Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rIC7a3ghWMiX82oJvuOEk3epcSA.roa
File: rIC7a3ghWMiX82oJvuOEk3epcSA.roa (raw, json)
Hash identifier: 4e8Y/AlRdEyi5JXuhJJsYia2YS0IoDTR6H3WFma1t5o=
Subject key identifier: AC:80:BB:6B:78:21:58:C8:97:F3:6A:09:BE:E3:84:93:77:A9:71:20
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EDF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rIC7a3ghWMiX82oJvuOEk3epcSA.roa
Signing time: Fri 03 May 2024 17:53:46 +0000
ROA not before: Fri 03 May 2024 17:53:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20191 (0x4edf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 17:53:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AC80BB6B782158C897F36A09BEE3849377A97120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:9d:e6:23:50:08:c5:27:ec:3f:9a:13:9e:
bc:a0:1d:f0:04:8a:01:1a:8d:16:55:ee:5f:fd:27:
a6:34:3b:d0:1a:53:a4:58:c7:6c:14:42:90:e3:04:
f7:ae:0c:b4:01:ad:4e:9f:3f:22:d4:ac:82:cc:7d:
5b:cc:6f:94:e8:0d:f1:27:ee:ff:94:85:a4:4e:89:
d4:04:4a:5a:14:eb:79:d8:9f:98:87:6a:e4:95:7c:
1e:5b:4e:97:7f:60:57:06:a4:b0:4c:12:fb:5c:d5:
22:d8:fc:39:cf:4c:1f:01:0b:dc:ac:6b:21:48:25:
f8:1a:98:3b:4b:8e:91:79:bc:35:d5:7a:4b:90:0b:
9a:23:39:d8:3d:c5:9d:35:be:01:3c:bc:31:c0:a4:
2c:02:f9:be:48:5f:37:ab:2b:47:37:c5:5c:d7:7d:
bc:d4:75:f2:7e:07:37:d0:ed:19:3b:81:9e:81:3d:
6f:6a:e9:a8:ae:d2:8d:b4:c8:0f:fd:17:9e:cc:84:
e3:87:56:c4:d6:cf:88:f4:06:1b:a6:95:d2:fe:b7:
68:cc:fb:2a:63:ad:8a:85:73:50:03:eb:77:65:d9:
75:61:98:72:b4:d0:8b:05:e9:5d:5a:3f:d2:80:28:
26:a1:ec:d2:bc:8a:8c:bf:7d:75:33:8d:9c:2a:01:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:80:BB:6B:78:21:58:C8:97:F3:6A:09:BE:E3:84:93:77:A9:71:20
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rIC7a3ghWMiX82oJvuOEk3epcSA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
af:d3:69:44:f8:a9:50:55:22:e7:78:7f:b8:59:b2:9f:90:bf:
c5:e7:a5:de:61:d4:a8:c3:a5:38:9f:1a:12:8d:22:56:63:66:
ef:b4:6d:76:d5:7d:ab:dd:c1:88:7e:fd:8a:56:a8:b2:06:f7:
9d:8e:37:38:01:74:2f:c4:89:6c:49:4e:b5:a9:be:6b:4e:f1:
1e:45:56:e2:28:0a:35:48:93:b0:51:4f:11:72:20:9d:f5:02:
b8:e9:5f:55:14:0f:6f:48:17:97:b9:4a:45:7a:e3:18:7a:cc:
db:80:3d:fc:f3:d7:74:8d:f6:0d:38:34:e2:21:3a:82:d6:d8:
48:d8:e7:a3:f9:f8:98:b4:a5:24:40:ba:1b:5e:0d:d4:4e:f2:
47:12:ea:91:f4:03:f3:8a:bd:75:13:fd:3c:6a:ae:be:3e:60:
20:98:f7:21:59:ab:96:9a:ae:6d:d9:59:6c:d1:96:d2:08:b1:
c4:6d:36:55:43:20:60:16:64:d0:cd:c2:f3:4e:f5:0c:ee:14:
5f:96:14:60:8e:28:aa:fe:f3:25:4d:ab:ec:bf:73:21:5e:a1:
c5:5f:48:92:96:bf:4f:c8:8a:22:18:23:53:3f:b8:b6:90:58:
e8:c8:88:c7:87:fc:a5:dd:d4:26:fa:48:fa:b5:ee:a4:7c:8c:
a1:28:c4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 23:21:24 2024 by rpki-client on console.sobornost.net