Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/l_FK0CssUN0sgZfMRLtfZVOvdjI.roa
File: l_FK0CssUN0sgZfMRLtfZVOvdjI.roa (raw, json)
Hash identifier: 6nE1MBiCTX3ng4E5TzO1ux8Qb2P69EN5hKtLglU5lSc=
Subject key identifier: 97:F1:4A:D0:2B:2C:50:DD:2C:81:97:CC:44:BB:5F:65:53:AF:76:32
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CA9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/l_FK0CssUN0sgZfMRLtfZVOvdjI.roa
Signing time: Tue 30 Apr 2024 19:23:35 +0000
ROA not before: Tue 30 Apr 2024 19:23:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19625 (0x4ca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 19:23:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=97F14AD02B2C50DD2C8197CC44BB5F6553AF7632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:4a:be:77:15:64:56:cf:4b:09:19:41:1b:
bd:4f:11:46:22:cd:8f:76:33:d1:75:5e:eb:a4:b4:
e2:d4:fb:19:4c:35:75:e9:f7:f8:08:64:92:91:a7:
18:87:3c:f1:a5:93:7a:ac:3b:d2:81:de:79:e7:8c:
f9:8a:7b:86:5b:48:28:3c:9f:01:82:5f:5f:b0:93:
1b:65:91:76:f0:88:0e:78:13:8e:f3:b6:56:de:c6:
d3:23:38:12:22:86:f4:10:87:36:ce:60:87:1c:71:
a1:33:60:8c:4c:a3:1e:35:b6:37:0b:24:82:38:dd:
5f:1e:0f:44:87:d7:72:41:7c:10:54:24:1a:f6:28:
31:ff:bf:34:85:25:c6:09:45:b4:6a:89:44:01:cd:
ae:90:06:24:c7:ef:41:48:8f:ce:c1:6f:00:92:16:
fe:9d:f2:24:f8:0c:9d:54:c4:76:2c:58:93:4e:27:
fa:1b:4d:35:6a:26:f0:1f:12:0c:30:ad:90:a9:48:
c9:32:55:80:51:2a:d9:83:83:d8:21:00:56:55:fa:
79:39:a9:34:de:3f:7d:59:f4:87:7c:33:23:eb:86:
59:cf:1a:17:fd:fe:f5:4e:40:69:48:01:93:44:9f:
1d:69:23:d5:0c:4b:1c:df:27:e2:5b:4d:fc:09:99:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F1:4A:D0:2B:2C:50:DD:2C:81:97:CC:44:BB:5F:65:53:AF:76:32
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/l_FK0CssUN0sgZfMRLtfZVOvdjI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:51:9c:eb:f5:90:7b:f9:02:8c:f0:0f:87:29:c9:95:ba:19:
cf:71:41:e6:30:17:38:18:22:ad:c2:98:45:03:e0:56:e7:95:
24:e4:ee:8b:6a:32:d7:51:b9:b0:dd:7b:53:f0:00:ad:8c:1b:
39:68:9c:12:65:06:18:61:fe:3c:61:72:99:9f:22:7c:31:26:
80:89:a8:3a:c6:a2:30:ed:0d:cf:9a:45:bb:85:bd:a0:23:d1:
db:99:30:a9:9d:17:fb:0c:ce:9b:7a:ee:99:c8:15:02:9d:dd:
62:84:04:9d:44:5a:54:6b:c3:f4:d4:25:59:bd:69:06:29:16:
5a:ca:0c:62:1c:48:5d:9f:13:fe:e9:0e:55:cd:57:aa:55:c9:
46:5b:75:46:6b:c2:db:e0:44:51:54:2e:8e:16:a1:91:ae:ec:
32:58:5c:b8:e0:fa:e8:d1:6c:8e:7e:51:05:44:95:42:71:39:
aa:a4:8d:cf:2d:5e:09:53:6e:73:73:ec:5e:35:3d:8f:fe:df:
95:8e:9c:64:d8:cd:1b:2b:b6:28:23:e8:59:23:b0:a4:0d:80:
6e:0e:9e:e3:ff:cc:40:e0:62:e3:2f:80:ba:b9:66:1f:aa:35:
cb:55:0d:43:76:fa:81:b5:75:57:07:23:99:28:96:5b:96:7d:
23:3a:b5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 00:37:56 2024 by rpki-client on console.sobornost.net