Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IamJ3WGyPFXxlO1I8DyNihziS3c.roa
File: IamJ3WGyPFXxlO1I8DyNihziS3c.roa (raw, json)
Hash identifier: ZFjmxDmwvd/WVDVtqHp2lIUvqQrh0Rz73XPiSWmiiHU=
Subject key identifier: 21:A9:89:DD:61:B2:3C:55:F1:94:ED:48:F0:3C:8D:8A:1C:E2:4B:77
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 558B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IamJ3WGyPFXxlO1I8DyNihziS3c.roa
Signing time: Sun 12 May 2024 15:24:05 +0000
ROA not before: Sun 12 May 2024 15:24:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21899 (0x558b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 15:24:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=21A989DD61B23C55F194ED48F03C8D8A1CE24B77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:03:c5:01:88:29:32:1a:1b:17:c7:8b:54:
5a:5e:0f:6a:f7:ac:9f:ee:5d:30:11:c3:ec:9f:b4:
2b:c0:c5:5f:97:1a:47:4c:74:15:15:ac:44:cc:58:
50:26:90:c9:57:eb:7b:e3:f3:b3:26:d9:28:eb:44:
ca:7d:31:68:89:6c:10:02:34:0e:a6:f2:6f:b2:b6:
8c:99:3b:a7:41:99:cb:3d:1b:e1:d0:90:56:f5:5f:
ab:bb:c2:a4:e9:70:ce:34:9c:13:d4:77:fe:a2:cd:
47:13:01:63:af:60:63:d9:95:62:a4:06:28:a4:b5:
29:23:e9:03:08:f0:a6:22:0d:0d:c0:df:f4:c6:c7:
17:64:2e:f8:f0:88:37:45:b5:9f:fc:78:28:4f:e9:
3b:99:41:db:bd:25:65:a0:b0:57:7f:21:b1:8b:bb:
19:25:9d:9f:d5:1f:0c:3d:c4:6c:0a:fd:09:9e:1d:
9b:68:df:cd:c9:13:11:fb:ac:b4:a7:39:30:d7:bc:
da:33:bf:3e:36:61:67:10:a0:40:e1:b1:c1:fd:e6:
cb:61:59:26:a8:4f:c7:cc:a6:ed:61:e3:65:ff:b5:
2d:4d:57:9e:5f:28:2c:de:a7:6a:2f:45:bf:39:8b:
fb:44:e4:2d:d6:47:66:41:9d:57:a4:b0:9a:87:81:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A9:89:DD:61:B2:3C:55:F1:94:ED:48:F0:3C:8D:8A:1C:E2:4B:77
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IamJ3WGyPFXxlO1I8DyNihziS3c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
18:14:63:04:fa:16:8b:4c:d6:bc:d8:84:2c:25:9a:c8:4f:94:
61:90:98:99:e6:5f:ca:51:ab:7e:1a:e4:90:31:13:75:8b:30:
42:be:5a:2c:80:6d:f8:a2:0c:1b:f4:99:1c:c8:bd:a5:1f:08:
9f:de:87:7c:91:1f:ff:5c:ac:72:4a:e3:66:86:80:70:99:34:
03:48:e2:5f:eb:d3:1b:53:09:e9:a4:30:83:74:3b:2b:65:36:
c4:bd:2b:84:9f:13:37:63:79:f2:b6:8a:03:97:36:9d:bd:3a:
80:98:bb:b5:9d:ad:bb:9b:ac:d1:1c:ba:dc:ad:68:ee:22:cc:
76:69:71:17:9a:59:10:06:5e:59:a4:3c:4b:0b:4f:60:13:99:
92:ef:8f:2d:ff:89:15:10:41:69:c2:4c:55:35:6d:9c:15:7e:
cd:92:d8:17:aa:e7:7a:35:92:6a:e0:5b:59:75:58:35:f2:b9:
10:36:e4:74:25:84:8b:78:1d:16:65:ed:9a:b9:29:d9:8b:5e:
a6:25:9f:6b:98:fe:69:d1:ce:83:4b:fe:80:7e:f6:fb:c2:fd:
85:07:33:2e:60:b7:db:52:cd:7b:8a:b9:57:2e:9d:fe:a6:c5:
ab:c6:2d:da:ef:01:4b:ab:3d:9b:f6:97:d0:74:de:d7:cf:df:
58:29:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 18:35:23 2024 by rpki-client on console.sobornost.net