Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hpEfuJsNqd66RItB8amcoQp784w.roa
File: hpEfuJsNqd66RItB8amcoQp784w.roa (raw, json)
Hash identifier: Ge2fWDpx5DpLRlZMr5YsxOkrJSlzjWJab37M9f2lZyU=
Subject key identifier: 86:91:1F:B8:9B:0D:A9:DE:BA:44:8B:41:F1:A9:9C:A1:0A:7B:F3:8C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35F2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hpEfuJsNqd66RItB8amcoQp784w.roa
Signing time: Sun 31 Mar 2024 12:22:29 +0000
ROA not before: Sun 31 Mar 2024 12:22:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13810 (0x35f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 12:22:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=86911FB89B0DA9DEBA448B41F1A99CA10A7BF38C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:47:7f:99:b1:2c:d7:0e:57:b5:3b:e0:d0:
2e:ca:d0:f3:28:92:4f:76:81:b5:fb:48:a3:8f:35:
26:96:f7:78:4e:40:27:25:31:c0:09:e9:93:92:84:
f9:70:fc:8a:68:05:40:c5:74:15:e8:dd:c3:a3:ed:
d6:61:81:3a:98:4c:c5:f9:20:ca:c5:97:58:6f:a4:
38:7e:ce:c4:87:16:91:99:26:43:0e:06:53:fe:23:
38:59:8f:91:1a:8c:2e:32:cf:df:e2:71:9f:ec:7c:
2e:41:41:46:6a:fa:53:5d:72:c8:82:a9:74:be:2d:
b6:01:21:a6:32:00:0b:25:5f:32:16:c6:21:db:f3:
7b:40:7e:61:51:30:c1:24:09:dc:e4:38:dc:e9:b1:
d1:e7:56:a6:3f:d2:6e:0d:ee:8b:ff:15:53:f5:d6:
21:48:ba:d2:09:2e:7e:b0:ed:2f:10:35:e8:08:9a:
08:59:bf:1d:07:d4:5d:b2:ba:72:8e:b5:0b:7e:96:
03:3a:60:47:5e:29:17:b9:ab:90:af:b6:68:7c:b8:
f4:4f:c5:96:e9:64:49:9c:28:00:df:32:77:96:34:
31:ca:3a:6a:56:9c:3c:1c:d6:13:76:61:70:c0:c6:
0c:52:3e:00:4c:82:8a:a1:a9:a4:be:4e:81:2e:4b:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:91:1F:B8:9B:0D:A9:DE:BA:44:8B:41:F1:A9:9C:A1:0A:7B:F3:8C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hpEfuJsNqd66RItB8amcoQp784w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:63:93:1e:7a:87:f0:1e:b6:e5:48:8c:5c:0d:60:cb:8b:a9:
4f:04:96:d3:4c:4f:57:f5:81:77:80:50:7e:45:5b:c9:dc:1b:
c2:57:a8:04:84:a8:bd:e8:0a:65:18:f2:01:6b:6b:41:68:91:
8a:39:c8:fc:62:e8:c1:a4:7f:40:5e:f5:89:85:5c:b7:a9:45:
c8:7c:71:47:4f:11:41:3c:ab:1a:08:3d:a7:75:ba:55:f8:f6:
01:99:a1:77:e9:ce:11:90:7e:da:54:96:e2:df:f5:52:04:42:
e8:a9:3e:07:a3:20:9c:ca:3f:ec:89:49:c2:10:80:9e:87:5b:
bd:8c:e2:0b:9a:ac:9b:e2:9b:12:7a:52:6a:f2:5a:c8:5e:21:
b4:22:34:2a:b5:4d:65:1c:a7:ac:ca:cd:c2:a4:28:ad:69:55:
30:d6:89:df:7d:58:66:11:d5:7b:f2:4f:f8:3d:b8:68:40:97:
59:18:ee:46:d1:53:04:7c:df:37:0f:a0:47:f6:16:9d:f1:18:
a0:53:b3:d8:3e:8a:9a:70:b9:2f:e3:f0:18:3a:f6:09:9f:04:
f3:53:2d:9f:95:d8:50:45:57:0f:d2:4e:5b:c7:67:25:0e:45:
eb:a7:38:24:3a:c4:00:c6:44:8a:e0:53:2f:61:c6:97:6f:fc:
65:90:cb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 16:50:14 2024 by rpki-client on console.sobornost.net