Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/uwKvGOTocBF1uvOYSxNARZDyj7M.roa
File: uwKvGOTocBF1uvOYSxNARZDyj7M.roa (raw, json)
Hash identifier: JYkmUqfLZ+jrdP74b2fsBJiJj2rnLI/sIi//qUezy2k=
Subject key identifier: BB:02:AF:18:E4:E8:70:11:75:BA:F3:98:4B:13:40:45:90:F2:8F:B3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 47E6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uwKvGOTocBF1uvOYSxNARZDyj7M.roa
Signing time: Wed 24 Apr 2024 10:53:14 +0000
ROA not before: Wed 24 Apr 2024 10:53:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18406 (0x47e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 10:53:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BB02AF18E4E8701175BAF3984B13404590F28FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:1b:78:4c:6b:81:ed:2a:e0:0d:c7:61:d8:
1a:80:6b:a3:e8:4c:5b:b1:2f:9c:fe:c3:21:ef:10:
44:92:20:95:df:bd:22:88:ad:82:38:2c:43:b4:c6:
1a:4e:51:ee:2b:bf:eb:3c:07:1c:36:5e:a6:14:f2:
34:83:37:30:af:40:3c:43:a3:2f:89:72:a7:df:d1:
6a:cb:e2:26:d7:10:12:c0:0c:e5:00:78:3a:dc:7f:
cd:d1:01:95:f5:36:c1:a7:28:ad:ab:9c:64:6e:f0:
48:84:4f:b8:a3:bf:1e:0c:a9:ce:8c:bf:4e:80:42:
8c:f3:31:28:e0:39:bf:d3:81:8a:fc:ab:02:57:98:
63:93:bd:b9:dc:67:e2:2b:ba:ef:db:72:22:3c:16:
f7:96:ca:fb:95:ce:b9:68:cc:af:e7:7c:b7:21:bd:
0d:00:07:34:07:0b:4a:68:dc:fb:18:bb:4f:cb:6e:
c4:da:df:d0:ef:6c:01:17:25:fd:9a:d9:f1:7d:18:
ec:d2:66:fa:6b:64:8c:f4:e7:2e:3b:93:3d:14:b9:
cb:91:12:e5:27:40:d3:cc:ee:66:a4:50:d6:be:83:
0f:5f:26:6a:04:76:d0:02:be:f5:f9:f6:cc:20:a5:
2b:58:74:84:2e:b4:60:1a:2d:25:8c:3f:26:a5:9d:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:02:AF:18:E4:E8:70:11:75:BA:F3:98:4B:13:40:45:90:F2:8F:B3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uwKvGOTocBF1uvOYSxNARZDyj7M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:af:db:8e:eb:e5:71:07:7c:27:61:c9:3d:20:c5:be:72:8d:
f0:90:1c:c2:06:f2:e4:2d:f5:db:6e:78:d1:b7:23:ab:7c:d3:
99:81:04:d1:4b:a0:cd:95:10:74:3c:01:71:eb:9b:cb:31:b2:
1b:c4:40:cf:7b:b0:0c:1f:8e:5f:69:86:a1:70:34:d2:d7:ee:
19:35:49:63:81:f8:92:f3:6d:78:58:cb:3b:19:79:62:6e:f7:
73:f9:31:d7:8b:c5:46:2d:2a:fa:1a:9e:a7:13:aa:ee:ad:60:
6c:f5:08:54:1a:04:5e:73:b3:f5:71:c6:5f:2d:96:9f:0c:82:
eb:35:f6:34:1c:d8:92:f3:c7:86:08:e4:c0:3d:82:6f:95:81:
46:1d:51:3a:76:63:41:e5:34:e8:48:57:a8:c9:4f:ac:d0:65:
8c:c6:b0:19:1b:a6:f4:89:07:c1:45:09:04:08:2b:1c:26:79:
02:9f:74:10:b9:1d:f8:e0:d7:85:70:7f:d2:27:ea:fc:6c:b3:
a5:27:28:e4:32:ba:18:5d:e9:20:aa:06:00:24:00:d0:c1:bc:
41:32:d2:6c:71:83:f2:25:05:72:91:cf:84:e8:4d:84:0f:a6:
b4:e4:f0:82:3e:88:82:3a:84:82:91:ff:4a:15:53:4c:80:87:
1e:f7:1d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 17:55:40 2024 by rpki-client on console.sobornost.net