Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tWFBh9cWbM1GYWv5PhAHP8ydxDQ.roa
File: tWFBh9cWbM1GYWv5PhAHP8ydxDQ.roa (raw, json)
Hash identifier: M0TtdLO2lMGeC/jUzxOw3ILQL7AmoYvB/nkM84E4fCc=
Subject key identifier: B5:61:41:87:D7:16:6C:CD:46:61:6B:F9:3E:10:07:3F:CC:9D:C4:34
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54CA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tWFBh9cWbM1GYWv5PhAHP8ydxDQ.roa
Signing time: Sat 11 May 2024 15:24:03 +0000
ROA not before: Sat 11 May 2024 15:24:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21706 (0x54ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 15:24:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B5614187D7166CCD46616BF93E10073FCC9DC434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:32:32:8f:2d:73:18:2e:a7:62:65:46:9f:
6a:29:39:84:eb:31:64:f4:eb:73:bb:b8:f1:2e:d1:
ea:13:24:25:72:d2:51:6f:26:af:e9:5a:0d:38:35:
2f:8b:bf:3c:36:ed:a5:53:63:8a:87:b0:ff:2d:f4:
dd:39:df:c1:70:13:e4:1f:5d:e0:54:51:c1:f6:43:
bb:82:ec:5c:3b:88:14:63:a3:51:9c:9a:2e:63:4b:
13:20:55:af:3d:53:0d:5a:c8:84:a6:a8:29:75:f9:
ff:e5:86:ff:28:88:22:ee:11:37:f8:44:45:60:ec:
f9:2a:86:c1:d6:ba:0e:4c:07:fd:f8:11:58:17:f4:
6a:4e:d7:98:0c:61:d9:41:c1:71:0e:78:e1:39:29:
26:6e:4c:70:90:59:35:45:50:47:f8:14:96:21:b1:
28:75:52:17:d6:15:b9:20:d6:4b:90:ca:17:bf:f8:
ef:57:f9:8e:fb:cb:40:3e:43:b2:5d:57:c4:55:cc:
81:df:ee:9f:bc:57:cf:6c:13:83:07:3e:fe:04:fb:
12:ad:08:38:b5:27:c9:a2:c5:b8:d6:4a:4d:db:2c:
a2:76:eb:ca:12:d3:6c:be:ab:bd:5d:e0:e1:f8:4c:
08:a3:b4:3f:cc:21:9b:ac:82:2d:22:61:7d:0d:20:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:61:41:87:D7:16:6C:CD:46:61:6B:F9:3E:10:07:3F:CC:9D:C4:34
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tWFBh9cWbM1GYWv5PhAHP8ydxDQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:ed:13:2d:35:de:28:89:a7:de:cb:f3:cd:11:e2:d3:e8:1b:
67:71:90:2f:73:45:33:f3:95:aa:30:2d:8c:8e:28:65:c8:8b:
33:48:eb:5d:1d:f4:b3:52:cc:17:73:19:2e:6a:44:33:4b:36:
a5:86:e4:d5:70:a6:11:9f:ec:ec:14:15:54:72:96:ee:d3:65:
38:1a:38:ae:bc:49:54:5c:69:31:71:61:4a:7b:c9:6c:44:2a:
a8:fa:84:39:b4:9b:a6:1e:d4:38:b9:e5:ce:f2:ad:18:81:13:
ac:6a:84:f6:21:25:10:a0:04:1c:fb:a4:99:55:6c:f4:9c:71:
4c:f3:68:3d:9d:54:f4:1b:93:0f:3d:1c:89:05:dd:c9:a1:8d:
18:2a:1e:a3:30:72:56:eb:6b:9c:2c:e7:cb:01:e1:6a:48:4b:
35:cd:b0:6c:df:70:61:2d:93:c9:95:82:6a:46:75:08:f3:8f:
d8:92:d5:e7:32:ce:1d:38:47:33:5a:eb:c6:ec:ff:b4:de:4d:
a9:a0:78:00:dc:d6:57:b3:27:9d:cf:0f:e5:13:b3:30:ed:67:
0b:00:95:df:9f:02:fa:e1:b8:82:a5:e1:e3:dd:0b:6c:5f:6c:
19:90:e7:de:ae:d7:7d:7c:e9:b6:08:38:63:41:e2:af:55:c7:
01:65:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 22:22:18 2024 by rpki-client on console.sobornost.net