Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/VE2KEgbs2RvtMx7PoQznsfhzJas.roa
File: VE2KEgbs2RvtMx7PoQznsfhzJas.roa (raw, json)
Hash identifier: CgyfPPkSP8eM+3H4IEet6k5l4Vyn0ux7olwT5BOHIwo=
Subject key identifier: 54:4D:8A:12:06:EC:D9:1B:ED:33:1E:CF:A1:0C:E7:B1:F8:73:25:AB
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08BE
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/VE2KEgbs2RvtMx7PoQznsfhzJas.roa
Signing time: Wed 14 Jun 2023 19:24:05 +0000
ROA not before: Wed 14 Jun 2023 19:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2238 (0x8be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 19:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=544D8A1206ECD91BED331ECFA10CE7B1F87325AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:34:96:7e:1f:36:37:34:0a:ad:a5:18:eb:
d1:99:bd:ad:fa:70:37:58:88:4a:61:2e:7d:b0:33:
04:c1:cb:c1:2d:70:14:56:33:bb:68:97:18:09:a0:
49:ae:f1:e2:a7:f7:b2:6f:2d:02:f6:0a:ac:ed:f4:
a5:d4:5c:32:f2:0f:a6:93:7f:47:c3:53:b5:58:91:
65:74:24:89:b1:6e:48:b7:d9:8f:e5:85:f9:b7:5f:
86:56:94:6c:8c:2e:03:03:68:50:1a:72:9c:bf:e3:
62:26:15:b6:b8:a3:d1:d0:01:e4:e7:54:fe:16:27:
cf:47:a0:72:6b:9a:4d:75:03:90:da:d6:32:da:4c:
9e:1b:2b:98:6a:c2:86:17:d7:a8:82:a9:84:69:68:
f3:e5:80:a9:a8:af:ee:64:8a:7d:95:19:c4:ce:dc:
da:bf:30:42:d4:a7:30:78:d7:fc:35:c4:ce:fc:31:
39:e1:ba:c1:ad:25:56:cd:1c:70:d9:69:1b:3c:91:
2a:fb:bb:19:0d:6b:5f:2c:e8:f4:f7:1f:4c:59:f6:
f7:e7:37:5a:d1:4e:f3:cb:1f:71:eb:33:9a:28:30:
22:3d:d7:57:51:5e:96:f2:10:d3:f7:28:aa:c0:69:
15:53:1c:32:94:93:2d:dd:e8:ce:32:b0:db:b4:53:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4D:8A:12:06:EC:D9:1B:ED:33:1E:CF:A1:0C:E7:B1:F8:73:25:AB
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/VE2KEgbs2RvtMx7PoQznsfhzJas.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
49:c6:2e:30:1d:94:b3:f7:23:a0:05:c4:3f:26:3e:89:4a:bb:
d0:e7:48:46:c1:5b:37:53:09:b7:de:7f:3d:6a:1c:0b:f2:51:
4c:c7:e4:3e:01:a4:a4:90:df:15:de:92:34:88:f6:c3:c2:f0:
7b:71:c4:e7:cc:cc:7a:c3:8c:f4:6a:5b:c3:d8:9a:ca:0f:5c:
94:cb:4f:5d:8f:df:c3:b0:69:eb:2d:d9:e3:cf:54:70:52:47:
c4:3f:9f:83:7d:6f:02:e5:ff:2e:13:27:33:36:c0:1a:cf:c5:
9d:b0:41:9b:3c:23:6a:34:f2:b7:2c:74:d0:7d:90:f5:ce:17:
b7:e1:f3:d6:6b:65:a8:cd:1f:4c:7f:fe:cd:5d:c3:12:83:fc:
95:06:fd:89:6b:94:c1:a2:fb:83:d5:f1:6e:d9:4b:0f:18:ae:
41:2b:0c:e9:d6:d0:2b:78:bd:21:e4:67:14:8d:9b:c6:22:a9:
ef:5e:6e:70:90:f1:f2:9d:9e:bb:f2:63:7e:3a:fc:d9:ab:f1:
58:5e:f1:b8:84:8f:6e:cf:ec:c1:77:a1:20:f7:ff:3c:65:b8:
6a:62:d9:25:d3:9e:68:73:6c:7c:4d:55:8d:93:e5:88:cc:74:
81:e3:a4:95:a1:4c:88:fb:18:f5:46:00:3d:3c:42:fd:0f:1c:
6b:c6:ce:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org