Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/YWmH-J_S0PJNyBghZB_mEXGxctM.roa
File: YWmH-J_S0PJNyBghZB_mEXGxctM.roa (raw, json)
Hash identifier: KuwGAjENEvv3n2NIXmioBQ0BJDWj5Qu6iLijgO5VWMo=
Subject key identifier: 61:69:87:F8:9F:D2:D0:F2:4D:C8:18:21:64:1F:E6:11:71:B1:72:D3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 53E3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YWmH-J_S0PJNyBghZB_mEXGxctM.roa
Signing time: Fri 10 May 2024 10:24:01 +0000
ROA not before: Fri 10 May 2024 10:24:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21475 (0x53e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 10:24:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=616987F89FD2D0F24DC81821641FE61171B172D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:e3:84:74:7b:c6:d1:c2:a3:4b:7f:fd:83:
06:f4:a6:96:4b:68:2d:67:dc:f1:cb:2b:3d:11:36:
4b:2f:d4:01:f0:10:6e:85:d3:18:11:42:5b:9b:2d:
c6:e2:6a:55:da:47:7d:6f:be:ae:e3:c8:d4:14:27:
91:67:0d:27:33:26:48:ea:5b:f6:d4:e1:49:d9:f4:
3c:0e:5b:9a:9a:90:53:e0:9b:f0:a2:c4:3a:bc:0f:
1d:7b:09:1e:fd:49:6f:5e:57:e7:bf:28:51:ba:f0:
f8:dc:17:44:3a:91:24:16:03:50:e6:a3:30:11:73:
5e:54:fd:77:f4:a9:9f:76:93:75:51:1a:c4:3b:06:
dd:81:61:d1:f3:80:6e:c3:20:9b:17:68:7d:24:a7:
ef:94:67:a8:e9:92:0b:90:5d:5e:99:19:5e:8b:03:
15:65:19:a1:82:73:93:0b:c0:ed:82:5b:f5:03:89:
e7:3f:f9:5a:ca:41:0f:7e:24:a5:a1:24:4d:7f:e6:
eb:fd:bc:07:39:6b:b7:73:d9:32:c0:f8:98:73:ac:
ee:92:6a:42:5d:37:0b:81:58:bd:a6:b8:a0:64:df:
ad:6c:3d:47:a7:c3:3e:79:26:74:4c:3d:9b:01:29:
d2:dd:17:03:0a:84:c1:fe:68:59:0c:14:d3:6a:fa:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:69:87:F8:9F:D2:D0:F2:4D:C8:18:21:64:1F:E6:11:71:B1:72:D3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YWmH-J_S0PJNyBghZB_mEXGxctM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
bb:d4:24:31:7f:a0:aa:ad:65:c0:d5:c9:44:d7:c4:75:db:98:
40:93:17:e1:28:5f:44:a8:ff:76:0e:e4:6a:6c:ae:ce:f2:1f:
12:80:e0:da:81:03:7d:95:85:58:48:df:eb:aa:93:51:ce:db:
45:65:8e:b5:fc:b4:b6:b8:fc:ff:24:4e:ef:83:6a:39:3d:dc:
62:dc:d1:67:61:95:2d:69:07:a4:3c:74:fe:4e:b2:3a:c3:9e:
14:7e:44:68:42:2a:25:c0:11:f7:47:a9:9d:b9:bb:88:f6:cf:
a5:1a:c5:7f:39:95:cf:1e:74:79:9b:9a:48:39:de:13:a6:b3:
06:f3:bd:55:62:87:d0:2b:67:e8:d3:f2:57:40:e5:3d:a5:27:
9f:2f:c4:23:c0:2c:19:75:8e:67:d6:26:54:3b:da:f3:ad:02:
3f:67:28:a2:bb:75:fe:ee:8e:22:9f:f0:a1:4b:2b:4d:7c:ee:
b1:81:e7:01:31:59:7e:92:fd:30:fc:3a:0e:5a:b8:2a:a1:38:
6e:7d:64:86:00:c9:9b:2a:85:5e:ff:2d:87:be:90:eb:a1:69:
b6:1c:0a:5b:59:4e:ae:ff:66:5c:61:6a:c9:51:31:f7:5d:a9:
df:85:3f:6d:46:c4:7d:0f:00:43:f8:ec:81:c7:5e:20:fc:a7:
53:f5:c4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:33:18 2024 by rpki-client on console.sobornost.net