Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WdzI5U1NFCXbjMK774eGYPrX_w0.roa
File: WdzI5U1NFCXbjMK774eGYPrX_w0.roa (raw, json)
Hash identifier: WE+HkBYC0VeT9SadPvuf0mmboCAAWcokgOn4uH94xdE=
Subject key identifier: 59:DC:C8:E5:4D:4D:14:25:DB:8C:C2:BB:EF:87:86:60:FA:D7:FF:0D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4582
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WdzI5U1NFCXbjMK774eGYPrX_w0.roa
Signing time: Sun 21 Apr 2024 06:23:05 +0000
ROA not before: Sun 21 Apr 2024 06:23:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17794 (0x4582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 21 06:23:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=59DCC8E54D4D1425DB8CC2BBEF878660FAD7FF0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:e7:45:de:42:8a:14:18:63:b1:06:24:81:
6e:e7:69:9f:92:ba:15:03:62:5a:3a:78:36:1c:24:
6b:2a:ca:f9:c0:dc:cd:8b:bd:20:9c:3f:47:b6:ca:
0f:57:28:e6:a0:fe:6f:4c:b4:37:66:12:91:8d:d1:
21:24:b1:86:da:61:7a:43:12:5e:f0:c0:bb:63:b4:
84:66:a8:15:db:88:e2:eb:e9:69:e3:91:a7:77:c9:
63:eb:a5:3c:ee:ca:77:83:64:bb:e2:1c:ac:89:16:
46:21:0e:af:b1:72:7f:4e:f3:24:2f:a7:6a:30:cf:
e8:1e:8e:21:fa:52:f3:96:f0:9b:d7:e7:3a:8c:66:
4b:c4:d6:a1:7c:36:4b:1a:02:c0:84:12:56:61:7f:
3c:dd:0a:7e:ce:fc:7b:3c:2a:61:3b:10:a3:e9:60:
f0:48:cb:c4:49:ce:f5:3a:01:5f:63:d4:1d:04:99:
e8:e2:78:c9:59:5a:75:d3:6b:50:fc:8f:6d:8c:a5:
7c:3c:19:a5:89:29:2c:e8:c3:18:01:73:f1:4c:4e:
6e:71:e8:52:31:ef:7d:0b:bc:4a:0c:cf:f2:a5:86:
69:85:d3:ed:95:47:2d:d7:7a:44:96:b7:00:7b:c6:
06:cd:1e:a3:b4:5e:86:47:01:f5:c4:39:fa:a8:22:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DC:C8:E5:4D:4D:14:25:DB:8C:C2:BB:EF:87:86:60:FA:D7:FF:0D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WdzI5U1NFCXbjMK774eGYPrX_w0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:bd:22:ca:77:24:0b:b3:63:91:94:ce:0a:e2:2c:cd:ed:71:
c0:51:f3:d0:06:b7:e6:36:9d:01:18:03:f3:ab:c5:c2:96:6a:
2d:24:09:a8:c6:ba:18:75:f4:fb:8b:1a:c0:17:4c:0c:ce:86:
c1:7e:a7:36:88:45:e9:9f:e8:36:3c:98:1a:e7:7c:52:8c:9c:
a8:88:e2:72:1b:d7:b2:80:d2:29:7d:2d:57:49:15:cd:ae:bd:
34:d5:0c:1e:7b:bc:45:dd:3c:23:2c:87:69:f7:7b:95:2c:2e:
4d:9c:45:42:1b:7a:e4:3f:fa:ce:4f:32:15:e0:43:4c:3f:db:
eb:ef:a8:47:fa:93:27:25:d1:d1:8b:af:d0:ed:37:49:07:57:
26:8f:00:cc:6b:c8:df:16:15:e7:de:fa:e0:e8:a6:c1:c0:41:
3f:c7:5e:d8:8e:ea:71:fc:01:fd:fb:2b:3d:e4:5a:80:c6:34:
ca:3a:2b:c0:2c:6c:f7:02:dc:f9:4f:70:07:93:e4:73:ae:23:
94:7a:59:e9:d6:ee:a2:68:72:a5:5e:f2:9b:28:51:a0:f2:2c:
bc:a3:9b:7a:70:67:f8:5f:29:6d:e5:ee:4b:eb:9b:a9:f3:79:
69:96:9c:a5:26:af:b4:21:81:ec:30:c9:8d:a9:6f:c3:b6:ad:
ed:59:64:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 13:43:41 2024 by rpki-client on console.sobornost.net