Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/iIwB2yRsYa_SDAYIzM0GqYIHyDw.roa
File: iIwB2yRsYa_SDAYIzM0GqYIHyDw.roa (raw, json)
Hash identifier: 6k7/NfRA1m05iYe9GvIb/WWrtyJegHXknCRm1orziIA=
Subject key identifier: 88:8C:01:DB:24:6C:61:AF:D2:0C:06:08:CC:CD:06:A9:82:07:C8:3C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B1F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iIwB2yRsYa_SDAYIzM0GqYIHyDw.roa
Signing time: Sun 28 Apr 2024 17:53:26 +0000
ROA not before: Sun 28 Apr 2024 17:53:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19231 (0x4b1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 17:53:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=888C01DB246C61AFD20C0608CCCD06A98207C83C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:d7:3c:0c:22:8d:3d:71:61:61:2f:0f:d7:
08:48:db:49:3a:e3:f5:b9:df:6f:90:87:03:f7:f8:
7d:67:4d:20:d8:5d:51:fb:02:c7:45:c6:00:0e:4c:
1b:fa:ce:06:22:7a:85:be:01:71:7b:4f:d8:55:20:
86:ea:d5:f7:3f:c5:fe:c3:ad:63:1d:6b:b8:a5:f0:
77:00:99:ff:af:0f:2d:a7:35:9a:11:91:ae:e4:13:
65:a4:43:2a:99:7d:b5:54:2a:9a:22:d4:72:6c:0b:
ed:1f:d2:e3:c9:7d:2a:f4:00:b1:4f:b0:2e:da:3c:
b5:58:fe:4b:25:df:33:4c:1f:4c:f2:38:24:6a:38:
4c:64:d6:56:cf:72:6a:f0:48:5b:44:e2:ac:55:9e:
e9:72:01:dc:18:fc:6d:2c:7e:d8:6c:4a:e2:04:d0:
10:3e:5e:fd:a7:60:16:7a:0a:38:e0:87:ca:fc:17:
a9:d9:9c:44:3b:32:dc:e4:b5:df:b0:ef:39:0b:d5:
ce:b6:c5:9f:f8:cc:a1:60:b9:08:16:8c:b1:6a:b7:
10:7b:94:7d:48:fc:1f:80:8d:47:d4:66:38:d2:65:
57:5c:99:bf:ba:ac:26:06:c1:53:fd:bb:bb:5e:e4:
d0:70:a7:d7:83:d7:36:63:da:cf:21:a5:c3:fb:a9:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8C:01:DB:24:6C:61:AF:D2:0C:06:08:CC:CD:06:A9:82:07:C8:3C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iIwB2yRsYa_SDAYIzM0GqYIHyDw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4f:12:8b:65:c2:47:5e:2d:da:18:7b:94:63:67:33:21:4b:7a:
2d:d7:29:b0:be:45:a4:84:39:7e:71:9d:02:43:8f:87:4d:09:
fa:86:8d:0a:02:c8:5f:00:09:d7:cc:4b:ae:bc:4e:99:48:d4:
2b:c0:16:34:c2:79:55:96:6d:5a:13:1e:9e:92:44:d7:77:3e:
ef:76:af:be:2e:a8:d2:88:cc:85:d3:d2:88:7d:a1:7e:ea:36:
5d:fc:10:5d:49:d0:37:06:c5:d3:f9:7a:12:6b:3b:e4:1f:38:
69:04:89:06:88:4f:f7:f9:98:80:7d:4d:d5:a4:52:13:a9:3c:
46:02:a1:90:33:c9:c0:67:b7:98:73:a4:a7:11:e3:c7:52:65:
0b:f8:51:35:0f:f3:75:1f:27:e9:ac:fb:5d:83:24:2c:d6:4b:
c1:0b:ab:b7:f3:c6:ad:06:87:6d:88:53:d7:16:09:6b:e5:8e:
3b:cb:73:83:dc:2f:90:fe:30:b4:32:be:31:c9:14:dc:cc:10:
25:f5:43:a3:b5:9e:c8:c7:ac:e5:bb:06:a0:e1:46:01:68:56:
ea:c3:61:d0:e9:fd:1a:ec:f3:c4:e3:7e:df:51:a5:37:a7:b7:
f4:ae:9f:9c:cd:9f:4e:94:b5:c4:51:c7:13:06:a2:ff:bf:c2:
95:90:5f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 00:39:48 2024 by rpki-client on console.sobornost.net