Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/uGzL5a76QzyhW3VPGaH1xIY4pJ4.roa
File: uGzL5a76QzyhW3VPGaH1xIY4pJ4.roa (raw, json)
Hash identifier: nD2/HPT0UXgf41F4c6KL72jJZ6P1FpKNYLhmLajJDmE=
Subject key identifier: B8:6C:CB:E5:AE:FA:43:3C:A1:5B:75:4F:19:A1:F5:C4:86:38:A4:9E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B86
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uGzL5a76QzyhW3VPGaH1xIY4pJ4.roa
Signing time: Sun 07 Apr 2024 22:52:34 +0000
ROA not before: Sun 07 Apr 2024 22:52:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15238 (0x3b86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 22:52:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B86CCBE5AEFA433CA15B754F19A1F5C48638A49E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:78:eb:4e:5b:ca:a1:55:6a:ec:38:57:fe:
58:6a:54:00:8a:3d:ec:3a:1d:c9:b0:da:ba:96:92:
7b:8a:60:8c:98:66:5e:63:f8:06:7e:de:ce:73:e8:
c3:a4:e9:05:05:a4:3c:b6:88:b2:63:9b:3c:96:f1:
8b:d6:0d:54:8c:ab:8a:fb:35:68:aa:61:6d:d2:ce:
40:8e:28:3a:9e:da:0c:ba:be:52:4d:76:d5:c9:3e:
dc:cc:2c:88:b9:5b:48:8c:06:34:5c:62:01:66:31:
d6:13:16:38:3a:bc:d8:2f:65:29:39:90:36:12:c2:
d4:1c:4d:11:3f:50:7f:b7:a6:a8:5a:13:d3:c1:7d:
ef:81:de:ad:b9:08:c2:45:a4:d5:1b:2d:7d:13:48:
b7:bf:5b:d3:fe:4f:d4:f1:5a:9e:6b:fb:44:f2:a6:
0e:66:cc:69:9d:73:ec:7e:b9:2b:e4:eb:e9:51:82:
ac:7a:a2:db:bd:46:18:1b:ef:ba:ce:bc:9d:ff:37:
50:b3:45:e5:53:26:1f:e7:8a:18:20:f1:0b:bb:a5:
de:62:55:02:3d:b2:f7:a6:17:b2:cd:97:28:43:e3:
1b:3e:35:01:ad:b2:59:c9:e6:14:75:95:7a:be:7e:
b9:1c:e9:d6:8b:2b:1d:b6:0e:97:95:33:d5:56:f3:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6C:CB:E5:AE:FA:43:3C:A1:5B:75:4F:19:A1:F5:C4:86:38:A4:9E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uGzL5a76QzyhW3VPGaH1xIY4pJ4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:05:6f:9b:82:7f:07:28:90:23:bc:48:3a:9b:02:1f:60:c1:
b5:0b:67:4b:61:40:46:59:c5:eb:55:10:e3:89:78:99:09:5e:
f6:99:13:99:a9:61:c8:70:c7:c2:4f:12:52:cf:58:12:9e:cf:
c4:4d:a0:f2:c4:43:2a:c7:22:b4:19:18:ed:26:c9:86:7c:0e:
c0:a7:38:04:4f:08:a5:b8:0a:8a:e6:72:39:c9:1f:ca:6e:6e:
f7:4a:16:b6:6a:da:cf:5d:33:31:b4:ed:31:e1:87:b9:8f:d7:
6b:04:69:e2:16:95:9d:07:b2:8b:ca:25:49:c0:e7:b5:52:cf:
4a:77:0b:d8:4d:00:25:84:3c:49:56:3f:ac:67:54:da:b7:cf:
db:fd:67:c6:d1:b1:28:a2:89:bd:56:d7:51:9f:47:6b:48:77:
12:2d:8f:cd:35:f9:51:8c:10:05:ca:d7:88:be:e1:f6:5c:42:
86:ea:d3:0f:71:9b:c5:99:57:26:8b:b9:51:68:af:74:19:be:
2a:1f:8d:5d:00:e5:7c:af:34:46:9a:5e:8d:25:80:30:e8:b5:
ff:1c:f5:98:0b:ac:57:7d:7e:10:76:a9:32:59:08:2d:88:ed:
07:12:5b:51:b4:81:87:59:c4:cf:63:75:f2:56:05:b2:ab:1b:
dc:b8:56:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:48:42 2025 by rpki-client