Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eSBp6BP8FBuPdGBFVInc3lgldQQ.roa
File: eSBp6BP8FBuPdGBFVInc3lgldQQ.roa (raw, json)
Hash identifier: lDsW5k6UMSSonnKOMzdAIX31JnlXidJrgp4s88kiyG0=
Subject key identifier: 79:20:69:E8:13:FC:14:1B:8F:74:60:45:54:89:DC:DE:58:25:75:04
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4327
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eSBp6BP8FBuPdGBFVInc3lgldQQ.roa
Signing time: Thu 18 Apr 2024 02:53:26 +0000
ROA not before: Thu 18 Apr 2024 02:53:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17191 (0x4327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 02:53:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=792069E813FC141B8F7460455489DCDE58257504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:0b:53:ba:c0:68:65:34:fc:51:db:81:a1:
7e:2e:6b:9a:cd:30:7f:29:4c:fd:44:43:ae:d5:54:
ce:02:8c:3f:d6:7f:5f:42:d2:43:9d:33:32:c0:c8:
2a:2e:13:a1:ae:f3:fd:ec:13:46:a7:3a:fb:96:60:
7f:54:8c:87:f2:8c:cc:2f:5b:b0:03:98:f0:9b:e9:
c6:cc:89:f6:43:92:e7:f0:13:1e:16:b9:f2:f0:1c:
a3:a3:72:8c:77:b9:88:78:f1:cf:21:1b:f7:9e:e0:
7e:87:3a:66:3b:5e:4c:50:be:4a:ae:2a:a9:4e:61:
6f:df:15:4e:6f:24:f2:50:f9:e1:b7:3b:a8:63:84:
98:ca:48:ab:00:a3:75:50:49:61:f2:8c:53:9b:92:
da:09:7e:9c:2c:17:68:d6:41:2f:e5:08:b1:60:7e:
c2:28:ab:c4:e7:cc:7b:56:f1:49:d6:80:da:2f:94:
f0:59:e0:5a:18:2f:40:75:28:b7:59:a3:7a:0d:01:
fe:2c:f3:d4:92:bb:77:1d:3a:f0:e1:50:dc:60:57:
6b:19:fd:6e:1e:d1:aa:6b:78:29:a0:4b:2b:42:e4:
a2:36:0f:b9:e6:45:0f:a3:e5:42:5b:3f:1f:f3:ec:
ce:de:48:3a:6f:e8:71:0d:22:c6:0a:55:59:da:8e:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:20:69:E8:13:FC:14:1B:8F:74:60:45:54:89:DC:DE:58:25:75:04
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eSBp6BP8FBuPdGBFVInc3lgldQQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
90:71:f8:83:1b:98:5c:be:18:0d:fb:85:5b:06:5e:f6:cd:5d:
91:d5:3c:0e:d8:52:f9:1b:17:a2:0f:a8:46:c7:23:16:4e:6d:
c8:d4:47:88:2e:63:53:7c:8d:c3:7f:73:2c:41:0d:af:04:74:
91:c4:2e:c7:a0:0d:02:f1:b3:f3:bc:85:1d:08:da:ac:02:0c:
04:04:61:bd:ea:01:22:ae:c0:60:7a:71:5d:26:8a:2c:8d:45:
42:40:18:9d:3a:e3:46:0d:ab:79:2f:0a:99:07:7b:a5:57:8a:
7c:b3:97:9b:e3:b4:91:2d:43:6a:89:1a:73:f7:38:25:1f:96:
e4:6f:2f:e4:85:e8:1e:12:83:da:2e:bb:c4:d1:d5:04:16:60:
c5:8e:8d:be:54:24:67:5f:5d:8b:e4:e3:b1:b8:77:bf:a3:75:
91:56:56:54:d9:5f:da:d7:87:a4:75:83:52:ec:15:6a:99:bc:
cd:cf:cc:3c:3d:5a:93:dd:87:90:b3:71:68:b9:22:dc:ed:e7:
74:fa:98:9b:29:89:6d:61:de:19:4e:ab:25:93:ec:f2:c5:a0:
a9:9d:8d:e6:2b:83:c6:b0:2b:11:85:c4:6e:2f:95:64:85:86:
f3:7c:dd:5e:ef:75:73:d1:69:c6:e7:23:3c:cb:46:56:22:bc:
9f:5f:6f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 19:31:10 2025 by rpki-client