Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/AeWfyYAjhkaZZDE3LS3PvPChGW8.roa
File: AeWfyYAjhkaZZDE3LS3PvPChGW8.roa (raw, json)
Hash identifier: fUc9AAIlI2oHas/aR4EjdvtF8XWNxmcGWSRyLwsrMgg=
Subject key identifier: 01:E5:9F:C9:80:23:86:46:99:64:31:37:2D:2D:CF:BC:F0:A1:19:6F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 489A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AeWfyYAjhkaZZDE3LS3PvPChGW8.roa
Signing time: Wed 25 May 2022 00:30:08 +0000
ROA not before: Wed 25 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18586 (0x489a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 25 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=01E59FC980238646996431372D2DCFBCF0A1196F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:9e:f9:5d:5a:f9:99:ad:7f:e0:c5:66:9b:
3d:66:e8:9f:77:cc:7e:f6:50:dc:f1:6f:e8:6b:91:
9e:fc:53:93:8a:6a:fe:db:06:f0:f9:92:03:ef:59:
16:37:4e:c1:b9:60:a1:e0:88:b7:e7:56:53:8e:b0:
ab:82:10:b7:f3:13:73:98:4d:6e:7c:e5:97:47:75:
43:c8:ca:72:c7:d6:b2:6d:4c:44:86:9e:4a:9c:e6:
cc:35:75:cf:60:3f:f9:a3:9b:9d:25:ec:7b:6c:a8:
9e:dd:f7:47:8e:af:29:3b:8f:1a:92:ef:32:4b:50:
55:d1:ce:6e:d5:47:44:fb:ee:98:69:f8:a0:08:c6:
c2:32:cc:d9:34:a8:86:d8:1b:6a:6e:cf:3b:1e:f3:
5b:45:d2:9a:3b:81:05:12:bf:6e:39:e3:bb:ea:32:
09:7d:46:a5:73:7e:ce:7b:72:3f:a9:50:5b:55:58:
a3:82:ed:2c:10:d3:1e:6e:fa:bc:05:30:6c:a6:64:
fc:dd:b6:0b:cb:6e:bd:0a:16:d5:6a:39:b1:be:49:
c5:51:18:9f:ee:64:12:55:49:2c:40:8b:5c:54:1f:
c6:81:61:3d:1d:cd:2f:0e:56:83:08:3e:e5:bb:dc:
a1:71:22:05:b1:4c:0c:f8:65:63:5a:5a:4a:bc:32:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E5:9F:C9:80:23:86:46:99:64:31:37:2D:2D:CF:BC:F0:A1:19:6F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AeWfyYAjhkaZZDE3LS3PvPChGW8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d9:a0:d3:10:94:5e:8c:91:f0:87:6c:6f:43:c6:d9:c0:ef:
6e:c8:35:75:e6:f1:61:42:db:1b:78:26:7d:74:d7:73:62:81:
60:c3:67:c4:ad:c3:87:1b:a4:4d:b4:e2:c0:7a:05:ff:27:38:
2f:0a:a2:e9:ba:b9:45:3a:6c:25:d3:20:96:e3:67:0a:1b:04:
bd:6a:6d:c3:64:ed:c1:56:8f:66:01:47:c7:83:6d:08:69:93:
1d:8f:ef:e3:a3:a7:bc:3b:7f:de:39:05:a4:a4:e8:b9:44:25:
2e:02:31:29:7a:9f:2e:b0:3c:43:72:cf:c6:33:d1:4c:09:0a:
ca:ab:ea:b5:90:1f:c5:6c:f8:10:a0:a3:35:a7:ac:ac:4f:84:
1a:1e:4a:75:41:2b:8a:a7:57:5a:a5:3a:f1:05:66:26:2e:f4:
79:37:84:48:74:e0:0a:2b:10:f0:c0:92:dd:1a:6e:9b:da:49:
3a:5f:e5:55:de:c5:8e:f5:0a:84:f9:5b:de:fc:ac:22:5a:65:
23:af:75:e2:fb:90:f3:d5:5d:0a:ee:b8:87:11:90:ec:1e:ae:
be:32:49:6b:8f:ea:f2:ff:e1:81:81:76:cc:1b:c9:2b:d1:17:
3f:94:f6:64:df:4f:8e:c4:b8:24:94:53:e5:9b:8f:9d:a4:07:
d1:76:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org