Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/73AeU0Hu1uN14xUQ5tdKLrNJLaY.roa
File: 73AeU0Hu1uN14xUQ5tdKLrNJLaY.roa (raw, json)
Hash identifier: 60abki4C8sYgzNaTc8LaO37HbM7nOQ805kFqVh5nxFU=
Subject key identifier: EF:70:1E:53:41:EE:D6:E3:75:E3:15:10:E6:D7:4A:2E:B3:49:2D:A6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 51CF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/73AeU0Hu1uN14xUQ5tdKLrNJLaY.roa
Signing time: Tue 07 May 2024 15:54:11 +0000
ROA not before: Tue 07 May 2024 15:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20943 (0x51cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 15:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EF701E5341EED6E375E31510E6D74A2EB3492DA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:eb:8c:9e:6c:c2:7e:3a:84:28:de:6f:d8:
e6:a3:bf:ab:e8:93:6f:43:05:3e:ea:6d:ef:98:85:
c1:6b:a2:e2:22:a0:a3:6d:e6:80:bb:a6:9b:f8:d5:
46:1f:0b:88:b9:d5:c4:58:7c:9e:3f:45:53:a1:61:
3c:e8:3c:ac:33:98:4a:8b:26:ad:6d:1d:06:0c:47:
a0:bd:1c:c2:d8:b2:92:e3:0d:f8:69:a9:80:b1:d3:
26:03:46:70:bb:a2:3a:87:f7:87:99:a0:39:c6:68:
7d:b5:24:b0:3c:cd:dd:1b:d5:23:46:46:90:a3:1d:
74:11:26:ad:d5:43:8c:66:15:b1:cc:c9:75:b4:c7:
09:63:02:3b:3c:9f:fc:82:49:d7:a7:fa:2a:9d:e1:
48:4e:c6:80:08:d4:77:d7:8f:7b:e6:6a:04:2b:11:
30:e7:80:37:88:87:56:ca:c7:3c:4e:7a:01:e1:18:
6c:90:ca:d0:fa:37:f1:f2:6e:fd:6c:3d:e4:69:9a:
54:c5:7c:5a:1a:55:21:91:44:22:71:dd:69:4a:72:
38:14:da:d5:fd:8a:01:c7:c2:b7:8c:5b:1c:51:fc:
e5:2c:22:2a:30:4b:f4:bf:5a:63:e3:5f:c0:b7:aa:
13:51:05:5a:35:89:6d:cf:3a:4f:ca:ed:55:3d:81:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:70:1E:53:41:EE:D6:E3:75:E3:15:10:E6:D7:4A:2E:B3:49:2D:A6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/73AeU0Hu1uN14xUQ5tdKLrNJLaY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
46:cf:03:df:54:09:6f:0f:9b:f0:de:65:53:15:4a:b7:a6:23:
b9:10:c8:b8:b4:ee:9b:bb:b6:30:96:8c:a4:35:0e:48:ba:9d:
0d:12:df:a8:62:68:93:b8:f8:51:f8:98:02:19:91:b8:0b:e8:
be:94:c8:d9:15:f7:33:c9:b5:6e:2a:d2:9e:6b:3f:10:70:70:
b3:c5:e6:ba:a4:e2:b2:1a:c5:b7:0e:6a:78:33:2c:75:2a:ce:
4a:c5:ef:e7:31:ca:a8:50:ac:04:86:78:35:2f:78:87:48:63:
7f:0d:7d:36:4f:1a:32:d8:5c:85:d7:55:01:b4:4d:65:dc:69:
31:97:87:56:29:80:aa:ab:05:ec:8e:7d:3b:f8:16:14:48:7a:
ed:cf:df:36:5b:8c:f0:9f:08:46:fd:d5:0e:09:86:20:d6:31:
60:b9:ec:b8:01:55:99:39:3d:db:69:91:a3:f4:ad:b3:70:b7:
dd:d2:c7:ad:36:3e:75:a2:db:95:60:4e:b5:9c:32:a4:d7:61:
04:0e:c2:e1:89:5a:44:72:be:1d:75:fb:0f:6b:0f:22:c6:0e:
95:d6:cf:ed:a4:dd:2d:9e:1a:67:4f:5b:8f:f9:ec:68:67:4d:
8b:92:1b:96:bb:15:02:14:f6:21:b6:fa:b9:ff:d8:45:f0:a1:
5f:91:b6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 22:58:41 2025 by rpki-client