Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4mKUOM4_rUCPIOeYWaygrEvfHjw.roa
File: 4mKUOM4_rUCPIOeYWaygrEvfHjw.roa (raw, json)
Hash identifier: RBSbCaipfpgVRytGyVWixVXR5xx0CXIjrpn/Q3LxGio=
Subject key identifier: E2:62:94:38:CE:3F:AD:40:8F:20:E7:98:59:AC:A0:AC:4B:DF:1E:3C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43E8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4mKUOM4_rUCPIOeYWaygrEvfHjw.roa
Signing time: Mon 28 Feb 2022 00:30:11 +0000
ROA not before: Mon 28 Feb 2022 00:30:11 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17384 (0x43e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 28 00:30:11 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E2629438CE3FAD408F20E79859ACA0AC4BDF1E3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:23:10:d6:9f:61:2f:4e:d6:98:e0:d4:b7:
f4:a7:1a:15:7b:0f:63:dc:cc:d0:4a:13:ac:84:ec:
9a:07:f7:fe:6e:4b:60:c2:5d:41:f4:56:9f:f3:e9:
c9:0b:97:09:17:9a:8b:f7:b9:18:7c:08:4e:0d:18:
3b:80:75:c6:28:fa:19:00:2a:84:3e:ca:b1:be:bf:
84:c4:13:46:e0:63:71:7c:17:6a:38:8a:b2:b4:ad:
05:27:49:e5:b3:35:cc:81:cb:71:26:a8:1a:23:8b:
2a:7d:aa:28:30:bc:9d:1c:40:2d:6f:e9:3e:2e:d8:
2c:0b:97:b3:92:55:8f:93:c0:d7:89:39:5c:d6:6f:
03:4e:72:e0:d7:3c:79:f0:7b:da:95:26:45:0c:0a:
86:54:61:6d:9b:99:72:4e:58:3d:5f:d3:5c:a9:1b:
42:65:ac:03:2f:02:9f:25:c7:5e:6c:03:bd:91:1a:
6e:52:39:3d:b5:34:86:f4:6a:69:91:7c:c0:74:59:
f7:0a:75:bd:39:4e:9d:c9:d7:2d:e4:e4:b6:b9:24:
1b:45:eb:95:ca:58:34:27:21:a3:07:9c:81:01:96:
12:7c:6d:ca:81:e8:19:9a:3f:a1:9a:76:ef:dd:d5:
52:27:33:5c:be:79:bd:6b:92:f0:cc:56:8e:48:7a:
be:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:62:94:38:CE:3F:AD:40:8F:20:E7:98:59:AC:A0:AC:4B:DF:1E:3C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4mKUOM4_rUCPIOeYWaygrEvfHjw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
75:76:10:33:06:6c:af:d8:f0:eb:20:af:e1:34:f6:2b:6f:e7:
77:e8:6a:c8:f1:7e:a1:83:b7:39:72:47:78:67:70:a8:c6:c7:
ad:09:3e:3a:4f:d1:13:36:8c:01:57:66:ba:56:ce:be:2f:35:
9c:8f:94:c2:aa:1b:e4:c8:8a:72:7c:8d:e8:1d:1e:10:fb:39:
ca:54:64:cd:ff:66:34:98:67:87:27:10:1c:fd:b2:08:e4:2c:
11:6f:a0:6c:cf:64:93:4f:f4:ea:53:11:8f:6e:a8:8d:75:7c:
8a:51:00:bd:db:5c:0d:4d:1a:81:a0:22:99:70:78:5f:4f:4e:
cc:29:be:2e:eb:cd:40:05:29:de:22:24:03:d1:3d:a2:7e:d4:
9f:4e:6d:6b:d5:eb:5e:b2:2c:12:76:86:4c:f5:86:51:ad:cf:
b2:21:3c:e8:a8:2f:79:1c:62:eb:39:47:a2:6f:c0:d6:74:19:
8e:68:da:6c:3a:b9:02:41:3a:af:2c:62:34:23:7a:60:b4:ef:
03:df:3b:59:a9:56:39:aa:ea:05:d3:74:b3:53:8e:59:fe:68:
c8:e0:5f:86:6a:03:a7:f7:9b:31:13:06:b8:db:cb:ee:01:99:
27:eb:27:b1:33:73:ab:e2:39:7b:a2:a4:c6:f7:75:53:98:22:
60:93:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org