Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QieVKv6haywB7Y6m94viyRJ0oLQ.roa
File: QieVKv6haywB7Y6m94viyRJ0oLQ.roa (raw, json)
Hash identifier: mBGsXR1kUjRdJG2ezOs+u8oTUiC6bppzZOi4kq3muvw=
Subject key identifier: 42:27:95:2A:FE:A1:6B:2C:01:ED:8E:A6:F7:8B:E2:C9:12:74:A0:B4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E57
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QieVKv6haywB7Y6m94viyRJ0oLQ.roa
Signing time: Fri 03 May 2024 00:53:42 +0000
ROA not before: Fri 03 May 2024 00:53:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20055 (0x4e57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 00:53:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4227952AFEA16B2C01ED8EA6F78BE2C91274A0B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:96:75:14:40:2d:df:6d:c4:04:23:fc:10:
d7:0a:92:a6:aa:30:d9:4a:25:3f:e9:49:c0:f3:d3:
ae:83:97:8a:56:08:74:ec:6f:a2:22:56:9d:2c:7a:
93:73:35:4e:e4:3d:63:c6:5c:1b:8b:04:b4:c3:e9:
e7:b0:19:98:4a:5a:8e:1a:18:4c:df:9a:1e:98:8c:
8f:b2:06:d2:e1:6a:52:a6:14:44:90:41:a6:8f:37:
07:35:28:13:d7:0c:70:7b:46:ea:6c:ce:66:7e:b4:
c7:0d:8e:d8:85:f4:86:04:29:f6:73:2a:b8:81:3c:
83:d0:12:c2:29:75:d1:2c:63:fb:47:fc:d2:38:67:
f5:85:10:2e:ab:d9:26:b7:a1:c9:62:41:ec:cf:ee:
ed:a0:da:74:1e:56:bf:7f:31:f6:4c:f4:e2:d3:d0:
ad:9e:cc:7f:08:21:52:c3:0d:cf:b6:83:1c:c1:95:
34:f0:f7:b7:a9:2d:17:52:b9:db:bf:95:f6:24:8d:
76:90:d4:ff:df:ca:2f:a6:d3:4f:55:f2:ba:86:bd:
98:ae:a9:5d:f0:d2:1f:ae:96:2d:95:d6:94:79:4b:
0c:a6:03:ae:8b:d3:f6:50:96:8d:cc:95:89:2d:a2:
92:7a:59:0d:2e:40:ff:6f:7c:c2:f0:70:82:35:fb:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:27:95:2A:FE:A1:6B:2C:01:ED:8E:A6:F7:8B:E2:C9:12:74:A0:B4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QieVKv6haywB7Y6m94viyRJ0oLQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
16:0a:68:c4:45:7d:67:2e:0a:7a:14:6b:77:65:fe:e9:68:15:
76:f9:c1:01:14:a1:1b:a1:15:67:69:b1:f5:a6:96:ff:41:c0:
f8:08:c6:1b:32:74:8a:f0:5b:5e:0a:bf:a5:12:3f:9c:ae:2c:
7c:f6:7d:20:73:a7:46:e3:89:39:34:b1:b2:9b:f7:98:22:ca:
76:97:27:d2:35:6f:f7:b6:d3:a0:ac:5c:5d:b2:c1:02:21:01:
8c:ad:87:42:f9:ce:ed:ba:b8:95:ee:79:57:f1:42:36:e1:54:
82:7f:1a:fb:0a:1a:67:05:85:c6:f1:7b:0c:f2:c0:55:e5:79:
72:6c:fe:7f:6b:54:78:6b:d2:08:fb:63:a0:fc:c9:20:5b:3d:
95:10:a7:22:0a:02:ab:f2:ad:d4:3a:f4:2a:13:ac:59:65:79:
e6:dd:96:78:89:4b:60:1e:8a:1c:ae:e6:06:d0:50:6a:f3:0c:
80:a3:19:ad:42:79:19:f9:d1:9c:d2:91:8a:0f:14:38:ee:7a:
c6:49:bb:10:09:a6:c7:a0:fd:b5:d0:53:67:db:c0:d0:8e:a6:
d2:f4:a0:54:46:43:fb:c8:79:29:9c:38:d0:bf:d3:c9:a3:06:
fe:92:dd:60:07:ab:e6:80:9e:a7:e7:9c:32:20:88:9b:85:95:
6f:00:fd:00
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICTlcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDMw
MDUzNDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQyMjc5NTJBRkVBMTZC
MkMwMUVEOEVBNkY3OEJFMkM5MTI3NEEwQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBhZZ1FEAt323EBCP8ENcKkqaqMNlKJT/pScDz066Dl4pWCHTs
b6IiVp0sepNzNU7kPWPGXBuLBLTD6eewGZhKWo4aGEzfmh6YjI+yBtLhalKmFESQ
QaaPNwc1KBPXDHB7RupszmZ+tMcNjtiF9IYEKfZzKriBPIPQEsIpddEsY/tH/NI4
Z/WFEC6r2Sa3ocliQezP7u2g2nQeVr9/MfZM9OLT0K2ezH8IIVLDDc+2gxzBlTTw
97epLRdSudu/lfYkjXaQ1P/fyi+m009V8rqGvZiuqV3w0h+uli2V1pR5SwymA66L
0/ZQlo3MlYktopJ6WQ0uQP9vfMLwcII1+0ARAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUQieVKv6haywB7Y6m94viyRJ0oLQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1FpZVZLdjZoYXl3QjdZ
Nm05NHZpeVJKMG9MUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBABYKaMRFfWcuCnoUa3dl/uloFXb5wQEU
oRuhFWdpsfWmlv9BwPgIxhsydIrwW14Kv6USP5yuLHz2fSBzp0bjiTk0sbKb95gi
ynaXJ9I1b/e206CsXF2ywQIhAYyth0L5zu26uJXueVfxQjbhVIJ/GvsKGmcFhcbx
ewzywFXleXJs/n9rVHhr0gj7Y6D8ySBbPZUQpyIKAqvyrdQ69CoTrFlleebdlniJ
S2Aeihyu5gbQUGrzDICjGa1CeRn50ZzSkYoPFDjuesZJuxAJpseg/bXQU2fbwNCO
ptL0oFRGQ/vIeSmcONC/08mjBv6S3WAHq+aAnqfnnDIgiJuFlW8A/QA=
-----END CERTIFICATE-----
Generated at Fri May 3 12:22:21 2024 by rpki-client on console.sobornost.net