Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eRh0JMnt_9ZrOuna3ykLBHNV6Ng.roa
File: eRh0JMnt_9ZrOuna3ykLBHNV6Ng.roa (raw, json)
Hash identifier: TyOenLI99c/1VZdcZZBXe+CS9+kQmMHj91e0QLb5i/8=
Subject key identifier: 79:18:74:24:C9:ED:FF:D6:6B:3A:E9:DA:DF:29:0B:04:73:55:E8:D8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4027
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eRh0JMnt_9ZrOuna3ykLBHNV6Ng.roa
Signing time: Sun 14 Apr 2024 02:52:53 +0000
ROA not before: Sun 14 Apr 2024 02:52:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16423 (0x4027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 02:52:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=79187424C9EDFFD66B3AE9DADF290B047355E8D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:ea:9d:5c:15:5d:85:54:46:18:3f:ab:43:
4e:d6:4d:4f:f7:6f:82:41:f8:8d:e0:23:e4:a9:af:
d2:27:d0:2c:42:82:7a:7b:9b:39:54:50:df:91:8d:
35:13:cb:03:6b:1a:e6:48:ac:07:86:fa:c5:bd:d5:
1a:d2:41:9d:15:81:4d:dc:f2:f7:f8:95:e7:16:46:
c6:bd:c0:18:bb:3b:ae:fd:29:d2:97:8f:16:23:f6:
f6:8d:f4:df:7d:67:7d:51:42:33:5e:f0:1d:ab:58:
31:28:ce:8c:35:8a:9d:5a:93:78:4f:e8:52:da:ba:
d2:64:a0:f2:62:3a:81:7b:0a:ba:28:3f:7a:8f:f3:
39:ea:38:23:fd:f4:42:a6:40:f2:d9:57:42:8b:32:
f2:ee:76:6f:89:89:5c:5e:97:2f:49:fd:c4:82:2b:
c4:40:eb:e9:6a:e6:3e:fd:49:16:1d:b0:55:08:be:
b2:7e:46:b5:47:f7:e5:00:b5:79:32:06:40:ca:03:
88:57:2d:25:db:d9:b1:41:fd:a0:e6:a8:4b:f9:83:
1a:ba:69:b6:2c:23:2d:1d:39:c0:0f:ad:e6:e2:f9:
b7:64:6b:22:b4:ca:4b:ca:b5:94:ab:5a:16:23:2b:
b7:6b:f2:36:88:6f:14:38:f5:40:cd:89:b1:5c:c1:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:18:74:24:C9:ED:FF:D6:6B:3A:E9:DA:DF:29:0B:04:73:55:E8:D8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eRh0JMnt_9ZrOuna3ykLBHNV6Ng.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
21:e0:23:b5:86:f6:a0:9e:20:dc:4d:c3:1a:d0:fe:bd:19:62:
07:3d:c9:28:15:21:4b:81:17:f0:c8:94:b0:43:b4:ae:04:94:
a5:a7:00:20:59:65:47:80:87:d0:84:e4:58:84:5d:f7:c6:be:
aa:46:64:f8:f5:8d:ca:b6:15:0b:c9:83:5d:27:96:f0:92:84:
2c:58:f0:54:10:ae:70:03:6c:dd:b5:0e:bf:7e:61:9c:d2:31:
16:5e:d0:01:e5:48:7a:7b:f0:79:91:21:d5:79:e1:cc:50:3f:
44:54:81:45:82:76:e3:de:a3:e0:aa:e7:a2:56:a4:1d:f8:b9:
6d:51:80:49:cf:1f:42:82:bf:f4:2a:a2:d6:90:e4:a2:f7:7f:
b5:82:97:4c:73:34:6e:2e:6b:50:7d:b5:e7:57:f2:96:69:4d:
e8:ec:56:af:12:1d:70:49:24:83:99:06:0d:48:76:8e:41:c0:
66:41:3c:31:f1:af:c0:c1:5c:46:4c:5b:5f:bc:b2:9f:00:c2:
6e:33:61:7f:c5:1c:1a:f7:8f:97:a8:ee:cc:25:dd:f8:8c:87:
90:3b:d5:f6:38:1f:d3:7f:61:25:73:2d:e1:2d:b1:88:f4:c5:
29:be:22:c1:bd:74:08:77:ea:da:e2:4b:7b:ed:89:9e:49:b9:
35:42:6f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:11:30 2025 by rpki-client