Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Do-AW_YVepTOfop9YOxJTBoAdYw.roa
File: Do-AW_YVepTOfop9YOxJTBoAdYw.roa (raw, json)
Hash identifier: OWsikGVqiQ9Bv6mK3nKYOG6atzp2BZeTOvieftzVVqU=
Subject key identifier: 0E:8F:80:5B:F6:15:7A:94:CE:7E:8A:7D:60:EC:49:4C:1A:00:75:8C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 448D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Do-AW_YVepTOfop9YOxJTBoAdYw.roa
Signing time: Sat 12 Mar 2022 00:30:08 +0000
ROA not before: Sat 12 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17549 (0x448d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 12 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=0E8F805BF6157A94CE7E8A7D60EC494C1A00758C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:c9:99:ba:fa:77:44:09:bb:1e:17:f3:12:
0c:58:d4:ec:3d:8f:13:33:58:13:82:1f:4f:81:be:
cd:f6:ce:ab:c4:61:5b:e9:57:85:c0:98:32:70:b9:
ed:cc:69:c6:a6:7e:19:04:78:60:3d:f6:ff:93:3b:
09:76:4e:60:52:2b:84:f3:51:97:84:3f:ef:76:03:
53:04:a3:3c:20:42:a5:98:ee:6a:04:83:d6:89:cc:
2a:e7:7e:b0:8e:ff:4a:c3:7f:b1:a2:4e:d8:60:96:
d6:38:69:f4:41:ed:9d:2a:5f:13:14:2c:93:92:d0:
5a:aa:8f:af:5b:8f:f1:cb:a1:73:74:10:f9:dd:f1:
68:92:a7:10:53:f6:da:c2:96:55:56:bf:e4:6e:ae:
e7:47:52:8a:8b:33:e5:a6:9d:9e:0c:05:3f:db:d9:
e9:c4:32:03:8c:22:d7:ba:00:a6:ff:81:74:ca:3f:
4b:da:b8:56:53:fe:7d:00:dc:09:39:a9:9c:bf:22:
ae:37:b7:f0:72:79:31:c0:1e:29:bb:2b:ba:7e:ee:
c5:61:50:a4:66:c4:61:15:74:3d:e3:6e:02:7f:ac:
26:5b:2d:53:27:4e:a1:15:fc:6f:80:7c:cd:7f:10:
cc:99:8a:3d:1f:eb:33:0c:b7:5d:3a:29:81:56:40:
cc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8F:80:5B:F6:15:7A:94:CE:7E:8A:7D:60:EC:49:4C:1A:00:75:8C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Do-AW_YVepTOfop9YOxJTBoAdYw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:09:8c:fe:62:f5:aa:61:69:80:2b:76:9d:a9:67:6e:ab:2d:
9d:6a:af:46:62:8e:da:7a:93:bc:ca:fd:43:cc:02:f0:9a:0a:
f8:a7:7b:d4:91:e5:72:67:f2:71:c3:87:df:5e:21:58:34:93:
e0:7f:03:be:b9:07:3d:07:6a:9f:06:34:c9:01:5d:cb:1a:1b:
6f:1f:0f:99:d8:51:e1:e7:a9:d5:1f:51:de:e6:09:0d:8f:7c:
b1:03:57:c9:b1:95:cf:66:91:9a:02:44:b9:ce:f0:6c:1f:bd:
ef:ea:27:1d:8c:5d:fb:73:95:c0:d7:ad:08:b6:ee:a0:37:8a:
79:24:33:83:af:8f:95:78:d8:e0:58:e2:20:87:01:7f:37:5b:
7c:dd:29:68:f9:7d:0b:6c:0e:7e:7b:5a:5d:d7:03:7a:04:6e:
de:4f:15:58:d4:c4:cc:a4:05:c8:34:1f:78:de:bf:84:8a:d6:
9e:1e:16:ef:34:6a:a4:6c:af:ca:36:70:29:4e:4c:ec:5a:cd:
1a:f8:04:a6:6a:6c:fb:b9:e0:5c:ee:73:6c:ee:e1:24:a0:bd:
de:9d:2f:43:df:37:5f:43:9e:18:fc:4a:b4:98:72:02:0d:99:
37:7e:81:e7:50:39:08:9a:a8:82:7a:1c:47:1a:84:50:04:f4:
84:06:ca:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org