Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/BECFY0tuSguughxpog_8jGiwNcI.roa
File: BECFY0tuSguughxpog_8jGiwNcI.roa (raw, json)
Hash identifier: 1W/oiiqnWFKlShkT2vMQ3Zqk+WmAAbBX4R0zZ/edf30=
Subject key identifier: 04:40:85:63:4B:6E:4A:0B:AE:82:1C:69:A2:0F:FC:8C:68:B0:35:C2
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49C3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BECFY0tuSguughxpog_8jGiwNcI.roa
Signing time: Sun 12 Jun 2022 00:30:07 +0000
ROA not before: Sun 12 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18883 (0x49c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 12 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=044085634B6E4A0BAE821C69A20FFC8C68B035C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bd:f5:cb:6b:69:2c:58:3d:ee:6d:74:d9:0d:
15:a9:95:f2:2a:93:cf:da:a9:60:a4:bb:09:23:21:
59:f5:bb:e6:a3:82:32:72:22:17:da:0d:9b:44:07:
d6:ce:10:05:2c:7a:cf:13:52:61:b5:26:94:56:10:
b1:a7:cb:f7:7e:db:ed:92:9e:9f:69:e7:c0:05:15:
6c:68:c6:cc:73:1d:2e:95:08:8b:0a:40:3e:1f:02:
56:4e:03:1f:e8:28:a8:27:74:a4:d4:8c:36:37:20:
9e:ce:82:83:6a:d7:30:6f:9a:c3:e3:57:8d:fa:4e:
37:2f:09:9a:85:a7:e3:19:99:f3:b3:c9:e8:df:3b:
cd:29:4c:95:a6:0f:6a:3e:f7:bb:43:fa:5a:07:a4:
44:8c:c1:ed:6c:a1:55:f3:9a:2e:8a:58:e1:a1:de:
87:5e:45:ae:93:a1:ed:35:43:06:ce:1f:77:1a:d0:
8b:ad:3f:1b:1c:e5:80:aa:96:c2:31:c3:27:71:bf:
d6:7f:49:09:be:ff:12:3b:05:70:21:96:36:3f:9d:
ae:5c:ff:fa:e1:b9:40:59:50:f6:80:b7:b4:b4:d8:
25:12:60:82:47:d4:0d:5d:85:b3:39:f9:1f:0d:d3:
3a:fe:34:c7:21:e6:eb:18:86:b9:ca:5c:15:ea:84:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:85:63:4B:6E:4A:0B:AE:82:1C:69:A2:0F:FC:8C:68:B0:35:C2
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BECFY0tuSguughxpog_8jGiwNcI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
74:1a:d1:82:5f:62:d7:45:21:62:28:ad:ea:78:e5:00:9c:ac:
48:08:76:56:6f:60:fb:ca:ca:63:72:21:03:78:97:15:0d:e2:
19:3f:b7:47:94:43:51:2e:92:85:1b:c4:e3:a0:1a:2b:d2:00:
12:d2:ca:79:3b:6a:8e:9c:d4:08:14:5e:9d:c7:d6:f7:12:68:
70:04:de:15:b9:ed:3e:3f:06:5a:f6:57:7e:59:5e:52:9b:85:
a2:aa:af:a7:11:57:17:f4:49:50:5e:d3:92:5d:35:f3:9e:72:
5e:fd:78:7b:71:f5:19:77:02:2c:21:e8:9a:1d:04:a9:7b:72:
db:54:d9:14:03:64:f7:65:77:c5:cd:47:5d:f4:69:95:09:e7:
a7:7c:05:7d:c7:30:7c:1b:d3:1e:42:78:af:45:36:8c:71:e5:
0f:67:8a:a5:59:ba:a9:fb:ee:db:a5:a2:98:b9:e2:f9:e0:93:
5a:a0:77:d7:8e:37:b4:47:84:fc:bd:92:d5:9e:aa:66:f4:b9:
ff:d4:17:d3:6c:3a:bc:ba:5b:f5:d8:bf:30:a9:69:0f:ee:a6:
e4:45:b5:dc:37:31:fa:c6:0d:1b:ac:6f:a4:bd:8c:ab:32:4d:
4f:05:03:62:a5:5f:e8:34:8f:58:6b:d7:c4:a3:b3:30:8b:a1:
c4:8d:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org