Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9YOfe11Nr1VTrfOFj-qZxJP_oRA.roa
File: 9YOfe11Nr1VTrfOFj-qZxJP_oRA.roa (raw, json)
Hash identifier: QdyxrZivhanMcNbawRgluRqUhM2K49notfyqA31zL70=
Subject key identifier: F5:83:9F:7B:5D:4D:AF:55:53:AD:F3:85:8F:EA:99:C4:93:FF:A1:10
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CAB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9YOfe11Nr1VTrfOFj-qZxJP_oRA.roa
Signing time: Tue 30 Apr 2024 19:23:36 +0000
ROA not before: Tue 30 Apr 2024 19:23:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19627 (0x4cab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 19:23:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F5839F7B5D4DAF5553ADF3858FEA99C493FFA110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:21:53:be:85:0d:c2:2d:1c:02:df:65:93:
a5:b9:df:0a:18:d8:7d:64:44:bd:2c:d0:42:88:24:
1a:0d:ff:f8:32:a0:62:9d:12:27:73:bd:8a:41:63:
b4:27:27:79:73:2f:de:83:d2:11:1a:c4:65:61:d7:
4c:e3:01:e8:dc:2a:e1:ef:cb:43:fb:48:cb:5b:52:
58:01:5c:4f:30:df:27:71:19:0e:b3:ef:74:66:8d:
38:64:bb:6d:ca:2b:5f:f6:88:a0:23:8a:a1:ca:9a:
26:08:b2:2d:ff:d9:30:fc:97:67:20:6f:4b:58:09:
d4:e4:25:1a:9a:9b:e3:c8:d4:57:84:a8:46:c5:a0:
93:bd:b8:1d:c1:ec:63:8e:e8:00:34:e4:65:da:3f:
fa:2b:a7:2e:84:65:92:f7:55:9b:18:db:ad:b0:b8:
f2:6c:80:92:0f:81:62:41:5f:05:6a:90:96:7f:f2:
d0:48:64:90:c3:3a:a3:1f:27:26:d6:5a:51:df:c3:
e3:d4:22:38:e6:5e:8d:2d:d8:2e:69:fb:71:22:b6:
9a:89:c4:75:9f:84:f7:d0:01:51:08:64:7f:68:30:
46:68:97:1a:63:09:aa:37:57:5b:22:f4:92:e5:2a:
3c:3d:37:66:5e:30:bf:a3:06:1b:4a:fc:52:cf:27:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:83:9F:7B:5D:4D:AF:55:53:AD:F3:85:8F:EA:99:C4:93:FF:A1:10
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9YOfe11Nr1VTrfOFj-qZxJP_oRA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
09:56:e7:1c:15:8f:e9:bf:48:1a:40:7c:52:a2:52:8c:a4:56:
5c:c6:64:40:48:2a:db:56:64:d2:a8:0d:0c:25:5e:2e:50:b7:
f5:52:3e:59:fa:39:11:0c:83:5a:fd:8f:67:fd:7a:c3:87:3a:
59:87:43:3a:2e:5c:09:d9:80:c3:11:60:6a:21:b0:64:8e:2c:
d0:c8:68:1b:81:6c:82:90:98:88:e5:21:b9:7e:5c:24:aa:63:
a3:2b:3b:e0:30:9b:61:95:43:03:cf:1f:e8:a8:5f:f6:f3:a9:
15:11:0b:1c:d4:6d:ab:78:89:57:db:28:b7:86:06:7b:03:fc:
44:54:a5:b8:44:ca:b2:40:af:16:bd:bc:79:11:d5:1b:97:cc:
d9:b1:5b:c6:98:f8:e3:65:cb:82:ee:60:46:f6:cc:57:46:c5:
fd:3e:a1:19:db:ce:1b:f5:4d:d2:34:44:9f:07:3e:fc:a9:c5:
40:92:3c:37:82:85:16:56:7d:66:eb:89:2e:d3:03:50:81:cd:
af:27:ff:ca:25:0a:c0:13:da:00:73:2c:a4:8c:a9:26:be:95:
41:8c:34:90:56:36:68:8f:5e:05:b1:2a:4a:29:fe:e4:cc:5b:
65:5d:ed:dd:c8:80:f1:aa:65:1f:01:6d:49:ce:00:e7:82:ab:
b9:58:81:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 00:37:56 2024 by rpki-client on console.sobornost.net