Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/0HwCVwLjTtcCtyRuWgeIIqP4MhA.roa
File: 0HwCVwLjTtcCtyRuWgeIIqP4MhA.roa (raw, json)
Hash identifier: +Z9MyWpzipO/8A6sYn3S5mkcMMNKk+E4sFkk9PPyrcs=
Subject key identifier: D0:7C:02:57:02:E3:4E:D7:02:B7:24:6E:5A:07:88:22:A3:F8:32:10
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 498B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0HwCVwLjTtcCtyRuWgeIIqP4MhA.roa
Signing time: Wed 08 Jun 2022 00:30:08 +0000
ROA not before: Wed 08 Jun 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18827 (0x498b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 8 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=D07C025702E34ED702B7246E5A078822A3F83210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:27:8f:ae:58:50:27:f1:52:b1:b9:4a:5c:
ba:b1:21:27:8f:d7:aa:90:fe:59:5f:fc:89:e6:6c:
c5:da:59:e8:b6:b2:d4:e9:10:30:8a:c9:97:c8:05:
23:24:aa:d1:0f:3f:32:02:a6:7b:da:4c:4f:61:06:
c5:32:f5:d2:36:f9:f7:a6:59:39:3c:12:9b:8c:1d:
f4:25:f8:0f:74:b7:d6:a8:94:0b:59:55:76:9c:21:
5e:21:a3:22:a2:30:42:1b:1e:2b:9e:b4:96:96:40:
e8:af:6a:b9:d6:57:08:0c:8d:f9:e0:0e:aa:93:80:
fe:1c:09:fe:34:4f:df:aa:c6:e7:55:8a:49:db:19:
8f:e8:02:9d:7c:45:ff:81:e8:6c:90:bf:4c:3a:1e:
72:ed:3c:f9:d6:5e:88:96:1c:78:c8:bc:77:1e:33:
3d:fc:89:29:b6:03:66:47:58:5b:92:8d:16:6c:a6:
c5:54:26:1b:e6:71:1e:d5:53:f2:c1:ce:e0:20:3c:
6c:42:8d:a2:ec:53:63:f1:18:7a:30:83:57:ae:5c:
e3:8a:03:b6:c9:49:21:88:d9:c8:ef:f2:71:76:56:
be:e0:55:32:ed:08:08:79:ca:13:82:b0:52:bf:3f:
16:03:dd:2f:ea:fd:b6:bb:48:0e:d6:a0:ef:a9:15:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7C:02:57:02:E3:4E:D7:02:B7:24:6E:5A:07:88:22:A3:F8:32:10
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0HwCVwLjTtcCtyRuWgeIIqP4MhA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b3:09:c1:be:c2:52:94:ff:71:a6:b3:64:1c:d7:31:52:9f:
36:ee:3d:24:be:16:12:f9:b4:52:01:c0:83:f7:0a:9d:ce:17:
0a:85:02:04:05:75:31:b9:10:fd:2b:3f:ba:90:dc:3c:f0:32:
72:69:96:c2:a0:23:e4:c6:67:ba:d6:28:ac:25:0c:c3:fa:cb:
2d:c7:64:10:95:82:14:a6:2b:0f:fa:9c:51:af:91:2e:b2:e5:
aa:05:04:f9:0a:e0:4f:ed:f6:29:88:25:9b:8a:90:f9:6f:75:
5a:a5:64:3d:de:fa:81:67:03:ec:84:22:54:5f:05:0e:00:d1:
15:23:5f:08:5f:a1:01:33:43:9b:79:ec:e7:33:08:6f:8a:fa:
4b:4a:c1:bb:39:7b:2c:a9:3e:6e:53:03:8c:1f:85:5f:b8:55:
26:e4:61:db:d2:96:45:33:12:fa:bc:d5:49:4f:f4:3c:cf:72:
a9:7a:54:03:eb:b5:28:0a:b3:17:f3:e3:2e:98:b3:ca:6b:5a:
db:96:ac:48:8f:aa:f9:24:e9:f7:bb:91:71:db:aa:34:c4:19:
f5:48:81:6a:db:d7:76:4e:5b:4b:e8:9b:a5:28:b5:85:d3:c7:
a2:36:f8:f1:5c:ab:7e:a3:ba:b0:de:f2:4f:c8:3d:0c:ed:74:
ea:8b:69:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org