Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/uupRs9UTsyJWIPTWjhO-OdJaxbE.roa
File: uupRs9UTsyJWIPTWjhO-OdJaxbE.roa (raw, json)
Hash identifier: WSMXBUL3cu2O9wqo8ZIfBOpEZmtBm2xSzcZBey9W2XU=
Subject key identifier: BA:EA:51:B3:D5:13:B3:22:56:20:F4:D6:8E:13:BE:39:D2:5A:C5:B1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E3E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uupRs9UTsyJWIPTWjhO-OdJaxbE.roa
Signing time: Thu 02 May 2024 21:53:43 +0000
ROA not before: Thu 02 May 2024 21:53:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20030 (0x4e3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 21:53:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BAEA51B3D513B3225620F4D68E13BE39D25AC5B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f1:69:e6:3e:d8:ee:d5:71:bb:f0:38:4b:18:
23:c6:4e:21:c6:e0:a1:4b:e9:c8:b0:c0:6e:0d:81:
ad:93:69:2c:4b:81:83:3d:23:2b:01:f4:e3:f3:4b:
c2:db:32:c5:7d:a3:41:b3:7d:00:ed:be:31:8f:ae:
38:e3:af:ab:21:7e:41:db:f2:09:58:e7:f3:e9:61:
a3:45:90:5f:f9:82:94:6a:62:05:8c:8e:87:32:af:
d8:cc:37:ed:03:08:f7:3f:0e:4e:97:5d:2a:cf:d1:
7c:d4:35:41:29:48:0b:4c:85:cd:eb:15:6e:eb:dc:
c0:3a:0d:b8:3a:af:38:79:b8:f9:19:73:7d:41:d9:
47:64:8c:80:81:4e:2d:fb:cb:c7:db:f3:d8:87:96:
83:e8:84:f1:28:9a:d6:f4:3d:83:38:45:56:6c:9f:
89:b8:45:e3:01:f0:79:dc:d5:bd:8a:b2:d8:0e:ff:
84:67:91:38:0b:0f:5d:80:a7:4e:b8:b9:7e:d4:b7:
9e:53:5d:1f:57:f4:55:75:8f:c6:36:e8:47:ef:df:
83:a9:5f:af:8d:07:33:e0:23:a9:41:84:1b:75:72:
c8:1d:92:50:9d:2d:3a:0a:3d:5d:61:e5:a6:5e:31:
2f:8a:cd:45:4f:85:bf:2d:1f:9f:c8:cf:83:b6:5a:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EA:51:B3:D5:13:B3:22:56:20:F4:D6:8E:13:BE:39:D2:5A:C5:B1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uupRs9UTsyJWIPTWjhO-OdJaxbE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:03:91:0e:2e:5b:be:04:9a:71:d2:96:87:17:85:45:b4:5a:
0b:41:93:26:b0:51:f8:e3:5d:78:ce:20:5c:c2:e7:20:ec:eb:
d5:eb:a7:8a:2a:95:56:04:d8:99:4d:c8:82:f0:56:32:11:88:
45:9f:ec:de:18:b1:c2:15:28:0c:0f:51:82:62:ec:c0:e1:01:
af:3a:19:32:ad:ee:53:ba:cf:30:f6:aa:06:49:4d:6a:63:3f:
29:2a:e6:d7:73:98:e4:2c:1a:d5:6a:a3:b1:af:d2:b2:7c:5d:
2b:f4:1b:9b:d5:db:5a:55:f6:9b:03:87:64:3a:14:c5:43:10:
81:38:75:eb:27:2a:b0:e5:c2:3c:db:27:45:94:b7:bc:03:9b:
8b:ed:46:26:4b:95:d0:a8:2b:9c:89:d2:2f:07:b4:bc:d3:f1:
2b:c5:94:d9:74:de:73:b6:90:e6:1b:ad:39:b2:d8:c2:84:85:
b1:6a:35:d3:88:d0:62:cf:3c:7a:f2:46:b5:9d:a3:4c:13:4e:
d6:13:82:78:77:bb:fe:d8:03:05:1f:60:81:06:c0:69:fb:7c:
80:bb:b3:4d:9b:10:fa:8c:87:ce:95:cb:14:d8:68:32:a5:cf:
db:5d:2d:dc:b3:81:b6:c6:66:9a:f2:ad:7c:62:d7:da:58:00:
e2:cd:b7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:21:28 2025 by rpki-client