Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/596vpDkTtHrZcHyG-pY0ZsVmbY8.roa
File: 596vpDkTtHrZcHyG-pY0ZsVmbY8.roa (raw, json)
Hash identifier: SfIdIs2zl8wvmrCC4bggUnni9ikxjqCZkuG92DFjmKI=
Subject key identifier: E7:DE:AF:A4:39:13:B4:7A:D9:70:7C:86:FA:96:34:66:C5:66:6D:8F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49CD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/596vpDkTtHrZcHyG-pY0ZsVmbY8.roa
Signing time: Mon 13 Jun 2022 00:30:07 +0000
ROA not before: Mon 13 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18893 (0x49cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 13 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=E7DEAFA43913B47AD9707C86FA963466C5666D8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:1c:28:b2:8f:04:77:95:f8:0b:56:32:4e:
34:2f:d4:26:c9:49:b4:db:06:3d:aa:85:82:5f:ee:
dd:42:7d:c3:20:10:14:d8:a6:75:6c:0f:b1:a0:4d:
f5:aa:58:1d:82:0b:93:1f:49:65:14:9d:94:43:3f:
dd:df:30:14:2f:0a:28:e5:ec:b3:9f:0f:94:51:de:
d5:c7:1c:91:07:5a:86:88:a1:2e:02:76:31:af:f0:
ca:91:05:13:6a:85:3e:63:16:f1:2a:3f:bd:33:12:
48:26:1a:69:6d:0b:4b:2c:83:4a:87:b6:78:ad:3d:
4e:36:a6:7c:66:80:80:1f:09:5d:cd:4d:0f:88:c2:
a1:62:6e:06:c4:e0:8a:d2:8b:41:c8:09:3a:d1:88:
69:1a:68:bb:a9:fd:9b:f2:48:3a:25:62:ed:54:1d:
23:70:34:13:be:55:c4:01:0c:bd:3e:e0:54:e5:02:
5a:d1:21:fb:29:51:ed:1c:4a:60:2a:e9:89:0d:ab:
96:c4:eb:79:88:03:84:3b:3b:32:93:51:38:06:c2:
60:e5:54:aa:31:21:f3:15:8e:5f:fc:c3:14:3b:f4:
8d:05:8d:ce:ee:bd:1f:2e:90:f9:11:af:88:b6:90:
c5:9d:8f:69:44:a5:4b:40:2d:db:4d:12:ae:14:86:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DE:AF:A4:39:13:B4:7A:D9:70:7C:86:FA:96:34:66:C5:66:6D:8F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/596vpDkTtHrZcHyG-pY0ZsVmbY8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
69:58:4c:3f:68:c2:17:de:fe:83:3c:3a:d9:72:d7:f6:0a:75:
14:ac:8f:34:f1:0b:3d:61:f2:2c:57:b1:a9:f4:34:39:a8:f6:
38:5c:91:6c:2d:02:94:25:e0:ff:54:b8:73:29:2e:f2:fd:89:
1f:98:6e:6d:1b:17:d3:26:a0:68:cf:b2:41:30:08:46:b7:b9:
84:1b:d0:34:72:ad:c0:fe:ff:36:57:56:36:3e:da:e8:67:54:
4d:6b:5a:e3:92:1d:15:d2:a5:e4:d9:fc:02:10:db:ea:a5:34:
4e:b2:2a:db:7a:b6:58:1b:9f:b9:f7:36:d3:aa:b7:47:0c:2f:
af:63:24:bd:fd:af:8e:07:07:25:af:2e:d1:2e:9c:10:b6:7a:
cf:70:f4:ea:66:0a:ac:75:cf:f7:8f:e0:8a:bd:0b:fd:f8:e7:
3c:c9:74:66:89:9a:68:49:87:01:cf:a8:66:71:03:ef:a0:b1:
96:9f:a9:50:da:f5:da:34:04:d7:13:7b:08:ec:8a:fe:fe:d1:
ce:f2:07:bb:cc:9e:b0:b8:87:cf:6b:33:50:e9:bd:bf:74:3c:
97:26:80:6e:84:a2:0b:e8:cd:ea:8e:82:d5:a1:44:19:f8:90:
c4:75:6b:f1:38:d7:6a:16:14:dc:56:c0:62:6d:51:ef:cb:42:
a6:67:fa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org