Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/f7vonXxRMkFV3bhfBrjq30Y3HXs.roa
File: f7vonXxRMkFV3bhfBrjq30Y3HXs.roa (raw, json)
Hash identifier: UyG0o/IN/FYPFLSepKLn4r7/X+r33GN96FHMfyBfNAA=
Subject key identifier: 7F:BB:E8:9D:7C:51:32:41:55:DD:B8:5F:06:B8:EA:DF:46:37:1D:7B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3AFF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/f7vonXxRMkFV3bhfBrjq30Y3HXs.roa
Signing time: Sun 07 Apr 2024 05:52:30 +0000
ROA not before: Sun 07 Apr 2024 05:52:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15103 (0x3aff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 05:52:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7FBBE89D7C51324155DDB85F06B8EADF46371D7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:a9:fe:6a:82:43:52:a3:9f:a5:a4:22:d6:
a4:52:cb:b6:e9:1f:44:29:32:d4:96:04:15:ce:55:
b6:29:68:2d:d0:97:80:79:8b:1a:a3:81:30:06:b6:
5e:47:1e:af:2e:ea:d8:40:2f:6a:e6:2c:f3:79:f1:
54:6a:6e:20:65:8b:af:10:cb:f6:97:ea:8d:85:a3:
85:ed:96:66:82:f2:ed:b4:46:0e:be:79:8b:51:56:
95:9a:6f:97:a6:d0:b4:29:cf:81:58:a0:d2:12:6f:
1b:ac:ec:82:f1:ab:4c:65:38:cb:f3:9b:39:cb:25:
52:0e:b2:73:8b:9e:b3:cb:21:6a:45:6e:52:36:d5:
4f:a5:8a:b4:a6:3c:18:26:1e:df:81:5e:35:4e:ac:
c4:3a:2c:e7:1d:8f:93:d9:ec:00:f9:7f:44:7c:69:
05:7f:8e:ec:4e:96:bb:0c:7b:cb:d5:98:30:57:1b:
a6:19:5a:18:68:5d:e1:37:70:99:cb:8e:e5:42:f5:
37:94:ca:84:32:28:ce:80:71:24:00:00:94:fb:5f:
8d:6a:63:99:f0:78:33:15:e3:eb:cd:70:2a:df:de:
0d:59:a3:87:17:e0:bc:44:02:34:ab:51:55:59:94:
7d:1a:e8:19:74:c7:bd:c1:f4:b3:e4:9b:b4:d1:24:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BB:E8:9D:7C:51:32:41:55:DD:B8:5F:06:B8:EA:DF:46:37:1D:7B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/f7vonXxRMkFV3bhfBrjq30Y3HXs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
52:7a:bf:02:30:f3:f7:24:f6:5a:c9:dd:05:52:4b:5b:fe:43:
98:28:c8:d1:47:e8:f3:dc:55:b7:97:4a:c7:e4:59:12:22:9e:
5a:d0:ec:de:19:bb:f4:bc:cd:b0:6f:f2:46:8e:48:e9:2e:80:
d2:f0:98:57:f0:db:46:44:fe:29:19:a0:5d:fd:61:1c:e6:10:
fe:c7:cc:10:bb:b8:ee:a7:78:8e:f2:02:7f:3d:82:fa:57:73:
9d:a5:6b:e2:5f:be:19:3f:5a:2c:58:26:7d:47:84:df:55:ac:
f6:05:f0:55:75:2f:d8:ca:8d:70:0e:4f:ce:f8:ae:5e:80:88:
7b:58:e1:de:86:46:85:88:02:56:f0:fb:ef:13:a3:9f:0b:e1:
e2:82:c0:b9:90:50:64:70:e4:db:24:27:34:2f:73:04:d9:ea:
80:c2:df:60:db:ad:28:ac:4a:50:87:60:eb:aa:5b:63:1c:60:
c5:20:0c:5b:d0:63:79:09:29:92:f7:02:ae:1e:09:a9:31:83:
74:be:97:b8:fc:2a:4c:b4:93:83:36:e2:b3:cc:cb:09:6c:9b:
7d:a9:d0:74:f6:d8:e3:e6:bc:2f:81:26:5a:4b:bd:8b:7a:f4:
4b:d1:c7:5e:5c:81:83:19:fd:b4:e0:80:f8:4d:40:1f:7b:6b:
f9:c1:18:c7
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICOv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDcw
NTUyMzBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDdGQkJFODlEN0M1MTMy
NDE1NUREQjg1RjA2QjhFQURGNDYzNzFEN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu4an+aoJDUqOfpaQi1qRSy7bpH0QpMtSWBBXOVbYpaC3Ql4B5
ixqjgTAGtl5HHq8u6thAL2rmLPN58VRqbiBli68Qy/aX6o2Fo4XtlmaC8u20Rg6+
eYtRVpWab5em0LQpz4FYoNISbxus7ILxq0xlOMvzmznLJVIOsnOLnrPLIWpFblI2
1U+lirSmPBgmHt+BXjVOrMQ6LOcdj5PZ7AD5f0R8aQV/juxOlrsMe8vVmDBXG6YZ
WhhoXeE3cJnLjuVC9TeUyoQyKM6AcSQAAJT7X41qY5nweDMV4+vNcCrf3g1Zo4cX
4LxEAjSrUVVZlH0a6Bl0x73B9LPkm7TRJIxxAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUf7vonXxRMkFV3bhfBrjq30Y3HXswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2Y3dm9uWHhSTWtGVjNi
aGZCcmpxMzBZM0hYcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAFJ6vwIw8/ck9lrJ3QVSS1v+Q5goyNFH
6PPcVbeXSsfkWRIinlrQ7N4Zu/S8zbBv8kaOSOkugNLwmFfw20ZE/ikZoF39YRzm
EP7HzBC7uO6neI7yAn89gvpXc52la+Jfvhk/WixYJn1HhN9VrPYF8FV1L9jKjXAO
T874rl6AiHtY4d6GRoWIAlbw++8To58L4eKCwLmQUGRw5NskJzQvcwTZ6oDC32Db
rSisSlCHYOuqW2McYMUgDFvQY3kJKZL3Aq4eCakxg3S+l7j8Kky0k4M24rPMywls
m32p0HT22OPmvC+BJlpLvYt69EvRx15cgYMZ/bTggPhNQB97a/nBGMc=
-----END CERTIFICATE-----
Generated at Sun Apr 7 10:54:57 2024 by rpki-client on console.sobornost.net