Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oqq45DuvtHxEiZoklWaztSLQ9lA.roa
File: oqq45DuvtHxEiZoklWaztSLQ9lA.roa (raw, json)
Hash identifier: UYYDd43zcwgFnVOXGI1zCbNeJL2uGHXX7+p7MmkuCJ0=
Subject key identifier: A2:AA:B8:E4:3B:AF:B4:7C:44:89:9A:24:95:66:B3:B5:22:D0:F6:50
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52AE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oqq45DuvtHxEiZoklWaztSLQ9lA.roa
Signing time: Wed 08 May 2024 19:54:08 +0000
ROA not before: Wed 08 May 2024 19:54:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21166 (0x52ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 19:54:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A2AAB8E43BAFB47C44899A249566B3B522D0F650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:ef:c3:c7:bb:06:d9:d9:07:47:fb:b9:94:
53:fc:92:22:b7:c3:e7:9e:0c:29:7c:27:d9:aa:be:
77:43:02:57:d7:c2:c1:0d:66:59:59:7a:51:8f:b2:
8f:94:a4:b4:a1:b4:91:46:e4:ea:b7:90:23:cc:f7:
c6:49:8f:f6:59:1d:3e:73:72:63:f9:e5:d6:0d:c3:
e0:bd:37:69:c1:be:3c:79:23:54:80:e8:b3:11:e6:
57:16:08:09:a9:60:d0:9c:46:34:5d:30:14:7e:a7:
5b:05:5f:68:1b:d8:17:7d:2c:46:aa:9f:c8:ca:d1:
f2:f2:22:f4:ae:ae:f2:51:f2:81:80:25:01:9f:1b:
f6:ea:fd:07:b4:40:1f:44:6b:f3:b3:54:1e:f4:a8:
b5:9d:31:68:9f:c4:9b:6d:d9:26:cc:e2:a3:9e:d6:
15:68:7a:59:bf:98:51:62:d6:64:17:20:ac:e0:dc:
d1:b8:1d:b8:12:3c:44:1d:49:d9:80:aa:69:45:28:
32:ce:f5:6a:13:a3:36:8d:f2:76:02:83:bf:a9:d0:
c7:2e:c9:b3:be:b3:1c:f6:7f:10:52:d2:09:8d:27:
8b:da:6c:8f:b3:94:c0:c9:07:2b:e2:e2:c4:59:d8:
6f:20:a1:f7:26:64:5e:32:cf:61:15:5a:61:3c:db:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AA:B8:E4:3B:AF:B4:7C:44:89:9A:24:95:66:B3:B5:22:D0:F6:50
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oqq45DuvtHxEiZoklWaztSLQ9lA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:26:e2:81:66:14:21:01:91:6b:9f:1e:a3:0f:93:a5:f3:de:
99:58:d1:b5:fb:19:1d:75:3c:0c:83:5e:26:d2:4a:79:23:d4:
39:d3:1a:2a:74:01:ff:d0:1c:7c:87:3e:df:3c:a5:bf:44:cd:
f8:57:d3:e8:ca:2a:b5:96:14:1c:ba:f5:d5:51:e2:f3:77:c7:
04:05:6b:56:0d:7c:f2:29:e1:52:1f:f1:8a:b0:90:fb:6b:cb:
b8:d4:4a:69:91:9d:03:62:df:17:84:8e:eb:5a:fb:9a:39:4c:
05:b4:8f:bd:16:ed:07:70:39:43:99:35:0f:cc:54:a8:7b:b2:
77:93:b3:2d:05:ec:a4:73:14:e2:29:f8:18:49:70:2d:9d:b3:
79:3f:31:80:a0:40:ce:80:42:02:b7:86:c7:3a:2f:ff:10:ca:
e3:2b:39:e2:3f:4e:fc:ee:f8:63:89:96:aa:4b:c3:e4:37:58:
f7:dd:dd:44:15:23:10:93:cb:7e:20:32:79:29:d4:91:ba:1b:
8e:18:68:34:d3:e3:d4:4d:c8:97:92:8d:cb:8a:71:d8:3c:fc:
c9:b6:b7:0b:59:59:f3:d8:9c:27:2c:68:7f:55:b3:d4:04:ff:
9c:50:6f:ff:d5:7c:72:96:e2:f5:d8:d5:b4:46:6a:98:46:37:
f4:57:89:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 20:18:54 2025 by rpki-client