Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Wv2_GP-WQ2uj23i_WTu-xDCRczQ.roa
File: Wv2_GP-WQ2uj23i_WTu-xDCRczQ.roa (raw, json)
Hash identifier: N1ofEmJ/Ek0uCn9yk4wOZsBINkZQlJkkVSSDUNaXNJs=
Subject key identifier: 5A:FD:BF:18:FF:96:43:6B:A3:DB:78:BF:59:3B:BE:C4:30:91:73:34
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44DB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Wv2_GP-WQ2uj23i_WTu-xDCRczQ.roa
Signing time: Sat 20 Apr 2024 09:23:06 +0000
ROA not before: Sat 20 Apr 2024 09:23:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17627 (0x44db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 09:23:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5AFDBF18FF96436BA3DB78BF593BBEC430917334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:3a:ee:68:bb:fe:d4:1a:46:c4:c1:8c:3e:
92:4f:de:df:31:d9:44:7c:e5:f4:38:c1:c0:45:b3:
1f:5c:75:00:1e:73:dc:bf:3b:43:e7:0e:61:07:05:
9d:42:04:1e:6f:40:b5:4b:95:84:f0:05:e0:40:f6:
09:bd:80:1f:db:fd:5b:17:d4:4c:1e:94:4f:6d:0d:
2f:ba:1f:1e:dc:76:e1:a0:e6:cd:1b:3a:47:6c:ee:
9f:51:c8:e2:b7:76:aa:56:54:06:e3:0a:99:84:d0:
41:5d:bb:5b:39:e0:2d:f3:b0:66:af:59:83:9c:79:
e7:5b:c5:f5:71:86:4f:be:de:f1:7e:64:e1:a6:73:
f6:a1:21:ab:39:15:9a:d6:2c:96:92:6a:fb:29:cb:
aa:71:05:b6:6f:3a:67:64:f5:1b:97:06:44:16:5b:
9d:cb:3f:df:89:9c:cb:a6:92:ac:e8:ec:28:74:60:
de:59:57:b7:8b:a7:21:a8:86:32:34:49:7c:31:7b:
e2:c5:d3:f6:10:c9:fd:a1:e3:d6:d0:c0:12:16:2e:
bf:a2:fe:4f:d5:da:75:88:3f:cd:91:bd:16:35:18:
e8:1c:15:5b:e8:46:2e:34:7e:39:dc:c7:28:2e:39:
8a:2d:44:3a:0d:31:fc:bb:9a:aa:34:35:98:3f:0a:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FD:BF:18:FF:96:43:6B:A3:DB:78:BF:59:3B:BE:C4:30:91:73:34
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Wv2_GP-WQ2uj23i_WTu-xDCRczQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b8:c3:c1:8e:08:86:9f:cc:23:09:2a:58:18:bf:2b:f9:ff:72:
df:d4:5f:a8:d3:f1:47:e0:31:16:e3:8b:5c:a0:e1:60:63:39:
b3:d8:af:6c:df:79:a0:b3:d7:40:1f:23:30:b2:54:9f:ea:84:
7b:d4:3b:80:fa:c3:aa:08:2c:f9:6e:3c:03:9b:85:e0:c9:3b:
eb:9a:24:03:b6:ea:97:84:ae:d0:f6:35:e9:23:23:bb:55:8e:
11:47:55:53:c2:13:fe:03:f8:16:9e:0a:4a:57:38:3f:26:ed:
5d:1c:d7:c4:a6:83:2d:08:81:41:ae:ac:ee:c8:23:6b:2a:7f:
c6:10:e4:90:f7:81:9d:00:64:a7:97:09:9e:28:51:b8:9e:b0:
10:0d:c8:9a:92:72:2f:f3:99:59:8d:72:7e:05:33:29:69:90:
1a:c8:c0:22:6a:b1:75:d8:8a:a4:b4:df:46:66:bf:ef:64:d0:
80:cd:9b:f2:f9:a0:26:c9:e9:5c:73:b3:d1:2c:1e:f2:ed:92:
2b:67:c3:76:cb:4b:d5:33:f7:3a:93:a5:24:37:c5:4d:fc:87:
f4:15:94:07:e5:51:7e:e5:bf:1e:95:6d:0e:7d:be:99:dd:ff:
73:41:9d:4b:1f:98:81:0e:f6:fc:34:17:65:72:de:45:20:3c:
f8:09:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:00:58 2025 by rpki-client