Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Oe3SZykFmK3QdkZau7eyjtX89Ow.roa
File: Oe3SZykFmK3QdkZau7eyjtX89Ow.roa (raw, json)
Hash identifier: 6ldPhGoi6z13RyRtoo7YrPun1H0HebwBWRj+G3Dfc8c=
Subject key identifier: 39:ED:D2:67:29:05:98:AD:D0:76:46:5A:BB:B7:B2:8E:D5:FC:F4:EC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FDE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Oe3SZykFmK3QdkZau7eyjtX89Ow.roa
Signing time: Sat 13 Apr 2024 17:52:53 +0000
ROA not before: Sat 13 Apr 2024 17:52:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16350 (0x3fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 17:52:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=39EDD267290598ADD076465ABBB7B28ED5FCF4EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:73:98:f9:47:d2:04:23:23:db:ac:74:71:
26:66:19:dc:08:40:b2:1e:f7:f7:6f:89:44:42:de:
55:e1:3f:67:52:8a:44:86:fc:48:8c:ed:11:54:42:
92:6c:4f:1c:a9:8e:de:9a:a5:53:ba:e5:3e:9e:b1:
01:83:76:eb:6a:c0:eb:d8:04:e4:14:a4:90:05:df:
1e:c9:b8:e5:e5:82:a3:fd:34:bc:de:5d:68:0b:0c:
2d:2c:82:ef:bd:16:ea:e1:b9:78:a9:f0:d4:48:5e:
6b:ef:4d:ef:77:0e:ba:88:fe:e8:28:be:a6:6f:3f:
be:a0:53:eb:65:73:ca:95:64:2b:db:f6:61:27:df:
36:da:79:36:04:50:c5:d8:4e:2d:03:27:26:25:33:
aa:23:bc:cd:40:fc:01:5a:93:87:a3:07:26:26:30:
60:84:4c:8c:ad:14:1e:eb:77:d5:19:d8:a2:13:35:
97:54:71:b5:c4:7a:59:df:93:f9:6a:40:0d:1c:75:
28:9e:0e:17:fa:c1:bf:67:1e:61:28:0a:b5:ae:d0:
ce:23:94:7a:a5:8e:b6:74:ea:c9:c0:9f:98:cc:23:
4d:ed:c5:a5:d6:f4:f0:73:b1:65:95:96:8f:d8:75:
dc:10:b9:25:28:04:71:01:35:a5:c8:ff:95:09:6c:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:ED:D2:67:29:05:98:AD:D0:76:46:5A:BB:B7:B2:8E:D5:FC:F4:EC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Oe3SZykFmK3QdkZau7eyjtX89Ow.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:ce:8f:cc:e9:12:45:94:53:fa:26:28:a7:61:31:9a:fd:d3:
d9:5c:e6:4e:10:0a:ec:34:81:01:9a:84:44:38:37:a0:70:22:
c9:de:a3:0f:f1:0e:82:4d:7b:28:42:6e:ce:39:c1:b5:73:79:
38:6f:85:da:d1:be:42:42:0b:ca:5d:31:d0:3f:c1:01:57:d1:
97:67:a6:8c:33:41:6e:bc:d8:44:a3:e6:a1:c0:e2:23:1c:64:
6f:f6:91:38:fb:63:16:52:ca:55:92:ee:69:41:23:2c:24:0f:
3a:b5:7f:8c:e0:dc:5f:a4:d6:33:1c:f1:fe:32:9b:01:35:f4:
74:f7:6c:42:fe:98:29:83:ba:c7:be:ac:20:d8:6c:d3:19:e1:
a4:b3:ed:2c:4a:b1:28:cb:09:e8:c5:e7:0c:3b:d4:82:93:74:
f3:4f:f7:62:b0:3d:0a:eb:a7:4e:dc:b6:94:3d:ae:a8:a4:c2:
4a:f1:af:07:57:a9:f5:e9:34:67:10:36:35:c3:f2:e2:f3:b2:
43:9c:9a:3a:59:e6:36:40:22:0f:fb:2a:e2:74:59:1b:7a:34:
67:0f:cd:3b:de:ef:34:49:5f:77:56:80:33:30:4d:ec:07:a9:
dd:09:62:49:11:3d:69:14:de:a4:a7:99:02:72:2a:bc:f7:53:
fb:5f:fb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:02:59 2025 by rpki-client