Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/G27Xc3YZSCVnSCEZTukuHV_lxFs.roa
File: G27Xc3YZSCVnSCEZTukuHV_lxFs.roa (raw, json)
Hash identifier: NPnRAMoEHXQrGNAhGtBoKa6lweV/WRxeeuJAzTgGBps=
Subject key identifier: 1B:6E:D7:73:76:19:48:25:67:48:21:19:4E:E9:2E:1D:5F:E5:C4:5B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 50CB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/G27Xc3YZSCVnSCEZTukuHV_lxFs.roa
Signing time: Mon 06 May 2024 07:23:59 +0000
ROA not before: Mon 06 May 2024 07:23:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20683 (0x50cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 07:23:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1B6ED77376194825674821194EE92E1D5FE5C45B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:d1:cb:dd:16:4c:19:78:8e:ec:e0:ef:35:
da:76:6a:9a:1c:29:e1:01:c7:9f:48:fc:c7:52:63:
87:12:19:7f:e0:29:17:c5:14:c5:2c:c2:3a:46:90:
4f:74:ae:b9:0a:7f:39:20:ae:52:5c:e8:ee:47:58:
c7:bc:72:dc:a2:4b:89:c4:4c:01:d6:e4:8e:f5:58:
f6:a3:b9:19:19:11:0c:f4:c6:c7:97:86:e0:1e:6e:
93:a4:07:b0:5b:21:f9:0d:97:fb:71:4d:92:ee:87:
0e:c8:2d:3d:f9:cf:14:52:5c:04:e9:47:03:64:11:
6f:ae:5b:97:11:d0:7a:90:25:76:92:53:7c:e0:46:
97:2d:49:d6:f2:ed:15:73:3f:b2:22:5e:6b:d2:bd:
35:38:bd:f6:b9:37:42:3e:84:6e:e6:c1:57:51:de:
12:9b:3c:47:e6:76:24:f6:04:d9:5b:8c:9a:51:ae:
a6:be:1c:f3:c9:64:25:31:04:f2:18:8e:20:bd:97:
dd:ec:64:28:24:d5:65:0e:23:b7:99:b0:26:a4:f8:
01:fb:08:6c:f8:c0:86:7b:95:d3:65:36:93:17:d4:
2e:b7:29:fb:63:be:f0:a1:99:9a:01:18:48:ae:b2:
ff:81:4e:8e:21:32:58:8e:12:0a:e2:2d:d2:25:7c:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6E:D7:73:76:19:48:25:67:48:21:19:4E:E9:2E:1D:5F:E5:C4:5B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/G27Xc3YZSCVnSCEZTukuHV_lxFs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:b2:ae:0b:9c:15:66:e3:e8:5a:6e:16:b1:eb:13:94:b6:77:
9b:89:db:b0:6f:df:e5:4e:67:1a:1a:ca:44:5d:af:72:9d:a5:
f2:48:5a:d7:e1:2d:28:00:ab:47:52:ad:de:46:08:68:2d:ea:
de:c1:74:2d:93:08:98:4b:61:0d:b2:81:44:f9:ab:bf:dd:ff:
9f:26:02:65:b5:cf:f4:75:91:15:6d:dc:76:cb:29:0a:de:e2:
c5:83:a5:a2:bd:27:8a:c7:0e:18:6a:ed:de:cd:e6:09:ad:2f:
cc:ec:2a:7f:77:9d:44:b0:15:fa:55:7b:97:91:90:d6:e8:cb:
7b:98:1c:90:23:db:20:57:61:41:11:b1:4d:e2:a7:c7:7e:12:
57:7c:3f:a3:aa:a7:bb:f0:0d:13:6e:aa:19:f1:1b:4b:28:02:
78:ef:9d:61:a3:ea:a2:a4:86:c8:30:b6:5a:75:0b:9e:9e:bc:
78:16:9d:85:a9:7d:64:20:67:bf:82:18:64:66:b8:2b:75:85:
14:73:e5:8e:75:46:f4:e2:68:f0:a6:dd:b2:2d:ac:f8:e2:52:
79:b3:f8:0e:e1:3f:ef:33:cc:d3:1b:bf:61:e4:e5:75:3a:e4:
eb:25:0c:79:92:7c:b9:a8:3e:8f:82:99:c7:47:f7:64:7b:8e:
97:57:38:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:38:24 2025 by rpki-client