Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/e45z3uxBqOo4tuqIXV64iAoN-uE.roa
File: e45z3uxBqOo4tuqIXV64iAoN-uE.roa (raw, json)
Hash identifier: nv0lrTIRxAEDb3mWu/Vz8GhVTvsiW0nnJ/8jQ88DjnI=
Subject key identifier: 7B:8E:73:DE:EC:41:A8:EA:38:B6:EA:88:5D:5E:B8:88:0A:0D:FA:E1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 404A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/e45z3uxBqOo4tuqIXV64iAoN-uE.roa
Signing time: Sun 14 Apr 2024 07:22:52 +0000
ROA not before: Sun 14 Apr 2024 07:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16458 (0x404a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 07:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7B8E73DEEC41A8EA38B6EA885D5EB8880A0DFAE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:49:16:a4:1b:a7:26:2c:e3:88:e7:36:84:
ce:0c:2e:49:47:b7:46:73:9a:37:68:94:ae:ab:61:
a0:7e:49:dc:d6:bd:bf:5e:28:e4:bc:a1:c8:8d:20:
5d:c4:3d:30:c0:2c:e6:88:5b:e4:d2:72:99:5f:52:
93:6e:1b:c1:42:56:d1:aa:84:7f:1d:9f:aa:bd:a9:
00:76:8d:fd:c8:7c:35:af:00:d0:c4:93:b7:5d:8d:
c2:03:6b:be:94:80:ac:c7:19:49:27:b9:46:cd:57:
64:45:8e:98:17:b6:01:9c:be:e2:95:63:ca:36:ee:
ce:78:24:e4:f8:57:92:50:44:c0:f7:33:a6:53:09:
ba:c9:9d:a4:09:cc:ed:ff:62:ac:9b:9d:d0:de:3a:
0b:0e:fb:79:4e:6b:fb:57:a6:8a:f7:96:a6:b2:4f:
99:ae:e2:ac:aa:a7:23:4d:1b:2b:b2:aa:11:fd:a7:
dd:b8:db:94:4e:4c:21:14:35:b5:92:62:aa:63:01:
5a:88:43:37:96:8f:a1:b1:91:2f:27:90:5b:cd:a9:
3b:c4:c6:ee:6d:92:e7:75:cc:b6:ff:b8:8a:dd:1c:
43:48:4f:dd:07:02:fb:74:01:a2:2a:10:80:e7:a2:
04:96:b1:42:15:21:47:c7:02:e7:fb:8e:5e:43:6b:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8E:73:DE:EC:41:A8:EA:38:B6:EA:88:5D:5E:B8:88:0A:0D:FA:E1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/e45z3uxBqOo4tuqIXV64iAoN-uE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:11:ca:9b:b4:09:93:c7:e1:57:20:d2:27:1f:08:87:96:27:
90:b0:6a:7c:ef:37:fa:67:c7:41:15:eb:99:86:94:76:31:18:
8d:bb:83:0a:50:30:26:14:fe:ea:05:66:b0:1b:a0:a0:3a:4e:
59:eb:12:72:3f:45:e9:d2:0f:2b:3f:1e:08:c9:33:61:a6:96:
e9:41:88:fb:e4:c0:a1:f8:21:e6:62:de:e5:c2:a0:ef:5a:39:
ff:ff:10:76:62:02:b9:ea:37:03:ca:03:89:76:02:6c:e9:e5:
c8:1d:44:d1:fa:f9:7c:d1:3c:9d:0f:11:b7:39:44:8f:85:46:
09:7f:6a:12:01:74:c9:62:44:fd:9e:32:e3:8a:c8:ba:9c:8a:
0e:b8:8c:8f:b7:d4:cf:13:e9:8e:ff:71:67:1a:0d:0e:39:7e:
bb:44:43:da:b6:9f:d0:d2:fa:2d:ea:79:20:a8:06:c2:21:7e:
27:34:16:f5:4f:96:4c:28:32:c2:71:7c:c6:ad:f8:4b:4a:d5:
33:92:41:bb:c2:f6:20:34:bb:9a:97:93:42:42:72:13:aa:91:
a4:7a:2b:59:4e:d4:c5:c0:a6:e9:60:f7:73:41:40:fd:72:3c:
b6:84:91:9b:bc:96:68:e4:38:87:07:9f:5f:f0:ed:8e:0c:48:
6b:f2:af:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:05:32 2025 by rpki-client