Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/AuTx38t-JgI_I6vGlMOPausSXqY.roa
File: AuTx38t-JgI_I6vGlMOPausSXqY.roa (raw, json)
Hash identifier: Ma7Si8OnegIP+54Loc6yTSe0D5pHadxLbkighkCRiEk=
Subject key identifier: 02:E4:F1:DF:CB:7E:26:02:3F:23:AB:C6:94:C3:8F:6A:EB:12:5E:A6
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4850
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AuTx38t-JgI_I6vGlMOPausSXqY.roa
Signing time: Fri 20 May 2022 00:30:08 +0000
ROA not before: Fri 20 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18512 (0x4850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 20 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=02E4F1DFCB7E26023F23ABC694C38F6AEB125EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:fd:a0:1b:c4:ca:d8:ba:32:bd:26:14:2a:
e4:58:7d:d8:b9:e7:c9:22:d8:78:18:bf:ef:7b:a8:
65:91:f1:a5:34:fe:7f:65:85:2d:89:33:54:89:3f:
8e:b0:07:56:7b:5f:e3:a2:ec:86:73:5d:c5:4f:77:
66:6f:08:b0:f0:b6:9b:69:ad:4f:06:f5:05:74:9b:
d0:5a:fd:de:89:43:4b:06:12:00:41:88:fa:59:66:
93:bb:75:4b:c7:5e:21:ae:2b:fa:13:dd:6d:8f:af:
d9:05:94:f0:4e:ce:af:f3:c0:ef:59:16:5e:f3:5e:
7d:af:51:0a:7a:9e:1c:11:92:91:c5:23:80:3e:0c:
67:5b:66:da:23:a6:a7:1b:80:86:34:df:66:75:7b:
b6:ad:45:c1:92:bf:c9:cc:f5:1c:23:87:09:b2:3a:
ae:12:1d:34:5d:24:83:39:c4:d1:d8:24:75:77:04:
73:0c:2a:06:ef:4b:93:6f:64:f8:c0:00:2f:c8:e4:
99:60:0e:b2:fc:0e:d7:e4:e0:ec:7a:77:73:29:20:
14:12:49:8c:37:3d:bb:d9:13:89:95:fb:1c:54:ce:
b3:c7:b7:bf:f1:27:05:63:a5:f0:89:76:04:03:c3:
3d:11:97:fd:de:26:ed:23:77:21:70:a3:20:10:b4:
28:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E4:F1:DF:CB:7E:26:02:3F:23:AB:C6:94:C3:8F:6A:EB:12:5E:A6
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AuTx38t-JgI_I6vGlMOPausSXqY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
22:07:3b:55:a2:61:88:7c:35:3e:3e:a4:a7:7c:bb:71:fd:e2:
b0:d4:ed:92:77:5d:ac:b6:04:e3:c4:76:4d:d0:82:7a:94:4f:
4c:c2:e0:f0:53:c1:77:71:3b:dc:3e:52:16:0d:a9:88:a1:09:
c4:49:cf:47:71:59:05:e9:65:73:b5:b0:d8:1d:21:d5:3a:56:
86:6d:f2:5b:eb:ef:a2:93:e4:cd:ff:6e:51:9b:f5:92:b3:d9:
86:d6:b4:da:81:87:11:91:a4:1e:d1:3c:fe:9b:ce:37:8e:2e:
5e:28:88:d5:8d:0b:39:c5:25:94:c6:23:ba:58:78:21:24:82:
6e:75:3c:39:41:42:70:a6:ed:f9:99:74:2e:8d:75:72:b1:58:
c9:9e:69:07:27:d6:2a:42:02:52:a3:32:ad:68:39:17:77:9f:
9c:64:1e:00:2f:0a:66:ea:63:08:f2:0a:11:75:08:2e:7d:0b:
33:2b:6b:67:84:a5:23:6b:e8:d4:18:fe:16:cc:71:71:11:8a:
40:9c:1b:3d:33:1d:cc:08:45:99:cb:a4:9c:fb:21:63:27:ad:
4c:45:d8:50:d5:9b:fe:86:f5:d5:b6:cd:77:45:23:f2:36:8b:
c3:07:b9:4b:67:83:31:5c:35:59:84:57:80:89:99:dd:30:9f:
2f:e3:40:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org