Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/wDMVCYBsTi-H7TzpVqqaNnaT-U8.roa
File: wDMVCYBsTi-H7TzpVqqaNnaT-U8.roa (raw, json)
Hash identifier: aCqIRJyc+3BwxvglqHW/KaXOCMDVU2ElRHQfOy6as8M=
Subject key identifier: C0:33:15:09:80:6C:4E:2F:87:ED:3C:E9:56:AA:9A:36:76:93:F9:4F
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 15C7
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/wDMVCYBsTi-H7TzpVqqaNnaT-U8.roa
Signing time: Wed 13 Mar 2024 01:23:39 +0000
ROA not before: Wed 13 Mar 2024 01:23:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24362
IP address blocks: 2400:b600::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5575 (0x15c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: Mar 13 01:23:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C0331509806C4E2F87ED3CE956AA9A367693F94F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:a2:e5:4b:89:4e:52:78:93:60:c4:7b:f9:
d2:4f:00:06:ff:29:ab:ec:ed:f0:e0:88:ea:2e:54:
59:d3:b5:e2:65:5d:05:93:e1:7c:96:ae:5c:dc:93:
46:e5:ff:e9:8a:0f:49:85:9a:e1:67:95:8e:57:f8:
f1:ee:63:ab:58:bf:2a:ee:96:87:16:4d:d5:66:7a:
6b:9d:60:1e:78:0e:b9:61:ec:13:d1:9a:8b:91:e3:
8a:51:ea:28:41:86:d2:40:45:5a:eb:db:15:cd:e5:
e3:cd:e4:de:78:e3:2f:29:7b:f3:76:76:34:e6:4f:
19:79:02:28:53:f5:a9:63:e0:7e:e4:68:6f:13:b5:
dd:83:c7:43:61:fc:c1:9c:0b:b1:ab:43:2f:45:5e:
f9:11:5c:f4:82:7a:d6:c8:41:a7:7c:7a:12:47:86:
53:bf:95:9f:76:da:c1:7a:27:45:db:57:48:b7:92:
d7:62:06:73:c0:aa:88:95:5c:14:c9:92:be:80:bb:
7f:a0:c6:ec:a8:04:ec:6c:9e:b4:a7:ff:b0:52:05:
2d:2e:e2:5b:3d:54:68:34:ca:3b:2c:1d:de:7a:25:
f4:9a:2f:b5:24:ce:ce:f4:e3:94:31:ba:a9:c6:44:
1a:75:29:b8:3b:4b:4a:13:6c:a1:89:ef:b4:01:c2:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:33:15:09:80:6C:4E:2F:87:ED:3C:E9:56:AA:9A:36:76:93:F9:4F
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/wDMVCYBsTi-H7TzpVqqaNnaT-U8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:b600::/32
Signature Algorithm: sha256WithRSAEncryption
26:d7:04:64:db:84:7a:a8:82:04:0e:e2:56:5e:a8:e8:33:49:
a0:e0:ff:ea:e6:b2:87:70:94:0c:26:26:55:e8:d4:7f:b8:23:
73:07:cb:28:6e:75:8b:f4:b4:49:b8:b7:e5:37:97:eb:25:29:
0b:c6:81:39:e2:6a:9a:b7:0c:1e:56:ea:26:73:61:d4:df:16:
b2:1c:0a:e6:2a:b0:79:16:56:06:95:fe:62:f6:f5:22:79:1a:
31:70:0f:9f:97:ee:f3:bd:94:52:cb:a6:05:c2:62:3c:bd:51:
c1:c2:64:a0:96:e9:5e:42:a3:63:36:4b:46:59:52:39:06:6d:
f7:e8:fd:54:f7:14:4e:0e:c9:c6:12:a5:e7:fc:27:b7:45:8c:
c9:ca:5b:18:d5:16:e3:79:92:aa:90:ea:08:15:3f:66:d8:d4:
c8:71:45:a1:5e:e9:9e:73:af:ad:a0:18:34:75:4b:dc:52:95:
73:11:be:97:a6:4c:ab:2b:96:66:51:13:5f:3d:6e:b4:1b:ae:
1c:f8:d5:23:e9:72:0d:7b:c4:d6:8c:3d:6c:f4:77:d5:fb:27:
52:1a:5d:d1:ec:82:80:e6:f3:fc:64:01:da:70:6f:a5:91:6d:
21:d4:75:9a:46:83:c4:c0:12:94:a2:4b:4f:2a:a1:17:8f:cc:
ac:df:cf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:11 2025 by rpki-client