Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GutDnWFCR5Cdp85qipDPGDsobIs.roa
File: GutDnWFCR5Cdp85qipDPGDsobIs.roa (raw, json)
Hash identifier: h/ffIlFW3MrGnKkxPL1xJeoukzgJDQE9ZkJMTb1unV8=
Subject key identifier: 1A:EB:43:9D:61:42:47:90:9D:A7:CE:6A:8A:90:CF:18:3B:28:6C:8B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3331
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GutDnWFCR5Cdp85qipDPGDsobIs.roa
Signing time: Wed 27 Mar 2024 20:22:01 +0000
ROA not before: Wed 27 Mar 2024 20:22:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13105 (0x3331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 20:22:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1AEB439D614247909DA7CE6A8A90CF183B286C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:bf:4b:37:f3:5d:16:c3:3d:f7:3b:96:9f:
47:b0:bc:7f:42:74:06:fe:14:a4:d4:cc:e0:51:cf:
51:25:fd:14:d4:f5:d5:a5:83:92:90:7d:c8:94:79:
79:1d:ae:3b:ac:44:00:36:77:f0:ec:ca:62:bf:b6:
ab:53:69:aa:fe:ed:ad:f1:32:a5:f6:24:b2:ef:ad:
a1:f8:95:0c:23:bb:af:21:e1:11:91:2d:ef:f9:7e:
66:44:d9:55:0d:aa:6f:1b:10:20:6e:1a:3c:90:42:
85:03:08:9f:69:88:15:e4:41:99:ba:ff:24:4b:24:
77:92:47:77:bc:7b:67:90:ca:d1:d5:a9:f5:6c:af:
05:46:12:02:4e:9f:32:71:59:c5:9c:2e:2a:cd:03:
29:29:24:a9:28:7a:2e:aa:73:01:df:ff:bf:c0:e5:
78:71:52:7a:a1:ee:ad:16:48:a2:df:8b:2f:49:22:
21:e8:f5:4f:be:ef:3a:d3:ee:76:05:d5:0f:a8:ee:
8d:60:29:03:9e:30:b3:c6:ef:f2:37:86:31:05:c8:
71:33:53:09:af:3b:fc:6d:c7:64:90:cb:66:22:93:
2f:7e:60:ce:8e:67:2c:12:0f:3c:43:c0:2b:f7:38:
5b:fa:1d:39:4f:9e:10:78:9f:48:01:43:33:57:9a:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EB:43:9D:61:42:47:90:9D:A7:CE:6A:8A:90:CF:18:3B:28:6C:8B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GutDnWFCR5Cdp85qipDPGDsobIs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
31:f5:57:4b:47:00:b7:1a:86:1b:5f:fc:3c:fa:e1:6a:91:98:
c3:00:26:35:cc:f0:14:a6:ad:27:59:75:9e:91:dd:07:cf:df:
80:0f:73:1a:6e:88:20:d5:88:0b:3e:3f:43:c7:78:b0:d7:28:
0c:ee:cc:96:8a:a3:b4:11:be:d6:a0:c3:4d:20:60:8d:1a:52:
91:d2:fb:30:aa:79:c8:92:a4:8e:6e:69:cf:29:95:1e:ab:e9:
c8:69:6a:8a:d3:4e:7c:64:9b:ec:13:32:23:3d:2a:35:43:31:
72:59:91:5b:3c:93:49:50:52:6a:8f:f6:f2:86:ec:d6:93:7e:
0a:0f:e9:54:73:58:5a:34:3c:0f:3a:3f:93:e4:cb:f0:c3:08:
c2:86:cb:c0:33:64:5c:d8:0a:b8:75:c7:7f:eb:f9:7b:01:48:
5d:c6:bc:92:94:91:36:f5:da:e0:61:28:e2:af:96:43:98:18:
7e:63:a1:86:f3:5a:06:2c:f5:fa:2c:f4:04:23:85:ee:08:a6:
60:4e:b0:46:e5:df:78:6b:17:a1:0b:d8:cb:59:90:54:26:6d:
4d:02:63:dc:ef:1c:ba:2f:df:4a:a0:6e:a1:72:39:11:87:98:
9c:98:a1:15:da:36:7f:09:41:98:a3:a2:56:e6:a0:c4:55:8d:
41:60:04:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:37:48 2025 by rpki-client