Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dypAm8lSvCaZuxfJ9Ydfr-aZSpM.roa
File: dypAm8lSvCaZuxfJ9Ydfr-aZSpM.roa (raw, json)
Hash identifier: xrooVDDhZFRDk7ayDafQyAQPMvDrgVmY+T5VF/6sQ5o=
Subject key identifier: 77:2A:40:9B:C9:52:BC:26:99:BB:17:C9:F5:87:5F:AF:E6:99:4A:93
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 47AE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dypAm8lSvCaZuxfJ9Ydfr-aZSpM.roa
Signing time: Wed 24 Apr 2024 03:53:13 +0000
ROA not before: Wed 24 Apr 2024 03:53:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18350 (0x47ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 03:53:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=772A409BC952BC2699BB17C9F5875FAFE6994A93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:f5:0b:97:ba:04:9d:99:21:35:9b:56:8b:
3b:42:65:44:79:85:54:53:5c:fa:02:42:cd:39:fa:
b1:a0:ad:88:70:e4:4a:c2:0b:db:6f:e7:64:35:df:
51:c5:6a:ab:0f:ee:ce:41:b8:ef:5b:a8:96:f4:ea:
4f:66:b1:2d:8e:76:1f:02:66:71:36:65:6f:3f:79:
80:94:33:e3:6b:65:bc:6f:a1:43:23:55:69:bb:57:
11:3a:26:87:e3:2b:da:f6:16:41:a0:a8:c9:cb:d1:
18:13:2f:ff:0f:ea:ed:14:91:2d:b6:20:e7:da:de:
27:5b:58:73:71:70:a8:e7:22:f7:65:66:2c:5c:c9:
86:f1:75:1e:46:1b:d4:54:2f:44:47:38:25:b0:a6:
4c:84:04:b9:dc:99:97:1f:cf:61:5e:58:94:85:27:
62:69:b5:ea:57:55:05:83:65:d2:c5:61:97:83:22:
ca:ca:b1:bd:3a:a0:b5:c0:58:59:c4:61:53:90:0a:
7f:b4:3f:cd:dd:e6:fa:ac:0b:80:6e:09:aa:27:6d:
cc:4d:1d:2b:f6:ff:8a:30:37:b1:bb:99:84:29:8a:
67:37:94:85:9f:41:ed:38:fd:c8:46:02:2b:c8:f9:
1c:5e:71:a5:88:57:68:80:42:52:d5:62:93:89:b3:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2A:40:9B:C9:52:BC:26:99:BB:17:C9:F5:87:5F:AF:E6:99:4A:93
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dypAm8lSvCaZuxfJ9Ydfr-aZSpM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:c0:db:ff:25:03:53:d0:19:26:7d:0e:ba:36:74:19:fa:24:
89:a0:01:a2:c5:99:7d:40:4d:49:52:11:f3:3c:3f:6f:ee:b6:
d1:1a:ec:99:a0:3f:65:c7:6d:cc:b2:d8:df:95:7f:15:c1:e9:
36:b2:ef:f5:73:2d:3d:ab:d5:ae:21:c1:78:a2:e4:a1:c0:c8:
4d:89:bd:c9:a1:31:29:91:ee:00:21:68:ec:67:be:73:a5:8c:
da:12:20:b2:66:f0:fc:7b:f3:7f:04:12:07:4d:93:d8:10:3b:
c1:48:84:5e:bb:ec:ea:4c:00:2b:63:0c:aa:ef:c6:22:34:06:
0c:9f:b1:c9:60:6b:3f:46:ed:8f:75:27:94:1f:62:8f:91:7f:
1c:89:c8:36:eb:64:b1:4a:48:f4:00:3c:4b:3a:4e:45:75:72:
0f:d3:8c:02:f1:2b:ed:33:03:7e:b1:c8:56:4b:f7:94:63:ca:
2a:59:c0:61:ad:0b:4f:2a:70:6b:fe:96:6d:8f:f0:82:79:1a:
92:63:e7:63:55:35:9f:a9:2c:6e:56:81:28:1c:56:2e:4e:40:
f0:93:51:8a:38:a3:1b:a3:4c:d6:8d:94:0c:9c:3a:3b:fc:25:
13:60:0f:94:7f:c3:4d:2e:be:25:13:4e:99:e3:2e:fd:02:45:
02:09:72:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 10:47:56 2024 by rpki-client on console.sobornost.net