Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xYd_Rl1ene4O8C9Btka5c30wLFE.roa
File: xYd_Rl1ene4O8C9Btka5c30wLFE.roa (raw, json)
Hash identifier: L2oRwXt29PPUsQhJle1ltgt1+JYXHKSObkcLmsMpLSQ=
Subject key identifier: C5:87:7F:46:5D:5E:9D:EE:0E:F0:2F:41:B6:46:B9:73:7D:30:2C:51
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4BBB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xYd_Rl1ene4O8C9Btka5c30wLFE.roa
Signing time: Mon 29 Apr 2024 13:23:32 +0000
ROA not before: Mon 29 Apr 2024 13:23:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19387 (0x4bbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 13:23:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C5877F465D5E9DEE0EF02F41B646B9737D302C51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:f3:67:3e:d5:41:b1:8c:d5:9d:ad:6b:0b:
c9:81:ad:98:07:a1:90:95:d7:88:91:7f:ca:bf:ba:
c7:e7:06:65:80:c4:68:1b:fe:d1:27:0d:91:84:14:
66:3e:63:24:a1:c9:79:f7:92:ed:a7:7e:96:65:14:
9a:9d:9f:63:dd:21:6b:4a:96:9b:4a:65:b6:7b:22:
ca:2e:9e:c7:c2:20:9f:59:13:8a:1a:90:9e:b4:59:
dd:b6:c8:83:4b:5f:72:ef:3f:81:d8:54:b9:dd:87:
b8:bb:a7:5f:9a:d0:70:8e:da:b3:d5:be:72:d1:bd:
8a:22:ae:8f:f6:f6:15:16:8c:46:f5:b5:1b:77:b0:
67:77:80:fe:ef:a3:a7:b9:e4:12:50:e3:26:ac:62:
dd:1e:00:a8:fd:a1:88:1f:42:29:34:a9:41:aa:8b:
11:f1:dd:35:30:f2:31:e1:c4:11:6e:0d:72:1a:dc:
e8:7f:e1:c6:b9:37:c0:2b:00:4f:8a:e9:af:90:c2:
8a:7c:20:f8:e5:97:61:11:0a:d6:d4:e4:a2:e3:96:
23:c4:ae:4e:66:4d:5f:c2:c0:2c:2d:6a:fe:3d:0c:
4d:b5:74:65:b2:ae:11:fa:0d:9e:e6:34:ec:e5:b2:
db:51:25:7b:1e:d7:54:46:af:c7:a6:18:f3:b1:99:
3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:87:7F:46:5D:5E:9D:EE:0E:F0:2F:41:B6:46:B9:73:7D:30:2C:51
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xYd_Rl1ene4O8C9Btka5c30wLFE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
17:0d:70:95:6f:96:5a:04:4b:5d:cb:25:4a:3f:2f:1f:50:45:
34:3f:e5:2a:7d:40:4e:46:b0:69:6d:8d:6e:78:df:c5:b0:4e:
f9:b6:1f:77:81:a5:77:69:aa:e2:de:bb:f6:61:cc:dc:32:8d:
96:48:3c:43:09:eb:0d:cf:4e:11:12:0e:9d:aa:c6:6d:94:3d:
da:17:7f:0b:aa:98:30:80:15:6b:07:6a:1d:8c:d7:fd:14:0d:
66:eb:df:21:f1:be:d3:62:03:b2:fa:8a:ed:61:f3:80:2c:ee:
66:4d:37:50:bb:00:67:b0:40:a7:f1:6a:73:09:d8:83:2a:14:
7d:42:67:7d:2c:f9:f5:bf:90:22:d3:fb:65:c3:f5:f1:37:8c:
75:0b:00:99:15:03:58:a4:3e:78:04:da:89:ad:c5:6a:31:65:
28:55:0a:10:d9:e9:f4:f9:28:8c:47:e3:f2:b7:b9:95:6f:78:
a7:27:6f:f7:af:3b:3d:18:c2:ac:39:27:f0:02:e0:10:33:c4:
2c:aa:ce:47:72:96:78:8e:5b:37:84:c2:ec:94:b8:5b:ed:7c:
8f:1e:1c:73:71:19:7c:78:27:b1:05:cc:26:97:0a:af:03:f3:
3e:94:bd:0b:eb:67:66:8a:04:ea:51:cb:6d:cb:8b:6a:3a:6f:
f8:c4:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 19:13:37 2024 by rpki-client on console.sobornost.net