Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ujLCkkD6E_4mNpx1QTEPyzqHwIs.roa
File: ujLCkkD6E_4mNpx1QTEPyzqHwIs.roa (raw, json)
Hash identifier: vNeVYuILDfcloOAGx3YptxqcEVeGZo93kXAsv3PD5sU=
Subject key identifier: BA:32:C2:92:40:FA:13:FE:26:36:9C:75:41:31:0F:CB:3A:87:C0:8B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E79
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ujLCkkD6E_4mNpx1QTEPyzqHwIs.roa
Signing time: Thu 11 Apr 2024 21:22:47 +0000
ROA not before: Thu 11 Apr 2024 21:22:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15993 (0x3e79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 21:22:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BA32C29240FA13FE26369C7541310FCB3A87C08B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:70:17:75:31:52:61:5f:87:69:ad:42:3e:
cf:38:46:39:24:0a:e0:c6:3a:72:b3:84:2c:9c:4c:
eb:1a:97:39:7a:8f:78:5c:cc:7a:d6:5a:73:b3:df:
9d:10:d1:af:db:c9:c9:67:8d:7f:a6:99:af:b7:c8:
28:29:c9:18:61:b1:1f:c1:c3:e4:bf:37:66:64:1d:
5f:71:4d:40:3b:a7:c3:b1:e5:91:07:5c:c9:56:c8:
33:a5:a0:d8:b7:2b:7b:8b:85:7b:6b:18:ff:2b:c6:
93:0f:6f:0e:4f:14:a4:3b:98:82:15:21:1a:a6:46:
f3:79:88:36:50:ab:f1:2e:25:53:a5:80:6b:64:bf:
46:b7:c5:9a:ab:aa:85:01:11:e5:9b:e9:be:f4:11:
08:67:24:a1:60:07:01:46:26:31:97:3b:d1:9d:a4:
4e:ef:aa:b4:e6:79:c9:02:6f:d7:9d:e6:c5:d0:36:
31:c8:6b:e8:a4:b1:54:fe:11:c6:d7:f8:05:ca:dc:
f1:9f:30:d8:62:52:bf:78:6f:d4:99:6e:0d:35:c3:
b3:fc:6e:d9:04:55:1c:aa:88:33:6f:69:3b:5a:c6:
c2:6a:dd:0c:40:76:2a:d4:4e:83:d7:c9:16:10:13:
7a:1c:a1:67:e9:3d:02:51:b2:c2:29:6e:3d:32:5f:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:C2:92:40:FA:13:FE:26:36:9C:75:41:31:0F:CB:3A:87:C0:8B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ujLCkkD6E_4mNpx1QTEPyzqHwIs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
56:6c:20:21:95:18:30:eb:e1:d2:4f:a0:77:e3:cb:d1:f1:9e:
c1:b8:b2:f4:21:92:a4:18:a5:c4:d7:c5:4b:5f:98:63:f9:e9:
ba:66:b1:5c:3b:d1:20:40:7d:bf:b9:21:ec:f4:28:8d:21:3f:
9b:71:70:6b:b0:f6:e9:a1:c9:d6:a6:18:39:b1:99:20:b3:7a:
1d:a7:31:ee:c5:13:61:ec:44:d7:c5:1a:24:ae:1a:d9:6f:9e:
61:b7:d0:66:9f:81:cd:e5:5b:eb:e8:93:d5:65:72:1f:b3:57:
91:1f:3b:77:74:bc:9b:12:72:7c:6c:04:5f:e8:52:d9:03:b8:
7d:99:ed:a8:27:b9:b2:44:4d:cf:d2:94:2a:f9:4e:bc:ce:1f:
d7:f0:1c:84:11:8d:85:b9:ec:55:19:ca:18:9e:53:f5:75:a7:
a3:58:5a:27:40:d7:b2:52:39:15:49:fd:09:58:13:f8:91:a7:
4c:c6:d8:ca:12:53:67:a9:35:42:3c:95:9f:b9:68:94:c7:37:
e8:5b:0c:c2:2f:eb:86:e8:44:b4:57:f4:7b:ee:43:e0:cd:48:
d5:28:02:3c:8f:ac:b3:c1:df:29:33:0f:e9:17:af:f0:c1:7b:
0f:11:0a:3c:f7:82:b7:a0:c4:d2:3e:be:74:b9:f7:4a:86:ef:
7b:64:d7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 04:03:54 2024 by rpki-client on console.sobornost.net