Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/l-EUixrSeFy5FY-FC4-S-YYecxQ.roa
File: l-EUixrSeFy5FY-FC4-S-YYecxQ.roa (raw, json)
Hash identifier: 2KwQB1ff9fVaFYbizlPkjEsXOA1GlsZ5YK96IeZ1iNY=
Subject key identifier: 97:E1:14:8B:1A:D2:78:5C:B9:15:8F:85:0B:8F:92:F9:86:1E:73:14
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0630
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/l-EUixrSeFy5FY-FC4-S-YYecxQ.roa
Signing time: Mon 20 Jan 2025 01:24:49 +0000
ROA not before: Mon 20 Jan 2025 01:24:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1584 (0x630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 20 01:24:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=97E1148B1AD2785CB9158F850B8F92F9861E7314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:63:07:80:50:91:9f:ac:5c:aa:fd:e3:6a:
1b:47:2d:3c:2d:7c:2f:13:09:0b:2c:6c:2d:ed:a7:
02:3c:84:e1:0b:71:97:73:80:fd:21:34:cf:73:6b:
c5:b9:8b:34:e4:6d:9a:e4:0c:8c:8d:78:9b:0b:35:
ca:a1:db:8e:2d:77:84:53:43:36:15:9d:19:ab:56:
20:33:24:2a:a8:ea:8b:a6:1d:64:7f:6b:e5:8a:ea:
a3:0b:89:6b:62:9c:a4:4c:6a:15:c3:35:ef:4e:f0:
51:e9:6e:3b:75:af:c5:2f:6b:59:b0:4f:ae:23:7d:
f2:fb:a5:73:33:ca:2f:d4:e4:e1:33:4d:55:38:08:
30:1b:8a:58:19:e0:09:d8:64:3a:e7:b2:a7:81:0b:
5e:6d:92:19:00:48:15:4d:5f:46:f2:64:c6:77:9f:
6f:b4:5d:1b:6d:60:6b:33:67:cb:8b:cb:ac:c2:5b:
ee:e7:67:a5:03:f2:cc:b8:95:05:94:0d:c9:a6:48:
3c:55:a5:68:5a:0d:37:b8:2d:68:08:33:23:a4:a5:
3d:1c:23:c7:1e:12:a4:7a:95:b9:44:45:09:64:46:
85:5d:d7:1b:9b:85:81:9c:81:f8:2a:98:c3:cd:90:
eb:3d:e8:fa:99:cd:cb:fa:cf:94:ef:f3:32:cf:8b:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E1:14:8B:1A:D2:78:5C:B9:15:8F:85:0B:8F:92:F9:86:1E:73:14
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/l-EUixrSeFy5FY-FC4-S-YYecxQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
05:ac:ad:06:e7:83:b8:7c:a5:e5:85:5e:26:b8:42:85:f7:16:
87:40:93:61:88:7e:8e:0d:cd:19:97:0e:11:cb:8b:5f:ce:7f:
fc:63:d0:57:38:65:2f:6e:5e:1b:80:6d:75:bf:c2:7e:83:a3:
62:80:21:b3:99:52:ed:3f:63:ff:6c:f3:0c:20:20:01:c9:13:
a7:a0:0f:7f:66:00:2c:66:9e:31:1b:06:3f:ac:53:d2:a7:e9:
6a:eb:1e:49:66:a6:c7:70:20:4b:e3:cd:0f:82:b1:fc:1c:3e:
7d:72:80:70:6b:c7:47:c4:9b:2f:c6:59:af:dd:6e:af:9a:87:
de:5c:f7:f1:0a:79:05:c1:50:cf:1e:6a:7b:46:a5:8f:14:96:
29:56:7a:21:bc:69:70:f4:c4:b6:95:cf:5c:86:38:9f:48:a2:
41:50:58:e5:de:3e:fd:f0:03:05:e1:03:71:e4:7a:12:0f:7f:
1e:8d:d6:ea:45:f2:00:2e:28:e0:c6:2b:13:86:6f:db:83:56:
f6:b0:b1:1a:44:b6:ba:bd:bb:20:bf:dd:da:9e:2a:97:e1:e6:
8e:b2:70:35:09:6d:83:b2:7f:79:3e:3d:cb:91:97:83:e9:0d:
6c:4e:f9:19:46:60:99:e3:7b:83:7f:e4:bd:4f:24:d2:6a:ec:
d9:be:5d:6c
-----BEGIN CERTIFICATE-----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=
Generated at Mon Jan 20 05:25:37 2025 by rpki-client on console.sobornost.net