Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/g-I3MWvUOe4oHQW4zPr_RKlTB60.roa
File: g-I3MWvUOe4oHQW4zPr_RKlTB60.roa (raw, json)
Hash identifier: ZhViyXHv9sbt2w7KvN6PkGQfMPgKSxa+mX3OC6TWUEU=
Subject key identifier: 83:E2:37:31:6B:D4:39:EE:28:1D:05:B8:CC:FA:FF:44:A9:53:07:AD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 38F7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g-I3MWvUOe4oHQW4zPr_RKlTB60.roa
Signing time: Thu 04 Apr 2024 12:52:20 +0000
ROA not before: Thu 04 Apr 2024 12:52:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14583 (0x38f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 12:52:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=83E237316BD439EE281D05B8CCFAFF44A95307AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:a1:17:a6:9a:c7:ed:a4:b4:c6:bb:af:6e:
e9:64:29:17:49:d8:3d:4a:09:ad:bd:4b:1b:54:e6:
ac:68:b3:7a:f2:ee:e8:e0:37:d4:e5:bc:8d:40:26:
9c:d4:06:03:24:9f:08:e9:8f:3a:16:f9:ed:23:57:
29:d6:66:b2:85:19:cb:4f:9c:22:a2:42:e6:27:a7:
dc:16:72:e9:af:f3:c3:ea:82:0a:bc:c0:5e:c5:4f:
2f:ad:6d:83:54:6d:aa:04:c0:d7:b0:24:31:3c:ae:
7f:fb:50:a8:d3:6f:a7:f2:00:21:fa:c8:18:1b:dd:
ba:73:41:8a:d2:11:90:bc:70:c5:83:5e:58:81:df:
df:74:46:e8:93:e6:d2:1b:a4:eb:af:37:d2:7a:a6:
96:a0:90:25:6e:bd:0a:3c:41:9c:22:91:4d:e7:d2:
53:c4:27:96:d0:c2:6a:8f:03:46:77:c7:ae:57:b5:
ed:28:a0:2e:4f:93:ac:e8:9f:37:ad:4c:41:72:4e:
18:60:65:72:fd:b6:74:17:3a:31:62:b6:15:70:5f:
43:c9:de:6d:ce:6a:39:1f:44:d6:ec:58:c3:40:c6:
94:c2:67:b1:c2:59:02:88:ba:69:ce:a4:8e:24:28:
a2:d8:db:4c:da:ea:26:ac:e3:fd:a3:1d:8d:6d:42:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E2:37:31:6B:D4:39:EE:28:1D:05:B8:CC:FA:FF:44:A9:53:07:AD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g-I3MWvUOe4oHQW4zPr_RKlTB60.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:25:56:c6:97:4a:2a:46:9f:43:e4:cd:5f:d6:05:21:49:8f:
12:da:ca:be:06:d9:c8:ca:36:f5:3b:64:6a:1e:91:5b:15:fe:
69:07:11:e1:8f:7a:88:c2:52:5e:f5:9a:66:64:8a:b9:d1:e2:
69:b6:c1:4d:5a:d6:f4:a0:ca:8d:4d:bc:47:f9:4c:43:e4:da:
e2:87:8c:5f:e3:96:73:64:e9:09:c0:55:82:03:c9:12:85:c5:
ae:4a:0b:82:ef:3b:a1:d4:e2:a6:9b:24:dc:87:23:2a:ba:77:
33:81:30:14:e9:a3:4a:83:6d:c6:39:d2:55:c9:7e:fc:e4:e5:
65:3d:36:dd:04:4e:62:b9:3c:03:72:31:86:fb:76:45:e0:05:
28:42:ce:fe:13:01:1f:cf:69:bb:30:7e:a4:76:e7:13:aa:e1:
27:08:d3:0a:ce:09:cc:4c:1b:8b:8c:11:69:4e:7e:d6:fc:b1:
34:ab:2f:81:38:6c:0f:f2:30:f4:f4:0b:5f:01:cd:8d:ff:e6:
40:33:b9:7d:83:6e:d9:31:c5:7a:e7:b7:fa:39:01:c5:12:10:
86:8b:15:f3:64:20:7a:c4:94:26:39:8c:a0:db:95:01:05:4b:
a1:92:c6:cb:07:8b:5a:4d:6a:29:10:4d:55:58:0a:b0:ba:94:
05:51:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 19:57:51 2024 by rpki-client on console.sobornost.net