Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0ZS3MR9vGYHs3ueBEdHPZ61C__k.roa
File: 0ZS3MR9vGYHs3ueBEdHPZ61C__k.roa (raw, json)
Hash identifier: GO4KD1xwZTTs8ZOUFUGSkF2nMzDAJCOklOpUdSCKr0U=
Subject key identifier: D1:94:B7:31:1F:6F:19:81:EC:DE:E7:81:11:D1:CF:67:AD:42:FF:F9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4462
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0ZS3MR9vGYHs3ueBEdHPZ61C__k.roa
Signing time: Fri 19 Apr 2024 18:23:01 +0000
ROA not before: Fri 19 Apr 2024 18:23:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17506 (0x4462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 18:23:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D194B7311F6F1981ECDEE78111D1CF67AD42FFF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:f3:22:c7:d9:ad:6d:44:89:64:e9:1a:49:
02:2f:c1:bd:88:b1:4f:62:87:2b:bf:a4:df:a2:10:
28:24:4f:3c:96:5b:96:0a:3f:c2:aa:f6:3c:e0:5f:
f9:be:b0:1f:0c:72:f3:7a:59:eb:05:b8:15:b7:bc:
c6:a6:12:b4:5b:bb:85:d9:77:9b:0e:2d:7d:fc:7d:
a7:2f:5a:f6:49:03:48:46:00:9c:74:5e:b1:3e:57:
cc:e8:8a:5b:de:b9:93:ff:63:a5:f1:97:54:e5:18:
41:ff:c2:df:b6:b1:c6:fc:96:60:e0:71:22:58:d5:
d6:c8:77:95:dc:46:91:6f:b1:55:1e:75:66:ec:a4:
3c:57:35:07:05:b4:1a:d7:7e:e0:97:6d:e2:ab:8b:
5a:c4:b7:66:24:a8:af:98:3b:e6:b3:1f:a1:0f:05:
79:62:25:59:1c:76:a4:51:00:f5:29:cf:1f:a3:c0:
47:49:d8:7f:80:13:c2:67:35:d3:68:9f:bd:1b:ab:
b2:8d:b8:f2:a4:11:8d:40:47:4b:05:9b:91:68:db:
5d:57:00:67:4d:bc:17:c6:c2:80:f8:26:b2:02:bc:
ee:cc:0c:93:90:a4:3d:13:76:49:dd:56:be:81:a8:
5d:28:3f:4c:3c:ba:9b:81:43:c6:ed:2b:95:ce:f4:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:94:B7:31:1F:6F:19:81:EC:DE:E7:81:11:D1:CF:67:AD:42:FF:F9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0ZS3MR9vGYHs3ueBEdHPZ61C__k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:11:ad:4d:7c:c6:f5:de:b9:ee:2f:db:c6:00:49:7c:60:dc:
7a:96:65:63:0f:91:db:5f:f3:3d:85:42:79:74:eb:1f:e8:dc:
b8:09:00:58:62:c9:0a:05:10:f3:28:4b:f5:37:79:8b:a6:c9:
d2:28:5b:6c:ae:65:05:b2:a2:1c:5b:e8:00:cf:c2:96:79:75:
90:7f:5e:56:02:6c:1c:0e:5d:55:9e:5c:37:58:2b:19:6f:b8:
08:48:71:ec:96:56:72:53:c5:3f:24:61:44:d0:b6:a3:32:92:
93:72:0d:e8:92:15:29:4f:35:05:33:1d:ca:d7:7f:c1:54:6b:
14:41:80:27:ad:29:8a:1c:e3:73:c7:1a:4a:e7:91:6f:6c:3c:
7c:18:10:08:41:61:66:64:3c:ae:e6:8d:3c:bf:ee:04:28:bc:
6c:b7:21:cc:a4:82:39:9b:95:e8:ae:f9:94:0a:fc:19:11:af:
58:dc:05:a8:c6:e0:65:46:4e:07:33:a0:70:56:7d:d3:9d:1c:
cc:b1:6f:30:50:7a:d6:0e:8b:6c:de:d6:2f:61:33:a4:2c:85:
53:3c:c4:e0:39:db:ce:76:92:a3:b7:4c:f6:73:35:2c:2c:d3:
a1:ec:55:28:9b:3d:93:6a:19:c8:f7:88:c2:df:fe:d2:ef:0d:
cc:9f:92:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 19:21:45 2024 by rpki-client on console-fra.rpki-client.org