Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VZPkRIM01ppGHUR_U07r31K5S7Q.roa
File: VZPkRIM01ppGHUR_U07r31K5S7Q.roa (raw, json)
Hash identifier: qNK/ohquBC7Q8W3vB+USdN/U6Jms0sHahw9CtV0NwQ4=
Subject key identifier: 55:93:E4:44:83:34:D6:9A:46:1D:44:7F:53:4E:EB:DF:52:B9:4B:B4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 383E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VZPkRIM01ppGHUR_U07r31K5S7Q.roa
Signing time: Wed 03 Apr 2024 13:52:20 +0000
ROA not before: Wed 03 Apr 2024 13:52:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14398 (0x383e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 13:52:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5593E4448334D69A461D447F534EEBDF52B94BB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:11:4d:4a:9c:41:bc:44:1f:31:e4:8e:75:
82:6f:af:75:fe:91:2d:ed:04:73:e7:ca:1e:3c:7d:
5a:e2:1a:e9:8c:11:7d:37:f7:e9:1a:1e:dc:c0:03:
e5:91:c0:54:79:10:a3:d3:31:b7:d4:b9:06:5f:91:
01:fa:45:3a:00:62:b3:6a:60:e9:d4:f8:fc:0b:e3:
cc:a3:cb:65:ba:8b:26:03:0c:dc:12:75:37:6e:46:
2a:d6:6c:4b:a4:d3:3b:35:9a:38:ef:8d:13:66:ac:
30:bb:90:f1:0d:34:fd:57:d8:27:12:7c:80:20:56:
29:55:20:1d:98:22:12:12:4d:9e:64:3b:21:8d:07:
48:8b:04:e6:e7:af:5b:bf:36:05:6b:22:98:9d:e4:
d9:80:d9:c6:16:e6:bf:8e:61:df:5f:09:01:3b:2d:
b4:25:38:01:99:ec:0a:86:8b:14:4b:3a:88:ac:f3:
df:8e:ea:25:17:1e:27:98:6b:c8:f5:e9:87:88:17:
85:8f:9a:79:0e:42:3f:62:36:39:70:6d:c3:1d:62:
74:44:38:54:59:a2:84:b7:0e:27:94:50:d6:a8:55:
cf:3e:32:84:db:a0:db:fe:91:bb:ce:ae:65:94:3a:
cf:7a:06:b7:01:75:a3:15:68:43:a1:05:41:70:57:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:93:E4:44:83:34:D6:9A:46:1D:44:7F:53:4E:EB:DF:52:B9:4B:B4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VZPkRIM01ppGHUR_U07r31K5S7Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:1c:ae:41:86:c9:c3:5d:12:66:d4:fa:82:b5:ec:c9:6a:80:
8f:51:f1:5b:96:7d:a9:fd:60:ee:3b:ba:16:9c:eb:df:01:a4:
d9:b4:97:cf:d5:c4:a9:98:5c:41:b1:60:e2:a6:cb:13:dd:12:
9d:d8:2b:3a:9c:b0:59:b9:51:62:17:80:63:49:d7:92:bd:3a:
f4:d3:03:73:81:df:37:e4:88:72:04:38:bf:a6:b6:2d:2d:d1:
6a:9b:c9:78:cd:76:35:d7:40:c6:96:58:c2:61:5f:e0:a8:1c:
b9:63:3f:49:cc:44:dc:5d:83:a3:53:c3:24:bd:91:18:1e:d3:
78:fe:23:d8:af:13:fb:64:aa:c3:1d:1f:6e:98:ec:c0:fd:62:
19:7b:7a:e5:98:63:18:f3:7a:1e:36:12:0d:d2:bf:14:64:26:
26:cc:ea:5e:eb:8b:2f:5d:28:5d:75:d1:9f:85:15:ab:c0:3d:
2e:64:26:4c:87:1c:04:35:21:27:6f:5f:30:c4:a5:48:59:de:
84:9e:ab:7b:b0:15:30:fa:ed:80:37:7a:a4:86:b3:d4:91:f4:
2a:44:29:25:88:14:d1:bc:64:8d:99:13:b5:3b:86:f1:76:44:
d3:a8:b7:20:e2:c9:37:56:d2:fe:30:cb:63:6b:90:2f:27:e6:
5c:af:a6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:17:17 2025 by rpki-client