Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/3Us5e_-A1wbJCDctPS0RsmhKL8o.roa
File: 3Us5e_-A1wbJCDctPS0RsmhKL8o.roa (raw, json)
Hash identifier: fOWRhLTXa3LN5+jrymFlQdR2YkRm2JB8f8pfg/5vqgc=
Subject key identifier: DD:4B:39:7B:FF:80:D7:06:C9:08:37:2D:3D:2D:11:B2:68:4A:2F:CA
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4551
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3Us5e_-A1wbJCDctPS0RsmhKL8o.roa
Signing time: Sat 26 Mar 2022 00:30:09 +0000
ROA not before: Sat 26 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17745 (0x4551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 26 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=DD4B397BFF80D706C908372D3D2D11B2684A2FCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:cd:9f:bf:ff:38:6b:5a:e6:9b:a7:02:ac:
3b:28:2a:8c:c2:72:b4:6d:0a:7a:d6:78:c0:33:db:
c3:0d:50:ef:38:34:d4:cd:6e:af:9e:80:d5:2a:4f:
a5:29:1c:2f:05:ba:29:b3:e2:fb:d0:6b:cb:34:f8:
36:36:e3:ac:b8:d2:ba:f3:ea:52:49:2f:1b:7e:5b:
c9:f9:7b:75:4e:35:51:72:61:84:f4:08:73:ce:a0:
30:da:04:56:74:00:1d:ad:77:4e:df:65:1f:77:66:
31:88:77:1e:e8:2f:5e:97:f3:ff:79:16:bf:6f:12:
0b:53:04:c7:8c:50:66:6d:8a:c2:6c:d0:ec:f6:c5:
c4:ec:da:90:4e:b8:a1:89:cd:9a:f3:4e:ae:9d:25:
ac:14:c1:69:2b:a8:95:a1:fd:8d:c2:66:37:9c:05:
91:86:a4:b3:84:fb:df:1a:ae:02:0f:58:04:ad:0a:
8a:09:c0:9b:c7:cc:a1:ac:b9:af:d3:1a:b7:40:e4:
75:ac:8e:f0:32:ee:1e:f7:46:f5:60:db:41:e9:71:
45:1a:82:d5:34:dd:72:f9:40:1e:60:2a:a7:5d:08:
b4:c5:ee:57:4a:5c:6e:14:ee:88:3c:7e:27:bd:be:
e3:7b:e3:c8:6a:90:de:b9:8b:db:99:d2:bf:55:51:
08:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4B:39:7B:FF:80:D7:06:C9:08:37:2D:3D:2D:11:B2:68:4A:2F:CA
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3Us5e_-A1wbJCDctPS0RsmhKL8o.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:25:ea:01:a9:0f:55:78:30:28:11:d3:c2:7c:10:de:88:a6:
59:31:e9:62:f6:00:59:af:29:78:0a:25:8c:93:85:8a:59:6a:
b4:8e:31:bc:31:dd:e7:3d:09:4f:67:52:8d:e0:11:ab:ba:f0:
fc:c2:49:87:62:5a:05:8f:8b:1e:ee:d2:d7:c9:05:91:f2:a1:
a1:70:0c:d0:39:f7:92:af:cf:0b:92:3b:f7:ae:75:6b:a6:5f:
0b:30:7b:3d:04:03:9d:29:e0:7d:64:be:ef:7b:62:27:ee:69:
dc:2a:98:66:5d:72:52:08:fe:6b:f1:d7:4e:bd:42:2a:02:3e:
92:ce:54:ae:87:1b:74:c9:75:b4:8e:a4:bf:1b:88:c7:23:0b:
1b:cc:95:f8:64:ec:ec:fd:49:d7:c8:65:cb:c5:22:0a:8f:9b:
06:56:44:c5:72:d3:ad:6f:3d:dd:ab:6b:e1:c3:18:6a:bf:9b:
92:c7:f0:eb:b8:70:55:2e:bd:e0:13:04:a8:a3:1b:0f:29:b4:
43:5f:15:9f:cb:3c:38:3b:3b:da:11:71:e3:43:c7:e6:f9:10:
20:51:c8:55:42:01:69:e9:f3:f2:e0:a8:da:cc:96:63:37:1a:
3f:43:03:b2:31:89:a7:ae:f4:b5:2e:05:a8:56:24:57:df:74:
67:3f:f8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org