Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZZv05lKnBBaELgAZq7uFS4vDxN8.roa
File: ZZv05lKnBBaELgAZq7uFS4vDxN8.roa (raw, json)
Hash identifier: MG54Gk58+qx+Mhn1aR9jlPfcusiUroWrmxpiUiMV7yU=
Subject key identifier: 65:9B:F4:E6:52:A7:04:16:84:2E:00:19:AB:BB:85:4B:8B:C3:C4:DF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B1D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZZv05lKnBBaELgAZq7uFS4vDxN8.roa
Signing time: Sun 28 Apr 2024 17:53:26 +0000
ROA not before: Sun 28 Apr 2024 17:53:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19229 (0x4b1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 17:53:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=659BF4E652A70416842E0019ABBB854B8BC3C4DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:1e:94:06:32:ae:50:8e:17:5f:15:96:88:
39:de:ef:cb:ed:d7:05:c8:b1:66:a9:c9:74:69:f0:
5d:af:6b:9e:6d:11:bc:46:a5:16:6a:d1:1d:4b:9b:
d7:3f:c3:3d:ec:65:fd:8b:d9:65:ec:04:ee:38:e8:
00:9d:84:f9:8b:6d:ed:73:c6:14:6a:c4:b8:57:b1:
e4:58:d7:3c:08:22:1f:57:95:cf:22:f6:88:13:53:
d2:f5:3c:c9:fb:78:34:47:ab:7a:fd:4a:bf:08:0c:
7d:30:85:65:f6:5e:bc:f9:08:ec:1d:14:79:22:28:
97:59:a2:ed:36:45:03:66:d5:3d:64:78:93:be:24:
ee:0b:94:e0:0c:01:73:9a:58:7d:b7:9c:0b:77:9f:
6d:24:b0:1a:8d:69:38:8a:c0:13:32:62:20:d9:ad:
90:87:66:4e:a3:1b:a2:7d:99:0d:a4:5a:0e:44:4e:
c5:3a:0c:2c:e9:ac:06:9b:6c:f0:e1:91:1a:57:77:
b4:b1:41:dc:13:15:1a:b0:cd:6d:70:92:dc:44:fc:
23:dd:8a:50:90:a5:3f:31:68:ba:0b:31:2f:5c:33:
cf:a1:5c:fb:f4:8b:12:aa:08:3b:1a:90:fa:ef:cd:
36:a2:22:e2:01:c7:20:68:b7:1f:e0:e9:41:32:0d:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9B:F4:E6:52:A7:04:16:84:2E:00:19:AB:BB:85:4B:8B:C3:C4:DF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZZv05lKnBBaELgAZq7uFS4vDxN8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
33:fb:0f:0c:04:f4:0f:90:a3:13:ba:89:e4:bd:9e:95:fb:f8:
22:91:04:c2:90:55:9f:b6:79:e3:69:cf:03:db:c3:89:d2:e8:
5e:d5:bf:63:ae:75:42:1a:e0:38:9e:41:63:86:28:93:b2:4f:
d5:89:5c:3e:63:49:ab:82:d1:a4:63:aa:9e:2e:85:46:59:9b:
56:dd:56:34:dd:9e:83:c9:7f:0b:c9:ba:a0:38:e4:7d:76:19:
40:32:36:be:1b:58:7b:c0:ae:f5:23:23:be:a9:03:e1:64:f8:
ca:77:a3:48:82:64:c0:6e:34:a7:fb:f0:ea:a3:49:30:d8:4c:
1f:fc:ed:a9:9d:2b:25:af:67:f3:b6:67:7c:08:25:b3:0b:12:
f5:44:33:93:74:52:ff:a5:b4:13:48:9b:6b:c9:47:e1:4a:d7:
2a:81:99:de:39:20:75:e7:f3:57:02:ff:24:80:f0:83:dc:d4:
ac:5c:2d:c2:4d:8c:71:ad:3b:af:39:ef:82:be:07:90:2d:ae:
b6:4c:6c:67:8a:65:fb:40:48:4b:7f:45:2b:8d:9c:a3:ce:8f:
3f:4e:32:e7:5b:0e:db:14:ca:45:9c:69:b8:b1:c1:e4:4c:0c:
13:3c:77:c2:c9:aa:55:02:28:fd:19:43:78:a8:94:27:af:4d:
3e:69:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 00:39:48 2024 by rpki-client on console.sobornost.net