Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/1QD1DwHBpwPwBuQtb0DXs1yOU68.roa
File: 1QD1DwHBpwPwBuQtb0DXs1yOU68.roa (raw, json)
Hash identifier: K0p8LtPsgb3JV/b3LKXxAO/I9HIRoKtW0k9RBQjAjH0=
Subject key identifier: D5:00:F5:0F:01:C1:A7:03:F0:06:E4:2D:6F:40:D7:B3:5C:8E:53:AF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4308
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1QD1DwHBpwPwBuQtb0DXs1yOU68.roa
Signing time: Sat 12 Feb 2022 00:30:06 +0000
ROA not before: Sat 12 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17160 (0x4308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 12 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=D500F50F01C1A703F006E42D6F40D7B35C8E53AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:5e:86:3a:84:aa:d0:8e:27:e8:42:a0:ea:
75:a3:8b:87:4f:05:4c:1b:ad:1b:2c:02:1c:ee:b2:
97:f2:83:a9:98:c5:b5:4e:9e:aa:86:8f:36:b5:f8:
2d:25:57:c4:96:89:fb:cc:af:60:70:76:4d:bf:be:
95:9c:3e:0a:fc:f9:a3:2e:e4:5a:39:4b:78:18:21:
b6:91:fa:2e:66:5d:97:e7:1d:09:85:7d:5c:da:bd:
77:01:fc:51:dd:2a:02:52:f3:bb:28:0f:d7:a2:72:
6c:3d:af:2c:05:81:78:0d:1e:9a:0b:09:34:b8:88:
d2:e2:91:15:49:6d:5a:17:57:a0:c8:56:98:92:6a:
1b:cc:35:ad:62:bf:89:5e:2e:f6:89:4f:81:f2:9f:
d0:a2:11:86:07:39:9f:61:24:5c:18:a3:69:68:ec:
16:1e:f7:bf:10:0d:7d:9a:36:0d:65:a9:b7:66:d9:
09:2e:04:f3:cb:16:9e:02:84:56:5b:45:3c:f9:85:
49:84:be:dc:51:66:65:3d:67:5e:9e:34:60:bb:11:
aa:f9:ee:27:38:4b:e1:64:83:2a:bd:d1:3f:63:1e:
ee:b6:b8:05:61:a1:fe:83:bc:a1:8e:08:39:7e:ba:
2a:72:af:fe:7c:e1:72:a0:24:a2:20:ad:69:60:f3:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:00:F5:0F:01:C1:A7:03:F0:06:E4:2D:6F:40:D7:B3:5C:8E:53:AF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1QD1DwHBpwPwBuQtb0DXs1yOU68.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:fb:61:06:e9:32:6c:21:92:da:d0:c7:ce:b8:6b:8e:4e:f9:
94:07:38:ee:d1:13:60:f1:8b:e8:fe:63:a8:9e:0c:db:20:dc:
d6:19:1b:b0:f8:d7:3a:b9:86:55:bc:ef:50:44:82:b3:1b:eb:
67:e7:76:33:a7:46:c2:c7:75:d0:29:f1:bb:b6:e7:84:50:04:
2c:35:cf:ef:12:1b:47:57:17:82:33:98:0a:a5:03:68:05:2e:
ec:b4:8e:20:38:a9:4e:e6:de:19:0d:6a:b9:8a:7a:b1:7b:c8:
f1:30:86:dc:78:8e:a8:0c:08:a5:42:0f:4f:c4:30:25:ad:cf:
42:aa:a1:00:ab:38:03:f3:18:04:ed:b6:99:02:fa:69:fc:e4:
e6:b7:16:88:d9:24:73:c4:7c:26:87:b3:f0:40:7f:bc:66:1b:
81:5d:4f:b8:c0:a8:d6:81:be:02:88:96:45:7d:17:d9:04:9a:
75:f1:13:6f:96:fe:23:64:b8:ec:28:65:1a:9a:6a:07:52:ac:
4d:9f:62:2f:02:f8:4f:3d:3a:95:20:e4:9f:53:c3:56:96:cd:
e0:a5:a3:53:4e:26:7a:8d:47:d5:2f:63:2e:6a:6d:11:4d:71:
99:1b:dd:1e:34:83:9d:e9:ad:c9:50:a7:f9:ce:7b:18:7a:b2:
39:1c:bd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org