Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xQYd2onTtwXDrYZgaqElOUczVGA.roa
File: xQYd2onTtwXDrYZgaqElOUczVGA.roa (raw, json)
Hash identifier: EBfq9g7Y5Ee4uz8rm48lHJMA9LEjVIgQEHDQ+XATa9E=
Subject key identifier: C5:06:1D:DA:89:D3:B7:05:C3:AD:86:60:6A:A1:25:39:47:33:54:60
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5672
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xQYd2onTtwXDrYZgaqElOUczVGA.roa
Signing time: Mon 13 May 2024 20:24:08 +0000
ROA not before: Mon 13 May 2024 20:24:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22130 (0x5672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 20:24:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C5061DDA89D3B705C3AD86606AA1253947335460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:2f:73:b2:ec:9e:8e:78:57:4d:27:4e:59:
65:91:71:82:ce:ef:95:f6:c0:29:1f:79:c4:0c:aa:
6e:9e:5d:5d:cc:08:66:8d:36:1c:f3:dd:d7:3f:85:
39:4a:45:65:7b:29:37:0e:6f:65:62:62:4f:a0:1e:
90:b9:e5:af:e4:30:1b:30:3f:f5:4d:d2:d4:5b:52:
c7:92:00:02:94:f5:71:47:64:fa:b3:e8:ba:6a:1d:
95:23:86:f0:66:f3:8a:da:a8:8b:a5:31:ec:b9:54:
b0:44:8b:67:22:ea:b2:36:82:e3:37:8e:d6:c8:1e:
c1:b5:6d:ba:49:58:cf:0c:4e:cc:93:c6:43:95:37:
35:c5:06:19:1f:f2:80:10:57:5a:03:eb:e5:b4:e7:
ea:43:31:97:c2:1c:82:b7:db:4d:7d:9b:7f:f6:c3:
f1:7a:3b:bf:f8:85:5d:f0:e9:5e:0d:5c:10:35:96:
49:c7:ef:b6:18:9f:55:35:94:cc:00:9d:ba:9e:f3:
56:09:8f:6d:e4:e0:e0:97:ea:a2:b0:c5:ad:8d:0b:
12:dd:9b:2b:b0:9f:71:3e:66:87:e7:bd:d0:d6:b7:
bf:c3:46:79:7f:bf:cf:55:c5:88:4d:81:f3:a5:53:
4d:d1:de:da:36:6a:0e:34:9f:f4:37:56:37:4f:3b:
d3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:06:1D:DA:89:D3:B7:05:C3:AD:86:60:6A:A1:25:39:47:33:54:60
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xQYd2onTtwXDrYZgaqElOUczVGA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:6f:56:a6:44:1b:3d:6f:be:9b:a9:df:2c:12:9f:7c:a0:72:
7c:44:fd:1a:50:d9:70:ae:39:01:56:28:06:db:e3:8f:6a:f1:
bc:e8:7a:e4:f0:71:9f:f8:37:a4:e7:e0:5b:81:ef:75:6f:cb:
bf:63:6a:15:8a:29:fc:2a:d9:d4:0a:96:ac:72:17:47:71:59:
17:2e:20:ee:38:bd:7b:84:67:88:82:33:7c:d2:07:03:42:ae:
32:0c:34:df:5e:93:fe:e9:3a:1d:e6:22:97:b9:80:07:52:d0:
23:5d:a4:ee:72:89:ce:22:2d:f0:d4:2e:7b:88:c1:34:b6:66:
89:bb:3b:bc:d7:f4:c7:1f:80:33:2b:29:09:8a:82:50:e6:8c:
9c:3d:b7:41:68:95:30:af:24:3d:95:5c:10:6e:9a:a4:5d:4f:
6b:e0:18:a0:08:16:33:ff:37:a8:09:25:46:d9:67:aa:ef:6b:
ad:5c:51:e7:0e:e8:e3:b7:69:b6:41:ee:b5:53:b3:98:7c:2e:
56:19:95:d6:95:22:42:ef:4a:08:75:54:52:fd:a5:ea:49:2e:
b9:da:40:63:b9:20:21:e1:39:0a:61:d7:e1:0a:84:9f:f8:d1:
ac:b5:3a:8f:c3:ec:91:f9:2c:5c:90:ac:b4:f7:ed:d4:de:eb:
bc:ff:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 01:48:24 2024 by rpki-client on console.sobornost.net