Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RB0y-ek3DG82UlsXN8mYLela5e8.roa
File: RB0y-ek3DG82UlsXN8mYLela5e8.roa (raw, json)
Hash identifier: TZNSXN6eVya+JidZOCfn/+PUR0V7S9vyYF6B9guqCjc=
Subject key identifier: 44:1D:32:F9:E9:37:0C:6F:36:52:5B:17:37:C9:98:2D:E9:5A:E5:EF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4BAE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RB0y-ek3DG82UlsXN8mYLela5e8.roa
Signing time: Mon 29 Apr 2024 11:53:32 +0000
ROA not before: Mon 29 Apr 2024 11:53:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19374 (0x4bae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 11:53:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=441D32F9E9370C6F36525B1737C9982DE95AE5EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:2c:f8:30:69:57:6c:59:be:cd:7f:c3:9b:
76:db:84:d5:83:29:ac:3f:4d:d1:34:b1:e4:83:0d:
cf:0f:67:13:47:72:a8:de:7a:35:10:4e:a9:18:5e:
29:f0:31:26:2f:1c:db:01:cc:20:fc:3f:d8:fa:12:
2d:03:9c:c8:f6:97:a8:81:70:92:93:e5:f2:b7:94:
9f:85:d9:11:ce:77:ef:83:2d:e9:ba:47:19:a7:54:
20:da:5c:86:03:5d:40:85:0a:b9:a8:13:9b:2f:1b:
90:9b:38:80:4f:bf:0e:a0:c2:18:67:1f:74:dc:8e:
fd:d9:b0:02:05:b8:54:fe:ff:d0:38:e9:3e:4f:a6:
69:a3:d9:0c:ba:0d:5d:5f:d0:94:cb:77:a7:77:b1:
6a:b0:b2:d7:5c:94:6a:9c:e6:be:52:cc:8a:f2:bf:
25:71:49:cd:41:36:7b:2e:95:5a:50:fb:52:29:95:
fd:fd:86:50:24:90:05:62:ef:47:24:21:e3:ef:61:
64:7b:e5:a5:35:62:ee:ea:78:8b:26:c6:22:73:3a:
69:9f:95:e1:4e:96:43:ce:6a:56:94:05:e5:58:e2:
80:e0:16:60:cd:18:62:f9:cd:d1:05:9c:84:af:a7:
81:6a:16:d1:e2:4c:e0:fd:bb:e5:b3:37:60:f0:50:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1D:32:F9:E9:37:0C:6F:36:52:5B:17:37:C9:98:2D:E9:5A:E5:EF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RB0y-ek3DG82UlsXN8mYLela5e8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b8:a4:cc:32:8c:5c:e2:01:22:bf:23:02:5c:45:67:e6:57:d2:
1a:b5:06:d8:0e:5c:8f:61:e9:01:53:c0:8b:37:59:32:9e:32:
a7:0f:ce:a8:2b:ac:a2:14:90:5a:71:a3:ec:19:81:f9:36:ed:
36:cb:ec:fd:6a:1e:58:b3:bd:40:44:1a:63:4f:17:81:f2:0a:
75:6a:ad:5d:e6:60:63:8e:eb:79:36:c1:a4:19:78:2e:8c:2c:
0e:5e:94:ec:50:62:27:11:a0:a7:e5:06:d5:15:87:7d:f9:4f:
b4:c6:15:16:1d:84:62:e4:2d:70:6f:9d:7f:6c:03:02:03:63:
00:d2:6c:2a:04:be:07:37:3a:00:5b:d2:8b:0d:29:5c:45:5f:
95:45:fa:3e:1b:3e:ff:c2:ce:26:95:84:7f:f0:60:61:a1:34:
50:83:f6:0d:ed:8d:31:e0:b3:2d:8b:30:a2:24:ff:97:52:ee:
04:33:dc:1b:bf:b2:6d:0b:33:65:fa:54:04:fb:00:fb:a0:ce:
29:53:3d:65:cd:9f:19:17:e4:64:d9:63:83:c9:2d:81:32:71:
19:3e:7c:e1:e5:65:72:3f:b4:92:4e:21:a4:97:db:7b:25:2d:
56:26:27:ea:67:9d:8e:d5:26:ce:14:14:0d:12:41:72:36:0d:
9a:ef:68:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:42:34 2025 by rpki-client