Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/slwVIS39vGiXT_wBq4TwIJ0vPVs.roa
File: slwVIS39vGiXT_wBq4TwIJ0vPVs.roa (raw, json)
Hash identifier: B2sKEIl43uHW11lEwF40omBZd930OUvCNHN+xnZxX50=
Subject key identifier: B2:5C:15:21:2D:FD:BC:68:97:4F:FC:01:AB:84:F0:20:9D:2F:3D:5B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 444D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/slwVIS39vGiXT_wBq4TwIJ0vPVs.roa
Signing time: Fri 19 Apr 2024 15:53:05 +0000
ROA not before: Fri 19 Apr 2024 15:53:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17485 (0x444d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 15:53:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B25C15212DFDBC68974FFC01AB84F0209D2F3D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:a3:78:77:ab:6d:63:b1:42:5c:ff:cb:b9:
06:bf:97:9e:6a:55:1d:dc:0f:da:cb:f9:ab:bf:25:
8a:0c:f6:f2:36:e6:ae:47:7e:7d:fd:bf:17:26:52:
7b:af:bc:db:01:76:7d:ec:38:6c:1d:7d:13:bd:22:
18:02:bb:09:49:43:31:b0:f7:ed:ff:e9:38:57:6a:
4c:28:ea:7f:2f:41:18:e7:9b:1a:a1:41:70:49:30:
45:b2:49:e0:a3:11:1f:59:ff:5f:fa:76:c9:f8:82:
bf:44:24:d5:6e:0a:32:b1:96:f2:69:ef:4f:75:07:
4b:f9:ff:e5:69:b1:12:2b:27:f9:b7:49:b7:19:18:
f3:a5:bd:5b:c9:ae:76:2a:07:1a:0e:c1:c8:be:2e:
e0:0e:db:37:9f:71:ec:76:5d:41:a8:e7:7d:79:3c:
d5:d0:34:26:6c:0b:1a:d5:c2:91:22:ab:a5:2e:df:
ee:30:b2:3e:44:31:a5:82:2f:29:45:44:ab:98:8f:
84:f4:a6:f0:a4:5e:05:11:0b:73:22:29:0a:09:38:
7e:2f:7a:0f:48:fc:c3:aa:98:b9:78:ac:55:2e:d7:
5a:98:2f:b7:61:2b:28:b1:ef:54:c4:fc:74:5a:c6:
13:0e:45:00:52:0c:7f:0e:2c:21:05:2d:af:01:6b:
76:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5C:15:21:2D:FD:BC:68:97:4F:FC:01:AB:84:F0:20:9D:2F:3D:5B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/slwVIS39vGiXT_wBq4TwIJ0vPVs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
60:64:9e:bb:2b:7c:bf:e8:ce:18:8a:56:38:30:64:f9:9e:76:
e7:de:52:e0:1e:21:9b:8d:9a:c2:f1:e9:13:60:64:8e:8f:c1:
c3:c1:30:f8:f3:69:fe:b5:5c:87:29:f1:50:5c:13:18:c8:f0:
3c:ed:34:92:41:e2:c1:bb:c8:63:4f:07:10:54:68:12:1d:91:
7b:f2:70:7e:28:f8:25:01:31:27:1d:64:1b:97:c6:2f:d2:43:
e1:48:99:ba:58:c6:69:e0:23:a8:68:ef:29:95:f1:f2:f9:86:
01:d6:54:40:06:c7:10:ec:34:9e:b4:29:53:c8:da:ee:9e:e9:
a1:26:08:88:bc:7c:5f:0b:ff:a8:58:93:f3:92:b4:1f:cd:27:
23:87:85:6b:87:8a:fd:12:a7:bb:94:a2:96:80:b9:67:33:f6:
7d:af:be:4c:b0:42:3a:25:7e:fa:f5:2d:0f:8f:1c:34:2d:9f:
bb:cb:44:0f:32:8c:f1:1e:15:3a:68:ff:93:d5:99:e3:e0:64:
48:eb:24:9f:24:7c:17:af:09:3b:6e:6c:62:d3:6f:20:27:aa:
af:56:2a:a2:9f:f3:e3:cc:e9:cd:7c:9e:15:53:31:3d:1e:8c:
79:f4:65:49:63:7b:62:8d:a5:7c:5a:f2:bd:1c:62:16:e7:e5:
8d:f2:1e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 23:24:43 2024 by rpki-client on console.sobornost.net