Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/iKWCZlb_Te-4PgFiU6TbLy624Mw.roa
File: iKWCZlb_Te-4PgFiU6TbLy624Mw.roa (raw, json)
Hash identifier: RXRl55u8YFsSuCyVDpyHaKVDfUAjIL23WeO3BDAHEPk=
Subject key identifier: 88:A5:82:66:56:FF:4D:EF:B8:3E:01:62:53:A4:DB:2F:2E:B6:E0:CC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3AB1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iKWCZlb_Te-4PgFiU6TbLy624Mw.roa
Signing time: Sat 06 Apr 2024 20:22:32 +0000
ROA not before: Sat 06 Apr 2024 20:22:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15025 (0x3ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 20:22:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=88A5826656FF4DEFB83E016253A4DB2F2EB6E0CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:c1:b2:7d:9c:89:8c:e6:82:1e:38:44:56:
8e:9e:fc:83:b6:0f:f5:df:1a:3e:9c:69:97:4c:76:
4b:0c:51:7d:33:fa:95:4b:7b:a6:86:e2:b1:8d:06:
5f:6d:35:48:9b:77:18:63:c9:3b:8d:a3:80:a2:f2:
a6:f0:f5:cf:25:7a:14:3d:6b:36:3e:15:19:73:0c:
d3:68:48:22:97:8f:c9:ae:15:d8:98:ee:a9:70:b1:
bf:0d:46:ce:aa:c3:8c:1e:9c:fe:4a:44:68:ff:0e:
74:66:c2:30:c1:37:7b:85:74:89:3f:e1:b5:e2:fb:
7d:60:c9:48:5c:ff:ac:25:05:f5:c3:73:76:c9:33:
04:8e:30:96:d5:7b:af:4b:9a:74:46:48:52:81:cd:
e6:76:97:4c:bc:c0:f3:cc:af:59:e3:07:2c:4c:3a:
45:bd:cb:a9:50:37:6d:f2:b7:e4:f9:21:df:d5:e2:
0a:1b:a1:a5:40:ec:56:03:2b:7f:cb:d6:b1:91:86:
fc:ef:d3:7c:50:61:69:1d:69:1b:1f:d5:1c:9e:37:
80:ef:32:ef:b3:88:2d:d6:1a:fd:00:e6:b4:c7:1b:
56:be:ca:dc:20:40:14:fc:3b:84:f8:de:e1:d4:53:
3e:74:25:5d:b0:2a:30:79:91:2f:f3:19:69:05:c3:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A5:82:66:56:FF:4D:EF:B8:3E:01:62:53:A4:DB:2F:2E:B6:E0:CC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iKWCZlb_Te-4PgFiU6TbLy624Mw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:8e:e6:4a:8c:87:79:7b:db:9a:9e:35:76:4b:80:06:27:c0:
af:30:47:a3:35:4e:fc:7c:fe:e2:c9:ec:e7:c5:bf:5b:37:08:
8b:93:94:82:03:1b:7d:84:35:40:c8:a3:71:45:8b:0f:10:bb:
bb:a9:71:70:fa:4b:27:09:6f:12:34:5c:e2:14:23:a9:fc:44:
15:ee:78:a4:68:18:0b:6e:df:77:51:b5:79:ce:8c:0f:fe:f6:
e6:17:99:cc:68:c3:66:26:bd:95:0b:f2:4b:8b:14:96:0e:e9:
f1:f9:37:45:96:09:59:5e:3b:54:6b:fa:1c:c1:bb:b5:2e:77:
79:7f:35:04:5d:11:14:18:8c:3f:11:a0:4a:8f:34:80:ac:da:
3e:67:1a:e7:12:e6:36:b8:6e:b7:4d:9d:10:33:91:00:b6:9f:
c0:25:80:91:b7:a6:51:3d:ab:2a:04:a5:ba:61:8f:5b:67:7d:
36:72:9c:4d:ae:a7:8f:c3:9e:e1:dc:3f:13:91:55:36:e2:3e:
15:41:19:b3:21:59:68:29:33:75:de:0c:ac:35:f9:54:67:9f:
c5:6d:0c:89:4f:04:c0:62:88:48:b9:65:2b:d2:59:f7:c5:ce:
96:d7:82:e1:ff:c8:8c:a8:5f:94:c2:01:9c:74:ee:b8:1e:da:
22:1b:8a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 7 03:14:14 2024 by rpki-client on console.sobornost.net