Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/3InTzxp1zTPOo_kStock4wi7RiM.roa
File: 3InTzxp1zTPOo_kStock4wi7RiM.roa (raw, json)
Hash identifier: LRbQ3eFQOW3pLPXshf0+SjFtGsAYRxXNC79svDKXQHk=
Subject key identifier: DC:89:D3:CF:1A:75:CD:33:CE:A3:F9:12:B6:87:24:E3:08:BB:46:23
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4352
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3InTzxp1zTPOo_kStock4wi7RiM.roa
Signing time: Thu 17 Feb 2022 00:30:07 +0000
ROA not before: Thu 17 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17234 (0x4352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 17 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=DC89D3CF1A75CD33CEA3F912B68724E308BB4623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b3:32:7a:b5:1b:fa:89:2e:36:45:07:b3:13:
6c:13:03:8a:0b:a0:24:b3:e8:b4:dc:37:fb:a0:1d:
e2:59:38:c5:8a:6e:b8:82:b7:43:59:3d:05:6a:a5:
54:e9:29:da:f4:24:37:4f:a6:f3:56:21:9e:39:50:
0f:9b:69:bd:4a:cc:a4:9e:68:d3:51:8b:2d:5e:ae:
a0:67:16:d0:7c:b2:69:97:50:ab:08:2d:d8:cb:d7:
92:b9:5c:73:5f:7f:72:a0:02:e8:b6:8b:b6:b4:6b:
cc:aa:1a:5b:3e:09:c6:db:25:98:6e:73:db:6a:7b:
c7:6b:32:e3:01:c0:da:5d:37:a8:ed:40:2d:5f:ad:
db:8d:8a:cc:30:c9:48:dd:6b:2d:66:49:17:8f:df:
69:c8:b6:5b:19:69:ce:ba:d5:3d:95:6a:da:74:4e:
e4:03:b3:13:93:66:ac:92:4b:f8:ec:90:ec:7b:da:
cb:54:6a:1b:82:7a:f8:45:f4:46:61:65:4a:f9:2b:
10:cf:18:25:43:4c:da:fa:15:26:c4:00:47:e5:4d:
25:04:20:bf:dc:40:0c:3d:a4:8d:87:8c:68:1f:86:
be:9c:00:47:b9:a1:d7:03:db:cb:ba:84:fb:48:f3:
3a:51:36:f3:f6:76:74:83:02:96:7a:23:dd:aa:0f:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:89:D3:CF:1A:75:CD:33:CE:A3:F9:12:B6:87:24:E3:08:BB:46:23
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3InTzxp1zTPOo_kStock4wi7RiM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d7:11:bc:18:3f:ee:c3:e0:a0:04:9e:09:a2:f3:f9:0e:3b:
c5:06:10:eb:09:fa:aa:5e:51:4e:83:a4:c1:20:0f:89:12:ce:
48:65:7b:9b:21:1c:7c:c8:75:3c:52:12:0b:f3:e3:3a:39:1e:
a1:c4:4a:46:ff:88:0d:8f:53:f6:15:6e:65:9c:d5:e2:8c:82:
cf:28:77:57:ed:f6:33:24:7a:8d:81:3c:80:f9:bf:0b:1c:0f:
ac:d8:92:23:52:aa:8c:f7:78:b6:48:1e:bd:58:e1:63:76:39:
ef:ff:b7:87:3c:6f:d1:04:7a:cf:01:4c:e4:0f:11:05:e0:be:
e3:8f:33:2b:e3:92:39:00:59:94:21:71:4a:d8:fe:ab:bb:6d:
34:f4:02:39:27:4c:ef:95:cd:4f:01:be:7b:7f:c5:1b:31:b6:
91:73:2f:70:d3:45:06:ae:a6:09:fe:ad:eb:cc:cb:54:8f:ae:
87:c3:87:84:6f:6e:f2:1f:48:1c:e8:44:12:e8:50:0e:0c:ff:
45:40:33:c6:17:3d:01:e4:b7:ed:d8:30:cd:a4:a0:2f:ce:86:
78:38:bb:2d:30:19:0c:21:9f:0f:9c:50:eb:34:0a:28:47:a6:
f7:85:ca:a6:76:f4:39:d2:79:39:db:3c:f2:bb:42:91:f3:7d:
03:f2:63:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org