Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zMcogz-qEY1DYe35yjmrXpbgWog.roa
File: zMcogz-qEY1DYe35yjmrXpbgWog.roa (raw, json)
Hash identifier: yjDbaHtAYj73S/dopD0M5qe56ik0fPeGD17deGtwG+M=
Subject key identifier: CC:C7:28:83:3F:AA:11:8D:43:61:ED:F9:CA:39:AB:5E:96:E0:5A:88
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4386
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zMcogz-qEY1DYe35yjmrXpbgWog.roa
Signing time: Thu 18 Apr 2024 14:53:01 +0000
ROA not before: Thu 18 Apr 2024 14:53:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17286 (0x4386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 14:53:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CCC728833FAA118D4361EDF9CA39AB5E96E05A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:c8:e3:96:44:05:66:2d:55:38:25:62:c2:
dd:32:fc:50:d7:35:85:ff:e5:67:55:75:54:ea:ba:
c6:9e:53:e5:24:64:a3:37:49:89:74:3e:af:1d:dc:
6f:bd:cc:f9:46:01:10:28:3b:e9:01:b9:a9:f1:2f:
1a:66:40:95:b0:12:c2:2d:6c:04:29:87:7e:21:16:
66:0a:a4:52:92:c1:76:62:e0:0d:00:a9:ff:33:27:
1c:10:6f:89:6f:e7:ce:c6:8a:d4:e1:0d:f6:47:51:
b9:b0:58:83:05:77:59:e9:bc:d7:f9:c2:df:7a:84:
bc:7e:0b:41:20:02:6a:64:85:d9:01:fb:2a:42:aa:
4c:f0:e3:87:4f:8c:dc:c7:7c:c0:5d:6d:23:75:29:
8e:47:95:03:c2:42:ea:44:c3:fc:10:26:cb:ed:7c:
90:b8:eb:2f:f4:dc:7e:f6:ed:3b:3e:74:9d:92:0a:
f9:4c:10:08:61:2b:29:5f:78:72:f7:57:74:e3:49:
98:c6:2f:09:48:f7:0f:79:15:91:6c:70:ec:5c:fb:
65:fe:90:53:1b:c2:1f:91:20:35:e2:1c:1b:13:bd:
ca:26:fb:d6:30:14:6c:31:34:cd:22:00:33:86:c2:
68:87:bf:0a:7c:85:7c:a9:df:9b:94:85:38:23:41:
05:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C7:28:83:3F:AA:11:8D:43:61:ED:F9:CA:39:AB:5E:96:E0:5A:88
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zMcogz-qEY1DYe35yjmrXpbgWog.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:9f:6c:20:43:e6:a0:c3:2b:f1:e9:6b:8e:c6:ad:b3:cd:a8:
aa:42:5f:6e:42:f1:bc:a4:43:67:49:5c:0c:bc:95:48:f1:85:
da:9e:d2:69:b9:c8:32:47:b3:f1:ac:be:15:5b:0a:94:89:9f:
3c:95:30:e0:da:ca:ef:02:35:fd:f5:07:cc:11:7f:54:fb:88:
73:e0:2e:68:31:fe:d4:56:72:c5:00:3e:a8:5c:34:c3:69:67:
41:af:3f:79:af:78:2b:5c:67:ff:f3:7e:a0:7d:8e:33:72:53:
fe:4d:8a:6a:98:56:9c:64:22:8a:ab:27:50:28:bf:f6:44:30:
dd:d8:ae:6c:15:82:ee:62:8b:be:1a:3d:3b:13:f1:72:8e:1f:
33:d4:58:7c:3a:3c:54:1f:27:6b:9e:05:1b:c3:3c:39:fc:6b:
94:2f:cc:b9:7d:e6:64:c2:b6:5b:ab:7e:7b:52:a7:08:67:09:
da:27:93:0e:db:cd:20:69:49:65:5a:7b:1f:64:c5:f6:51:83:
2c:d8:81:ee:77:7b:01:4e:b1:54:00:02:89:db:21:6f:db:9a:
fd:db:fe:b0:c6:c4:18:81:ff:23:4c:bb:b2:a0:fa:4f:96:51:
33:dc:c4:ae:61:e6:a7:4e:f6:88:41:b2:ab:62:5a:12:7e:72:
09:41:30:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 22:00:45 2024 by rpki-client on console.sobornost.net