Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ikq1RY-EOshNMWmc_wtoq9u7lR8.roa
File: Ikq1RY-EOshNMWmc_wtoq9u7lR8.roa (raw, json)
Hash identifier: niNkc7sCypuAPruH6v5bmjRzKYm5i6OJllCQUEvznZE=
Subject key identifier: 22:4A:B5:45:8F:84:3A:C8:4D:31:69:9C:FF:0B:68:AB:DB:BB:95:1F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 379B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ikq1RY-EOshNMWmc_wtoq9u7lR8.roa
Signing time: Tue 02 Apr 2024 17:22:14 +0000
ROA not before: Tue 02 Apr 2024 17:22:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14235 (0x379b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 17:22:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=224AB5458F843AC84D31699CFF0B68ABDBBB951F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:6a:5f:f4:d5:98:a7:3f:ac:f8:1d:b7:c3:
9e:8e:f5:9e:c6:6c:b1:52:8b:5e:d6:24:1a:7c:19:
4c:37:cf:b9:2d:95:00:13:b1:1e:f4:b6:03:73:19:
37:dd:85:49:f0:5b:9b:2a:05:c1:1c:02:34:d3:70:
7f:56:a4:0d:41:f5:1a:47:98:53:27:8b:2b:f2:41:
71:77:df:f8:f0:64:b2:bb:e8:fd:e7:9b:7e:7e:e4:
19:16:48:01:8b:96:49:d3:fb:3f:b9:30:70:9e:d0:
44:0d:8b:c6:17:99:6f:79:5f:51:54:77:ac:9c:cb:
ff:1b:af:b6:3a:00:d2:2a:2d:97:7a:6e:dd:7f:27:
eb:0e:46:18:1c:02:b7:0e:8b:50:ec:8d:a0:ed:63:
cf:84:65:ea:d7:04:ff:5d:36:62:48:95:f1:52:2a:
30:64:9e:98:1f:e2:ec:c5:3f:b9:cb:0d:59:56:d8:
d7:01:8a:b5:e3:19:73:cf:95:35:a0:c3:72:c1:aa:
92:a4:09:f9:21:46:1b:72:7b:28:7f:7c:2e:bb:37:
4e:90:0e:30:76:8c:86:71:72:ec:96:9c:6b:8c:24:
10:e9:41:2a:a8:50:c2:e7:44:64:20:c6:dc:76:95:
f1:23:b8:a1:59:04:c4:83:68:b9:8b:af:3a:5a:ab:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4A:B5:45:8F:84:3A:C8:4D:31:69:9C:FF:0B:68:AB:DB:BB:95:1F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ikq1RY-EOshNMWmc_wtoq9u7lR8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
40:df:54:ad:fa:95:78:f9:ce:7e:39:ac:75:09:5a:56:09:77:
ea:82:9a:96:7f:a3:ca:62:0d:3f:a3:f4:82:89:88:1e:8d:21:
1d:71:7e:a9:96:2b:53:9f:d2:dc:ad:d6:43:c8:1e:b4:91:c0:
b0:4f:e3:e7:2d:e6:14:7a:0b:83:2c:95:d3:e7:30:56:fb:fc:
3e:fe:a2:d6:3c:f9:22:b9:de:be:ea:4e:be:bd:59:21:3b:8f:
f4:17:d6:93:1f:29:e8:ae:4d:10:24:0d:92:18:2e:70:60:3e:
2b:2a:a3:21:1b:10:57:e9:8e:71:7f:a8:46:59:ea:a2:a0:d3:
4a:01:fc:02:e4:c8:c8:aa:d3:d9:5f:20:26:95:29:15:3f:a2:
fb:19:72:dd:cd:83:08:be:44:eb:f8:d1:ee:12:c0:05:e5:9f:
10:36:6a:93:bc:0e:08:8e:5f:dc:65:dc:0e:8d:6a:83:86:36:
02:18:58:bf:e5:16:2f:d9:24:6a:82:a1:a8:04:68:72:34:3e:
f5:0a:64:0d:a1:ba:81:d3:12:64:d0:9b:e3:d1:b2:81:41:31:
b1:ed:9e:a4:3b:25:09:66:a0:36:93:f5:53:b7:ad:7b:c5:db:
2b:8d:51:2e:04:a4:2f:54:71:10:72:4c:ee:02:b5:37:6d:3a:
1d:f3:1f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:23:39 2025 by rpki-client