Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZTxc6iPD8uZbcWTT5X3LXafAj1Y.roa
File: ZTxc6iPD8uZbcWTT5X3LXafAj1Y.roa (raw, json)
Hash identifier: qHh7x0/NxobH3P9iZl+VMrr1ITxHgkUT9op7xs8ejYE=
Subject key identifier: 65:3C:5C:EA:23:C3:F2:E6:5B:71:64:D3:E5:7D:CB:5D:A7:C0:8F:56
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 32FA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZTxc6iPD8uZbcWTT5X3LXafAj1Y.roa
Signing time: Wed 27 Mar 2024 13:22:02 +0000
ROA not before: Wed 27 Mar 2024 13:22:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13050 (0x32fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 13:22:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=653C5CEA23C3F2E65B7164D3E57DCB5DA7C08F56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:0d:7a:56:bd:a4:5d:79:71:42:26:62:c7:
82:9d:26:69:05:92:f6:cb:59:91:cb:77:07:50:70:
08:93:c0:87:e1:44:6b:6f:3c:21:4b:a5:16:ea:b9:
02:ef:02:4e:4a:e1:1b:6e:41:33:9e:19:0c:73:30:
cd:35:f8:85:e6:8f:e4:48:d6:ee:31:4e:73:e6:d1:
7e:0c:60:4f:e3:28:70:72:97:6b:c6:fe:e6:e1:5f:
4e:c2:e2:fc:15:c3:89:8f:5e:16:9f:ba:a3:50:cd:
a3:52:dc:fd:68:6a:4a:de:e5:ba:dc:44:b7:9e:14:
1a:91:e2:e5:ac:e2:03:f0:83:a8:f9:2d:2a:93:18:
62:d3:93:8e:87:bc:92:0d:4c:12:3e:a3:4a:88:aa:
ae:07:d9:3f:cb:eb:26:81:0c:c8:5b:e5:3d:fd:ab:
44:e1:82:f7:b0:6d:bd:cd:a4:10:96:a2:a4:0f:b5:
58:31:e2:58:b3:26:fc:c5:72:f3:ea:3b:e5:a5:05:
7d:c0:43:9b:17:77:a5:d4:62:d0:f0:2c:7f:44:f3:
59:d7:63:aa:e9:3d:79:10:c2:32:bc:2c:23:e7:37:
ad:03:21:2e:92:d8:d5:00:f2:93:9e:9e:59:aa:5d:
38:18:62:d9:19:01:80:a4:68:d5:c5:86:59:f0:bf:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3C:5C:EA:23:C3:F2:E6:5B:71:64:D3:E5:7D:CB:5D:A7:C0:8F:56
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZTxc6iPD8uZbcWTT5X3LXafAj1Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:e6:25:07:07:de:e7:a1:dd:fa:9a:17:03:50:a0:b5:df:22:
1b:18:3e:7d:a8:9b:c3:9e:be:04:94:9f:e1:db:c0:14:da:50:
36:f1:96:5c:ed:79:9a:a3:08:f1:17:32:29:72:c7:8f:7f:06:
00:0e:cd:1b:11:94:ae:95:b5:14:88:7e:57:20:32:81:68:b9:
86:c9:0d:75:70:33:06:ab:97:78:74:58:73:94:4e:6d:e4:51:
76:7b:f5:79:b2:e1:18:62:66:b9:c2:d8:eb:cb:ab:f6:88:18:
76:ca:4b:80:3f:53:9a:e0:b9:be:5c:6e:9f:aa:d9:b2:ed:4c:
52:df:b9:96:3b:83:ae:47:94:25:89:11:cd:19:54:89:7e:a5:
5e:1d:9e:88:54:97:4c:4c:f1:04:1f:42:9d:41:2b:a6:ce:0b:
ae:d5:c6:c1:73:6e:d0:f5:2c:aa:6a:01:2f:78:74:6d:d5:9e:
33:c9:1b:3a:4e:7c:a1:60:a1:3f:2e:01:f0:3a:3a:27:c2:d3:
ab:34:c9:fa:d2:74:1b:53:ea:55:2d:d8:37:fa:95:e9:b1:3a:
a7:e9:64:44:37:33:66:b6:50:0c:d7:45:a9:7f:29:0a:24:cf:
6d:df:d2:49:69:13:26:82:1a:0b:15:6b:92:73:bc:31:44:8c:
5c:1a:29:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 20:11:32 2024 by rpki-client on console.sobornost.net