Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dxKS0dLEf0NNAZEalQ8Y70uM5NU.roa
File: dxKS0dLEf0NNAZEalQ8Y70uM5NU.roa (raw, json)
Hash identifier: WOUoed2RXB8t/uHQa4hlCtIgRDVk8KeGk4zTLJlkivg=
Subject key identifier: 77:12:92:D1:D2:C4:7F:43:4D:01:91:1A:95:0F:18:EF:4B:8C:E4:D5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 556E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dxKS0dLEf0NNAZEalQ8Y70uM5NU.roa
Signing time: Sun 12 May 2024 11:54:13 +0000
ROA not before: Sun 12 May 2024 11:54:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21870 (0x556e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 11:54:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=771292D1D2C47F434D01911A950F18EF4B8CE4D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:9c:b9:4d:e7:10:70:44:96:44:48:cf:97:
1d:fc:43:81:a2:38:1b:69:69:2b:a9:de:81:1b:db:
ef:a2:b4:cc:4f:a0:26:7f:2b:30:95:d5:b2:b2:ff:
42:d0:80:51:b3:91:f0:50:f7:05:81:f6:fc:4a:93:
f3:15:a8:b8:eb:0c:a9:7e:03:6b:9d:b3:af:e8:fd:
e4:93:d1:21:f6:93:b7:f4:72:a5:ba:24:81:a6:9e:
48:bb:0a:ac:b7:bd:27:04:16:33:88:a8:f6:ce:53:
55:cc:0d:b3:69:1f:98:f5:9a:0a:24:a6:6f:d7:11:
e8:57:83:ed:01:7e:46:e6:96:82:13:b6:dc:78:62:
b8:53:3c:fb:73:d7:46:a0:5a:ac:50:9a:21:70:81:
9d:6b:9d:f8:4a:ed:8f:43:a3:44:c0:94:f9:70:f2:
3a:d1:d4:a4:da:87:f9:dd:6c:6a:25:14:12:20:ae:
e9:56:b3:a2:c9:d9:ab:d4:4c:29:32:10:61:5e:93:
3c:dc:c8:4a:43:47:a7:e5:bd:c8:17:aa:9e:2f:92:
f9:b8:a0:ea:b2:92:10:9c:25:2d:2d:77:3d:d0:7b:
1c:9d:f7:c7:94:d4:fb:3f:88:41:06:85:f0:49:ab:
c0:2a:75:c1:1c:c9:1c:1d:92:f9:62:93:3a:e4:e7:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:12:92:D1:D2:C4:7F:43:4D:01:91:1A:95:0F:18:EF:4B:8C:E4:D5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dxKS0dLEf0NNAZEalQ8Y70uM5NU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:70:f4:bb:64:a7:7b:26:8a:bb:22:a5:57:fe:9f:c2:78:b6:
64:bb:fa:81:1e:00:2f:4f:a0:cf:ff:72:4d:7b:eb:34:55:9a:
ad:46:57:78:a2:7c:f3:17:ab:b0:17:20:0f:84:9b:e2:af:b0:
8f:2a:1b:f1:4c:d8:2c:9d:3c:a5:27:f3:84:70:ca:e8:2e:12:
96:8f:85:87:5d:fa:9c:a9:6d:54:a4:94:1b:1c:f7:6c:2f:6c:
07:41:e5:6e:59:43:67:4b:f6:46:7d:1d:17:cf:93:dd:34:20:
bf:e8:a8:a1:42:8c:75:00:f1:57:d5:25:62:af:07:a2:f5:f9:
6c:44:d7:49:cb:74:ad:55:8a:79:2a:98:46:aa:83:6d:10:29:
9a:9e:77:1f:81:64:1d:ae:0e:0a:87:c8:ef:05:df:e5:38:ad:
56:97:a4:d2:cf:27:d0:82:8a:4d:21:33:ad:5c:19:fa:1d:d5:
49:02:ce:6f:6a:78:a0:20:38:5f:a1:ad:67:c5:32:94:df:b1:
91:a0:f0:2a:4e:cb:ca:ac:b3:dd:ea:0d:be:4b:fd:4b:f2:be:
cb:09:68:33:de:6e:b5:b6:6d:46:71:01:c3:2a:2a:b9:3d:23:
44:36:d5:d5:9e:ad:7c:35:36:84:1b:5a:1a:16:b7:b2:a6:14:
ec:9a:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:41:25 2025 by rpki-client