Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/u_LLs4a02oV08z38o7l1A-LEWEM.roa
File: u_LLs4a02oV08z38o7l1A-LEWEM.roa (raw, json)
Hash identifier: /5ijCk1Zjf0WjTvYAe2W4F58VimUH1ugAaBtLGdCubc=
Subject key identifier: BB:F2:CB:B3:86:B4:DA:85:74:F3:3D:FC:A3:B9:75:03:E2:C4:58:43
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 360B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u_LLs4a02oV08z38o7l1A-LEWEM.roa
Signing time: Sun 31 Mar 2024 15:22:12 +0000
ROA not before: Sun 31 Mar 2024 15:22:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13835 (0x360b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 15:22:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BBF2CBB386B4DA8574F33DFCA3B97503E2C45843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:e3:75:0b:55:4f:45:0e:76:f3:4b:b9:13:
59:75:0d:ab:8a:d4:b0:38:1a:b9:e9:f5:62:10:0f:
18:62:d8:d9:6d:ae:35:5e:a5:2c:49:1e:25:a5:64:
3c:68:a7:af:2a:4b:8e:0c:72:8a:a7:81:cc:3e:9d:
c0:8f:71:d1:df:cd:9a:a4:bd:15:a5:d6:31:27:49:
b0:3a:c1:49:98:5a:8e:86:d4:32:73:a8:aa:e9:d2:
bb:c5:63:04:10:7c:d8:dc:49:9c:cf:5e:5d:76:08:
5b:de:48:95:63:71:95:58:8b:89:c4:a7:23:2b:56:
3c:eb:ec:87:d1:5a:df:9f:74:4d:93:49:27:37:14:
57:6d:ef:f4:90:67:f5:cc:33:8d:0f:1f:03:57:1a:
03:9b:b4:5a:16:21:68:bf:ab:e2:26:38:bb:f2:a9:
02:19:41:74:ba:d2:05:dd:f0:dc:51:e5:6d:7a:cf:
49:dd:7b:6d:44:0d:3b:20:e3:63:e0:a3:d7:bf:e0:
d7:06:c9:22:20:88:d8:88:38:8d:e1:e2:ee:39:89:
2d:60:9e:9c:2c:fa:88:39:6e:15:cd:87:1d:a9:cc:
da:2f:15:93:81:5f:8d:75:d1:e1:54:bd:b4:33:60:
2a:a6:82:ba:67:ed:b4:de:c9:97:78:a8:42:70:76:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F2:CB:B3:86:B4:DA:85:74:F3:3D:FC:A3:B9:75:03:E2:C4:58:43
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u_LLs4a02oV08z38o7l1A-LEWEM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
15:d2:20:b8:b2:c9:3b:44:c7:d3:d0:df:dc:65:41:18:04:94:
53:5a:eb:a7:dc:22:79:09:d3:86:96:55:fa:11:1d:2c:7b:6e:
c7:61:08:17:c4:e3:3d:bf:37:90:68:8f:30:36:b3:48:c8:0a:
f3:86:0d:09:d0:37:01:4f:31:e1:2e:9a:01:06:0c:9e:10:75:
13:ad:6a:5a:67:b1:59:09:d8:5f:33:f7:25:20:31:b5:84:e0:
80:c8:e5:33:c3:3b:bd:3a:04:71:64:7a:6b:66:28:36:22:07:
f8:d7:71:81:6e:35:fa:3c:38:1e:47:18:73:a9:89:cc:90:a5:
83:86:49:8c:ad:3a:f4:87:1a:31:a3:fe:8a:ab:c5:86:98:89:
90:31:6a:da:e2:e8:db:6b:6c:d7:fc:a7:e6:03:d2:66:40:3c:
56:f0:ea:99:4f:3c:b1:2e:d5:0d:36:ab:7f:65:cc:46:de:f4:
a1:23:64:a8:e2:df:5e:08:5a:1b:4c:66:b3:41:cf:94:99:fd:
3b:dd:66:59:e6:d6:84:e8:d4:2e:fe:06:f9:50:2e:40:1b:3e:
f0:de:3e:71:bc:21:48:3d:96:e7:5d:15:87:25:9b:a1:0a:aa:
ff:c1:b9:d4:58:1f:ac:26:b1:53:d9:1c:98:6c:20:37:9a:81:
65:07:6b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:16 2024 by rpki-client on console-ams.rpki-client.org