Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qaBdgFZPidfWnjyxgbumWAyO4FU.roa
File: qaBdgFZPidfWnjyxgbumWAyO4FU.roa (raw, json)
Hash identifier: tgB+wLCsi/hJmfEXvBWVEG/tVAmR7AubaUDqoMYhdsk=
Subject key identifier: A9:A0:5D:80:56:4F:89:D7:D6:9E:3C:B1:81:BB:A6:58:0C:8E:E0:55
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 568E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qaBdgFZPidfWnjyxgbumWAyO4FU.roa
Signing time: Mon 13 May 2024 23:54:18 +0000
ROA not before: Mon 13 May 2024 23:54:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22158 (0x568e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 23:54:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A9A05D80564F89D7D69E3CB181BBA6580C8EE055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:11:4a:05:7d:b2:32:e8:d6:9c:e1:2c:a4:
36:69:76:b8:9f:a3:9a:e4:c4:53:c7:ff:32:88:35:
2d:e3:f3:86:e7:aa:5d:a8:f7:84:0e:3a:f4:19:b9:
0c:8a:0c:ff:2f:b9:cf:1a:ea:22:52:81:77:b7:82:
c0:90:b3:7d:3f:42:6a:46:08:f0:a5:4e:3b:5d:18:
24:7c:6d:33:a3:f9:3a:87:73:8e:22:62:d3:fd:3b:
15:4c:ba:58:3a:3b:11:0f:8d:e2:34:77:f1:97:3e:
57:dd:06:e3:7d:56:0a:97:a2:2c:ed:93:04:96:c3:
72:a5:be:bb:68:97:bc:3e:bb:ab:fd:4a:13:fe:e5:
38:ea:9e:5f:3a:bf:74:05:27:2c:a9:02:48:8d:eb:
0e:f4:12:5c:bd:65:32:71:48:9a:90:01:f4:b9:20:
70:1c:76:0c:95:90:8f:bf:fa:e9:5a:59:bb:20:2a:
2d:68:64:46:04:52:0f:12:60:35:be:f9:48:81:01:
5f:14:95:85:6d:23:8e:2c:d0:28:70:d7:8c:d6:e9:
d8:a2:48:35:35:cd:aa:79:64:51:86:e7:16:0c:3c:
9c:db:16:84:ca:b3:e7:20:7d:90:24:09:c1:e2:d9:
55:3b:85:02:81:9f:6c:42:c6:67:1c:5b:c3:55:74:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:5D:80:56:4F:89:D7:D6:9E:3C:B1:81:BB:A6:58:0C:8E:E0:55
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qaBdgFZPidfWnjyxgbumWAyO4FU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:29:ba:36:18:82:09:7b:5a:b6:88:6b:db:ca:3c:6e:2c:eb:
42:06:72:b7:44:21:11:75:d8:24:68:3d:b2:15:4d:5f:fe:10:
33:0c:95:a2:95:00:20:d9:68:90:bd:28:c4:ce:92:fe:63:53:
c4:5d:98:81:e2:02:c8:d7:71:09:75:47:f6:4b:dd:0c:03:03:
81:fd:b4:9e:a6:20:f6:f8:d1:46:fe:60:1b:75:ab:08:3c:be:
24:cc:09:ee:fb:6a:ce:48:03:2d:7f:ca:a4:1f:2e:1c:06:47:
ea:28:e7:e6:02:df:de:7c:84:66:89:19:7c:83:90:e3:e2:1c:
07:62:40:f9:2e:fc:92:69:d5:33:9f:e0:20:8d:2e:2f:37:e2:
00:97:d1:5c:88:36:17:93:6f:e2:70:1f:ea:14:a9:6c:fc:dd:
96:03:0d:23:e2:c2:cf:11:03:af:13:d3:12:04:24:00:34:b6:
8b:55:86:1e:df:55:3f:fd:b9:b7:ee:b2:af:78:c0:23:06:8c:
5d:17:03:19:6b:d2:79:9a:ab:a2:ea:bc:8e:ee:10:f2:f3:7e:
a9:a1:4c:5f:1b:8b:b6:75:93:01:e8:bd:2c:15:8d:96:28:c8:
a3:9f:2f:9d:5e:c0:29:e6:7f:15:a7:a0:5d:7b:0a:27:f2:10:
7e:78:e4:06
-----BEGIN CERTIFICATE-----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Generated at Tue May 14 04:12:07 2024 by rpki-client on console.sobornost.net