Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/0PC_S5_QMArIKOOI3m5Lw5HDpcw.roa
File: 0PC_S5_QMArIKOOI3m5Lw5HDpcw.roa (raw, json)
Hash identifier: auPL7ZbHkiHpNHK8luY6Qbw6KqcwcbIhvgOZ8Y+Tu1A=
Subject key identifier: D0:F0:BF:4B:9F:D0:30:0A:C8:28:E3:88:DE:6E:4B:C3:91:C3:A5:CC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 430C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0PC_S5_QMArIKOOI3m5Lw5HDpcw.roa
Signing time: Sat 12 Feb 2022 00:30:07 +0000
ROA not before: Sat 12 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17164 (0x430c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 12 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=D0F0BF4B9FD0300AC828E388DE6E4BC391C3A5CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:d1:32:0b:11:62:e2:10:87:8c:c2:21:49:
65:a3:df:0a:14:d4:e5:43:ce:d5:6d:b8:a7:c2:64:
1f:b8:db:83:1f:83:ba:6d:d4:d0:0f:bc:39:29:ee:
7a:4d:01:f5:32:dd:e1:76:2e:1e:55:05:27:c7:cc:
ef:15:d0:d6:17:80:c9:7c:58:15:80:eb:17:37:72:
1d:21:b2:ef:e3:19:6a:ad:e8:51:b5:35:b2:c1:9b:
b7:d3:3e:e2:b0:4b:5d:83:54:7a:09:b3:35:93:e1:
78:34:0c:33:a8:00:12:e8:6b:7e:bf:e3:b3:d3:4a:
d4:c3:42:9e:9a:ff:37:3f:46:71:0a:c8:29:7a:b6:
6a:91:af:ea:ac:7e:2b:33:15:2c:9f:bc:72:3f:23:
20:2f:9e:70:6e:38:e4:5a:fc:84:b8:2c:c3:3a:38:
ca:12:88:8f:ff:8f:99:90:7e:14:94:52:ad:e1:5f:
d4:10:ec:21:22:e4:4c:83:bb:1d:72:2c:4c:cd:7a:
f0:dc:18:4f:6a:35:10:a2:d4:06:f0:eb:3c:78:72:
e6:ee:1e:aa:9e:cd:09:91:0b:3e:8f:85:1d:d2:6f:
9c:de:50:70:f9:44:fe:0d:82:00:97:7b:63:cd:91:
10:b7:01:b4:51:ea:9a:04:bf:d7:7b:91:7b:8c:47:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F0:BF:4B:9F:D0:30:0A:C8:28:E3:88:DE:6E:4B:C3:91:C3:A5:CC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0PC_S5_QMArIKOOI3m5Lw5HDpcw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a4:bf:38:2a:54:47:ea:79:14:ed:c8:b0:fd:3b:4f:b7:04:
c5:0c:18:9c:54:31:c1:63:59:47:ea:e1:59:75:6d:64:4f:bc:
89:e1:51:af:df:f6:74:a9:70:44:22:03:6f:b1:52:9f:cb:6a:
36:5f:bd:12:df:ce:4c:49:d2:c1:89:cf:53:f0:c3:6d:d8:95:
2f:55:53:f9:13:8d:32:bb:89:1c:c9:46:66:67:de:6c:b3:97:
5e:3c:de:4a:aa:fc:b0:ca:ac:14:42:d6:d1:24:29:e8:ee:4b:
9b:bb:0b:f5:14:55:dd:54:7d:82:2f:1a:8b:e4:90:44:78:0a:
e4:23:6a:b5:75:52:13:b0:b7:88:2a:e9:40:1b:d4:a3:e2:33:
8e:47:e7:85:5f:1b:2a:87:59:0a:cd:a9:82:48:5b:3c:66:13:
ea:40:c0:6d:18:7a:8c:23:b9:98:95:d5:c3:e0:9e:15:d3:de:
1a:2a:1f:a8:f1:9f:55:37:42:1f:18:0e:f2:ad:2b:d4:bf:81:
cf:af:0f:d5:b3:09:2a:89:72:81:e0:8b:50:60:e4:34:01:69:
a1:f7:62:b1:c8:1a:2f:6a:34:7f:68:2a:f3:f6:80:6d:4d:e1:
8f:86:4f:e4:a8:80:88:7b:5e:75:c7:45:55:fe:27:16:28:b7:
c8:e8:ef:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org