Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sIKgrZmAXl85qb_IAnAZkPUErBU.roa
File: sIKgrZmAXl85qb_IAnAZkPUErBU.roa (raw, json)
Hash identifier: xIT4KpE/qip3bCCze4DDJSaaa0Q+ICHhkkskcNrBqqo=
Subject key identifier: B0:82:A0:AD:99:80:5E:5F:39:A9:BF:C8:02:70:19:90:F5:04:AC:15
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 552D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sIKgrZmAXl85qb_IAnAZkPUErBU.roa
Signing time: Sun 12 May 2024 03:54:24 +0000
ROA not before: Sun 12 May 2024 03:54:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21805 (0x552d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 03:54:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B082A0AD99805E5F39A9BFC802701990F504AC15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:25:b6:e4:c3:d0:ce:9b:a0:7e:b8:95:b0:
58:63:49:32:e6:88:b2:58:45:20:53:ef:21:2d:c2:
ae:c9:74:7f:55:6f:60:71:dd:0e:3a:c2:de:d2:1e:
59:4c:2b:2c:57:37:83:aa:08:35:73:df:ff:29:f5:
9e:ce:5d:1e:99:23:df:09:da:9a:a8:c4:e0:31:0e:
a8:d9:9e:07:fa:76:0d:30:5d:9b:f5:d7:1e:5d:63:
32:86:21:a6:02:a9:73:fc:16:1f:dc:60:fa:21:0d:
85:2a:ae:90:92:24:f1:ab:6f:82:1a:f4:ff:bd:a5:
31:4f:cf:98:c3:59:24:c4:76:8a:f4:6d:f1:ed:73:
f5:26:cd:0b:8a:8b:10:fa:c2:24:09:bd:89:27:76:
dd:20:82:3e:be:b1:5a:3e:27:63:e8:5a:10:a5:84:
52:c0:d1:0e:23:e3:76:bb:a5:02:4a:24:ef:c8:27:
2e:76:f1:81:cc:b0:68:d9:a2:9c:ff:f9:17:aa:34:
a1:ce:43:f8:b1:0f:fc:73:d5:a0:94:fc:6d:4e:bf:
83:13:a3:d5:b5:eb:75:5d:8f:75:8a:8e:5e:f5:85:
ea:29:64:ba:e4:90:9e:7e:9b:77:e8:98:9f:59:92:
80:40:bc:85:89:de:1f:33:39:76:34:b4:0f:5c:63:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:82:A0:AD:99:80:5E:5F:39:A9:BF:C8:02:70:19:90:F5:04:AC:15
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sIKgrZmAXl85qb_IAnAZkPUErBU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
41:75:93:f9:13:6f:10:a5:b1:f4:d7:ba:dd:16:b4:ad:28:0b:
63:db:b3:b0:49:44:1b:47:16:34:e3:74:a4:1b:b7:14:f3:db:
a9:0d:53:89:5b:e1:03:e6:50:b6:27:b0:46:be:ea:d6:11:02:
bf:3a:70:4b:20:3a:ac:c3:0f:bf:4a:45:59:1b:f7:4d:cc:06:
97:3a:69:05:07:37:75:16:dd:8a:25:0d:87:53:aa:af:56:1e:
47:79:52:9d:4d:2c:8e:dc:14:de:88:d8:61:72:73:04:eb:41:
4b:c0:f2:ed:1a:00:c0:fc:19:35:3a:d7:35:dd:d1:0b:2d:1c:
4f:f4:d5:3a:a9:b5:7f:36:72:2e:ec:6f:d9:cb:d2:88:2a:51:
da:d6:48:79:1c:8f:0b:32:2d:27:0e:d1:4f:f5:aa:b0:16:a1:
aa:b7:52:39:f2:ca:b8:e0:59:7d:5d:3b:da:42:09:64:5b:60:
4b:27:8c:e5:ac:33:4c:46:48:17:b9:59:d1:21:9c:a1:40:ac:
eb:00:12:36:d9:9f:5c:db:65:c2:40:e1:52:ae:11:eb:41:5b:
6f:5c:08:14:f6:53:28:0c:68:e6:7b:87:c0:4a:22:53:66:f1:
f3:55:03:51:6e:e6:95:00:6d:0b:9f:2d:ab:fe:02:97:1e:ed:
10:db:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 11:51:32 2024 by rpki-client on console.sobornost.net