e0:09:8b:9b:41:fb:cc:53:
f5:3e:5a:35:9d:32:b1:47:0f:4c:d9:9c:22:05:64:60:8e:e8:
c8:48:9f:15:76:87:7f:2c:f0:a2:89:62:d5:d3:59:e6:22:ae:
7d:b0:45:fb:42:27:5c:dd:1c:06:87:fd:0e:44:93:09:5a:13:
18:d3:4d:cc:d8:9b:bc:36:8a:f4:4e:28:31:a8:b8:f0:06:6e:
9f:5e:f4:b3:f4:4c:5b:d3:54:71:33:59:38:f7:6c:be:64:fc:
c2:33:32:b7:c4:8b:40:c2:5c:d6:ca:7c:28:f0:22:f0:cc:57:
5b:cf:5b:a2:1e:6e:96:09:25:b0:91:7c:b6:0a:fc:99:4a:29:
9c:37:e4:5d:a9:2e:69:dd:85:f4:f8:7c:19:ce:cd:b4:0b:68:
38:d8:6c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 18:53:01 2024 by rpki-client on console.sobornost.net