Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/erd-wVWqPgHIGsIaoD0xpkdAo8g.roa
File: erd-wVWqPgHIGsIaoD0xpkdAo8g.roa (raw, json)
Hash identifier: MVfVkg9xuL9GBawOdtworwwX/NZAgHZ8KmSxFVmyriw=
Subject key identifier: 7A:B7:7E:C1:55:AA:3E:01:C8:1A:C2:1A:A0:3D:31:A6:47:40:A3:C8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BD7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/erd-wVWqPgHIGsIaoD0xpkdAo8g.roa
Signing time: Mon 08 Apr 2024 08:52:36 +0000
ROA not before: Mon 08 Apr 2024 08:52:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15319 (0x3bd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 08:52:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7AB77EC155AA3E01C81AC21AA03D31A64740A3C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:1a:7a:b4:55:e6:36:b4:af:d9:2a:3b:28:
4e:bd:fb:07:ab:8b:2b:e7:05:a4:a8:10:25:8e:2a:
80:ca:a8:5f:8a:9c:5c:9b:6c:58:b6:8e:01:86:92:
64:1c:29:8b:8d:d9:5b:0c:b5:a6:d1:ff:45:42:77:
de:30:3a:d0:4c:be:df:35:6b:27:e1:ba:5f:0d:df:
b2:0e:78:6a:74:8f:f4:e1:95:e2:58:84:15:0c:62:
1d:51:fd:22:15:e0:33:dc:08:4b:c6:d4:a5:3d:bc:
07:96:31:63:cf:1f:16:fa:eb:cb:ce:c5:42:0e:bb:
13:a8:d1:b8:58:b0:41:d5:ca:d9:41:61:8b:8d:1b:
b0:30:37:84:ca:ac:47:c1:92:1c:9a:c6:5b:1f:61:
68:cc:c4:39:90:a4:6f:16:09:b9:a7:c9:3c:cd:bc:
e6:38:2c:48:7a:c6:f5:6c:11:4a:0f:fd:85:96:e0:
70:91:5a:db:46:27:f6:16:13:c4:78:56:2d:de:6e:
bb:39:4d:0d:b4:fc:86:43:70:50:10:32:c2:67:5d:
6a:91:92:c1:e8:2e:2f:46:cf:64:7e:60:05:f5:cd:
bb:49:1e:ce:e8:23:19:b1:7e:43:a5:26:8d:00:2a:
07:44:a3:2d:f7:54:47:b9:95:f9:20:04:9e:4c:06:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B7:7E:C1:55:AA:3E:01:C8:1A:C2:1A:A0:3D:31:A6:47:40:A3:C8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/erd-wVWqPgHIGsIaoD0xpkdAo8g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6c:ec:c9:75:41:fe:8d:42:d9:6b:ac:cb:04:b1:eb:64:88:71:
90:d1:15:d2:a2:af:b8:8e:2f:c0:70:21:be:31:66:8d:c0:af:
88:16:6b:7c:cc:88:b7:e8:9c:29:53:d8:e7:78:73:31:e0:35:
8b:c8:39:52:93:16:5e:43:24:1b:df:0d:b3:e7:94:40:71:bb:
07:20:b9:7b:9c:a4:9c:4c:bc:80:75:63:e8:ec:e2:0a:43:9e:
3e:af:c3:c1:83:bb:17:bf:a5:5c:e8:9d:76:d7:af:a5:2d:dd:
02:0f:9d:52:d7:e9:1a:f9:cd:2f:fe:77:c7:14:61:05:23:3e:
51:42:bb:ff:9a:00:f0:f0:b8:5c:b3:a4:c2:55:f6:04:bd:1d:
0e:26:a6:63:57:f8:d5:1c:af:98:c4:11:d8:06:c4:9d:80:59:
6c:06:42:6a:d9:ec:fc:8b:ef:65:73:b5:25:73:49:72:e8:5f:
ec:75:20:3b:62:fb:56:b1:a2:8e:b7:07:eb:50:58:b3:40:dd:
be:4c:01:56:77:d5:5b:7d:0f:6f:f1:33:ea:16:ee:18:be:c0:
14:4a:d9:90:81:9a:e8:78:1c:6f:f2:ed:2d:b1:28:48:c7:ac:
90:8f:a1:0c:66:9a:3d:29:e9:64:65:05:ae:54:fc:91:04:58:
0e:aa:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:47:47 2025 by rpki-client