Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/U4IPciu-77JyItSdHXeZYwc8GRM.roa
File: U4IPciu-77JyItSdHXeZYwc8GRM.roa (raw, json)
Hash identifier: YINXdQLDt78ph9fbidf3WtUvlIOtoW743SRqZtJFEMQ=
Subject key identifier: 53:82:0F:72:2B:BE:EF:B2:72:22:D4:9D:1D:77:99:63:07:3C:19:13
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54CB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U4IPciu-77JyItSdHXeZYwc8GRM.roa
Signing time: Sat 11 May 2024 15:24:04 +0000
ROA not before: Sat 11 May 2024 15:24:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21707 (0x54cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 15:24:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=53820F722BBEEFB27222D49D1D779963073C1913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:dd:4e:af:07:99:e9:ee:21:af:c0:5f:d0:fc:
57:18:0e:0e:d0:96:8a:c5:a6:26:c9:6c:e2:8c:21:
97:84:1a:2c:52:b5:09:24:74:d4:ba:9f:b8:a8:d1:
23:ba:9b:a5:a4:7e:50:1f:74:aa:22:df:59:59:54:
a6:11:6f:1f:8f:a9:5e:22:c1:8d:12:39:a3:6e:b4:
89:d6:8c:d3:e5:2a:94:f2:06:41:0d:16:e9:6b:98:
31:6f:72:67:db:99:f4:0c:38:8d:f2:41:55:0e:a2:
56:2a:0e:67:98:26:00:e3:42:28:73:b0:0a:af:da:
e6:f5:68:76:25:f9:5b:e1:c4:ba:d2:0b:a9:cd:08:
33:b1:75:ad:9d:ed:e4:30:02:5f:2d:8a:32:68:9a:
6f:cc:15:05:1f:3c:20:a7:56:4c:40:f4:64:f8:42:
67:01:dc:16:2d:2f:aa:ac:d1:6d:55:32:17:d6:57:
b7:f5:e2:e0:ef:31:e5:c6:d0:1a:a3:40:d4:92:da:
9f:d9:d0:57:26:3f:fc:4b:9c:93:ab:dc:14:c4:5c:
31:18:9c:78:7e:40:69:d7:bd:70:06:35:f4:17:26:
bf:5a:10:89:4c:44:af:da:8b:ec:d1:dd:d9:5d:7a:
5e:20:af:40:b6:02:5d:2b:d8:4a:f8:7f:fe:0c:56:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:82:0F:72:2B:BE:EF:B2:72:22:D4:9D:1D:77:99:63:07:3C:19:13
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U4IPciu-77JyItSdHXeZYwc8GRM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
32:1f:7a:69:1f:8a:49:d5:0c:77:1a:77:f0:e2:fd:c6:b1:f1:
23:0c:74:1d:ef:75:87:7e:f9:d5:a4:a3:bb:2d:24:ab:51:42:
43:0d:aa:dc:aa:61:42:d3:08:8c:cc:90:d8:9a:40:09:25:9f:
f7:01:0e:db:a0:0c:9f:a0:77:30:0a:75:4c:21:f3:8b:3b:5f:
f9:9a:dd:f5:8e:78:ee:e1:25:74:86:9d:ea:e3:cf:32:1b:2f:
45:f7:4b:26:57:84:9a:de:da:06:85:e8:ce:c0:b7:48:b9:2a:
79:8a:0e:46:be:56:dd:07:0d:5e:5f:4c:a5:5d:da:a4:04:12:
61:1c:26:2d:7d:cb:df:32:2a:b7:a4:aa:d9:b1:cc:32:c1:9c:
6c:ff:98:d6:3f:6f:cf:30:f1:ce:54:18:73:a3:a7:30:80:82:
dd:50:e6:e9:03:fd:d9:1c:9e:38:32:dc:b5:20:05:4e:7f:3e:
b2:aa:1c:c7:32:cb:e2:33:08:62:6d:9f:01:f5:53:79:dd:19:
4d:85:c2:2c:86:39:d2:97:7c:79:4a:1f:3d:d6:94:4b:f3:70:
05:88:2a:19:fd:e2:51:69:e2:56:67:b0:63:02:24:d3:a4:55:
a5:6b:f3:15:0f:bd:b0:cb:5b:fa:8c:5d:fa:1d:25:72:a5:5a:
df:bf:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 22:22:18 2024 by rpki-client on console.sobornost.net