Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yl6qUl9leDuVjDE-Co2CAUxjdc8.roa
File: yl6qUl9leDuVjDE-Co2CAUxjdc8.roa (raw, json)
Hash identifier: MeOZXHR7C+XJCi259HeIel+ghqZWqToTsLWJLJJhy8w=
Subject key identifier: CA:5E:AA:52:5F:65:78:3B:95:8C:31:3E:0A:8D:82:01:4C:63:75:CF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D5E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yl6qUl9leDuVjDE-Co2CAUxjdc8.roa
Signing time: Wed 10 Apr 2024 09:52:40 +0000
ROA not before: Wed 10 Apr 2024 09:52:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15710 (0x3d5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 09:52:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CA5EAA525F65783B958C313E0A8D82014C6375CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:5d:01:70:39:fc:ca:52:6e:58:cb:76:75:
4d:89:72:4d:b1:4f:df:63:86:42:5c:d8:08:b0:53:
ba:41:fc:f9:83:1e:21:0a:46:25:4d:0d:8b:ee:3e:
44:c4:c7:65:b1:61:e2:d2:98:00:0a:aa:e2:e0:4a:
09:ce:ea:6c:f0:17:a2:6f:ba:4e:61:f6:c8:bd:7f:
d4:a7:2a:9e:9e:b5:23:3f:6d:01:95:18:da:82:89:
b1:60:dc:e6:a8:59:76:79:d7:ac:05:29:24:15:2d:
b6:04:8d:e2:98:7e:ab:1d:a6:0e:4c:e6:42:95:3c:
f8:fe:cd:8b:c6:4e:15:5e:9b:fe:5e:dc:37:e7:46:
58:25:7b:81:7d:19:e5:63:c3:73:49:d8:48:2f:0c:
38:16:d7:fb:ba:0f:f2:32:a2:47:cc:37:b6:23:be:
89:9c:b2:30:5d:e6:34:b4:0c:c3:52:21:bb:1b:6a:
38:12:07:8d:0e:8d:45:18:a9:ff:c3:b1:3f:6d:08:
16:de:92:08:5f:c4:3c:02:63:bf:b4:bc:c8:04:83:
a1:f3:1d:c9:b1:29:ec:2d:e9:15:b2:41:10:de:b3:
2c:57:ef:1e:98:1a:5e:e8:e3:e6:b0:e7:1d:96:6e:
8f:f2:b1:23:b2:f2:95:e7:ca:b0:02:f4:a1:2b:e2:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5E:AA:52:5F:65:78:3B:95:8C:31:3E:0A:8D:82:01:4C:63:75:CF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yl6qUl9leDuVjDE-Co2CAUxjdc8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:53:fa:83:79:83:a6:28:53:bd:32:71:17:6f:32:4d:7d:46:
b6:49:4b:c2:2d:54:e6:61:a3:81:9c:f8:f3:03:ec:86:d6:6c:
86:ae:a3:f1:92:10:0c:23:5a:c6:21:83:7c:c2:83:62:e8:ba:
e4:19:c7:47:d1:36:b5:c6:70:c3:77:95:6b:5e:94:f5:9f:82:
cf:ed:3d:97:d2:d3:be:88:f3:73:a1:b2:5c:4a:66:b3:48:e9:
14:84:41:5e:87:db:f8:00:47:76:5f:7a:fc:11:86:87:3e:08:
61:1f:96:7e:9e:07:9d:bc:e6:e4:bb:41:0e:58:e3:a2:e7:8f:
ff:dc:eb:f4:e5:6d:43:41:f7:ca:7d:4d:f8:0f:6b:41:27:3f:
d7:49:66:85:43:1f:05:37:74:b4:f8:0f:bb:e9:08:78:74:44:
c2:e0:08:36:7d:1f:c5:66:bc:fd:ab:49:ec:61:ef:e9:b9:bd:
02:0c:08:30:27:09:03:05:01:89:0d:22:ae:f1:08:14:8c:64:
9b:c3:15:74:1e:d8:50:f2:39:6f:ed:b7:fb:ac:f0:db:a8:78:
b9:b2:94:32:b5:ad:71:51:82:32:61:1b:24:27:74:ca:73:75:
85:c8:62:5e:02:e3:bb:cb:4f:a3:2c:43:d4:e8:22:3d:25:88:
cc:d4:c9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:17:29 2024 by rpki-client on console.sobornost.net