Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/arNGo6r9ULNKgQHtO66P7111_qI.roa
File: arNGo6r9ULNKgQHtO66P7111_qI.roa (raw, json)
Hash identifier: o8kCoOBBr/OUWv1vyQIyXA1QWbiz4lUOsitYrS8E4Q4=
Subject key identifier: 6A:B3:46:A3:AA:FD:50:B3:4A:81:01:ED:3B:AE:8F:EF:5D:75:FE:A2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 45C2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/arNGo6r9ULNKgQHtO66P7111_qI.roa
Signing time: Sun 21 Apr 2024 14:23:07 +0000
ROA not before: Sun 21 Apr 2024 14:23:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17858 (0x45c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 21 14:23:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6AB346A3AAFD50B34A8101ED3BAE8FEF5D75FEA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:f5:e9:1f:9d:29:9f:c5:cb:b1:6c:e8:17:
f5:64:03:fe:1b:c8:14:3a:94:9b:3b:e6:dc:5c:75:
f4:34:3a:a4:06:fd:b0:3a:4d:1c:8b:5a:e7:44:ff:
8c:3e:b2:e9:8a:9d:42:f5:e6:67:5e:db:97:b8:da:
5a:21:25:a6:8b:a2:10:46:ae:c0:0e:45:c5:4f:30:
97:8f:6e:3d:44:b9:e7:80:cd:5f:f0:7b:e9:4d:12:
26:cc:31:88:83:a4:22:64:bb:9c:6a:93:1f:47:20:
13:1f:81:78:f9:f0:58:ee:20:42:2d:a5:47:a2:c4:
7d:ac:35:95:9b:02:b7:2b:b2:28:9d:5e:33:4c:77:
ff:91:bf:9f:94:ea:84:50:70:7f:49:46:04:3a:13:
d5:b1:13:48:0b:5a:66:15:d4:b2:5a:8d:30:31:bc:
06:b6:ae:ea:b0:00:f8:bb:98:c2:c6:ad:c6:62:5f:
ba:0e:0b:06:18:04:c7:27:93:84:e4:38:6d:61:86:
06:71:88:87:fe:2f:82:e9:9d:7d:ba:7c:6f:2a:f9:
79:fd:fa:61:09:87:20:dc:f9:b7:a5:f9:81:17:49:
01:49:e8:05:80:35:e3:dc:fe:57:9a:8f:3a:c6:ff:
9c:7f:8a:21:f2:48:e6:dd:ca:99:4a:4b:7a:bb:4f:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B3:46:A3:AA:FD:50:B3:4A:81:01:ED:3B:AE:8F:EF:5D:75:FE:A2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/arNGo6r9ULNKgQHtO66P7111_qI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:36:0a:66:80:70:05:a7:fc:1c:50:41:02:6c:b1:1b:dd:e3:
32:fc:88:d6:b7:49:30:dd:39:41:58:ff:81:36:a6:3f:e9:60:
68:75:88:1b:c4:24:2a:d5:33:0a:97:65:f8:d5:3c:9c:a3:17:
a3:b5:00:c7:1a:04:c2:36:a4:28:b7:05:1c:12:f3:81:99:c4:
e7:25:b1:5a:e9:ad:66:2a:46:03:01:e6:5b:0d:c1:df:ae:50:
c9:60:56:b8:ae:85:9a:d4:ff:8d:3a:56:36:12:71:12:fb:df:
54:be:97:4d:d3:5b:ec:47:3d:b5:c3:fd:b3:28:73:d7:b9:3c:
0f:66:30:f9:1f:1c:59:48:e5:d7:f3:3c:11:cf:a5:e3:03:b1:
1e:b7:24:a4:0f:bd:44:19:bf:5b:36:ae:c7:37:be:a9:c6:50:
0a:32:4f:f0:10:05:4c:eb:cc:93:fe:87:5a:40:9e:6f:a3:c4:
45:9f:9e:40:fc:e2:92:18:b6:1a:73:c6:57:a3:9d:f3:f8:5f:
f2:84:57:b8:c6:7a:67:43:d6:aa:55:5e:f3:a0:fe:b3:26:ac:
13:6a:24:e3:e0:54:ff:e2:ac:98:db:1b:9e:8f:37:24:e6:f9:
77:dd:a5:3e:c1:f5:84:b4:dd:24:05:70:3a:01:9c:8a:3c:66:
55:41:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 19:48:16 2024 by rpki-client on console.sobornost.net