Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_tdh1kzFvegIEiR0HXuqGg9Vknk.roa
File: _tdh1kzFvegIEiR0HXuqGg9Vknk.roa (raw, json)
Hash identifier: 6x3S4X/RjGpbNXPbf+wksCYLVyWigQxFD5sGTdcJPug=
Subject key identifier: FE:D7:61:D6:4C:C5:BD:E8:08:12:24:74:1D:7B:AA:1A:0F:55:92:79
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43A5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_tdh1kzFvegIEiR0HXuqGg9Vknk.roa
Signing time: Thu 18 Apr 2024 18:53:00 +0000
ROA not before: Thu 18 Apr 2024 18:53:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17317 (0x43a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 18:53:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FED761D64CC5BDE8081224741D7BAA1A0F559279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:73:9b:97:11:ce:89:80:ab:2d:0e:13:49:
fd:50:15:33:01:1b:9b:12:82:8c:86:b2:ea:b5:d8:
e0:4c:8b:5a:ef:0c:34:fe:8c:8e:2d:7f:ca:97:53:
d7:7f:50:13:b3:e7:96:7a:44:7c:28:cb:7c:a3:56:
9d:12:4c:53:ef:3e:90:44:5f:9a:61:ed:75:df:11:
73:d5:63:9b:61:dd:f8:5b:2d:a3:0c:2d:96:ed:03:
d6:26:ba:23:3f:db:59:f5:b7:85:aa:94:3b:ee:fc:
aa:22:51:2b:95:f1:e3:66:2e:15:fb:dd:b8:db:35:
a8:aa:ea:9a:84:fe:7e:ab:7c:0f:57:f8:1f:ba:67:
8a:fd:61:15:50:c3:87:4d:ba:88:c9:55:d9:03:65:
44:94:77:0a:23:97:4b:00:f6:51:9f:57:1b:31:4f:
8a:08:0e:0b:8f:c6:f0:7f:e3:c5:ed:1f:fe:26:bc:
48:a4:1b:09:58:b5:bf:5e:35:48:a8:40:42:50:56:
63:8c:b8:87:ea:c2:0a:2c:f4:af:79:86:2f:8e:51:
68:49:4e:09:5b:72:8b:3a:08:c2:04:65:8d:51:78:
e3:a2:ef:d5:a3:e8:92:d2:cd:de:f7:fa:de:1a:ea:
69:92:64:d3:55:b0:23:d8:34:5b:66:f4:37:cf:e8:
eb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:61:D6:4C:C5:BD:E8:08:12:24:74:1D:7B:AA:1A:0F:55:92:79
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_tdh1kzFvegIEiR0HXuqGg9Vknk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:1b:e2:00:ed:7c:c7:0e:9d:5c:54:a8:9e:95:36:27:9c:9b:
d2:e4:37:7d:2c:5d:67:de:6d:96:e5:05:87:eb:ac:8b:cf:c5:
f7:a5:5d:85:fb:3d:af:0d:85:af:b6:5a:96:06:e3:e0:e9:26:
6c:7e:c9:ed:df:ae:84:8e:53:19:81:36:32:27:d0:94:b3:9c:
67:bd:52:9e:7e:23:8e:b3:f8:d6:4f:d2:3f:a6:cd:f6:e7:fd:
71:55:62:79:5f:4d:15:2b:15:e3:f8:39:c4:e8:c7:db:06:b0:
f4:05:4e:b9:ce:44:4b:59:59:5f:c0:3f:c4:86:4a:22:18:c3:
8f:52:e0:99:9e:f1:fb:a6:6e:45:a8:85:1c:a3:3c:f5:83:e7:
44:82:9a:c1:69:96:47:ee:f5:1c:d9:c4:6c:94:97:24:e4:74:
a3:a0:11:09:e3:82:a0:e5:69:c4:d4:4f:8b:6b:70:ed:fe:d0:
00:dd:d3:48:d0:bf:23:bf:c8:92:ff:34:50:1d:69:7c:fc:d6:
cf:78:7d:c1:60:30:6b:4a:67:d4:65:18:3a:a6:57:26:e6:c2:
d3:ca:18:b6:da:f1:51:8e:8c:da:1c:7a:82:80:50:fc:49:5b:
1e:f0:9e:78:8a:8b:15:17:52:ff:47:96:a5:ed:91:e9:bb:28:
42:ba:2d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 08:12:41 2024 by rpki-client on console.sobornost.net