Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/F4NdMAHP2AC4EP-7kaRjxLKdVEs.roa
File: F4NdMAHP2AC4EP-7kaRjxLKdVEs.roa (raw, json)
Hash identifier: JN4q50qfu5BA3EavxI4JD0cvmBkc4GGng/4iHc+toGc=
Subject key identifier: 17:83:5D:30:01:CF:D8:00:B8:10:FF:BB:91:A4:63:C4:B2:9D:54:4B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45BE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/F4NdMAHP2AC4EP-7kaRjxLKdVEs.roa
Signing time: Sun 03 Apr 2022 00:30:09 +0000
ROA not before: Sun 03 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17854 (0x45be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 3 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=17835D3001CFD800B810FFBB91A463C4B29D544B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:a5:83:85:19:82:db:d8:2a:e2:33:d3:38:
6f:30:d2:89:68:e2:57:d3:d9:e6:bb:5f:38:39:eb:
b3:4a:b5:ba:11:41:15:e3:44:49:a6:31:b9:43:07:
69:11:ce:e0:3d:ab:f4:11:dc:6f:af:0f:d7:62:a5:
9e:41:6f:94:bb:7f:bd:a1:ff:69:f0:89:e1:25:ae:
5e:2e:b5:91:28:12:ca:1e:55:d8:0b:c3:75:1d:e8:
26:96:6c:c5:5e:a7:e1:9b:c7:0d:65:d4:70:72:48:
9d:f0:d2:fe:26:31:2f:f0:00:7e:32:74:6b:10:09:
1d:5f:19:2f:59:d2:3e:2f:16:00:87:8d:5a:41:29:
2a:03:72:7a:fd:cd:e9:55:0a:51:b2:80:32:02:47:
96:83:64:97:b6:f8:bb:c3:af:f2:b8:da:92:6f:b2:
f6:cb:d9:b3:da:5c:11:0b:d2:a3:3c:b6:89:70:78:
6e:2c:ed:cc:e0:8f:86:8b:ff:81:9e:1c:2d:a4:c8:
30:e1:41:8d:c4:0d:b7:a7:64:8e:e2:14:f2:a3:9a:
40:33:15:67:ed:e4:c4:c4:c9:cc:5d:26:e7:14:19:
25:c7:37:2f:30:37:33:be:a3:1b:38:48:16:96:c9:
df:fe:fa:2b:b4:26:3d:82:50:57:ee:93:b3:e0:84:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:83:5D:30:01:CF:D8:00:B8:10:FF:BB:91:A4:63:C4:B2:9D:54:4B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/F4NdMAHP2AC4EP-7kaRjxLKdVEs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:1b:4a:c0:7c:57:de:46:22:2e:5a:b7:7f:5c:b0:07:2c:be:
9c:a7:7e:a8:9f:c6:d9:85:31:e8:8e:ee:7c:85:79:46:83:0d:
85:b1:75:5e:01:62:9c:60:12:e1:94:68:e1:8c:1e:68:72:cc:
6f:b8:c3:74:77:28:8f:3c:bd:b0:d7:6d:a5:fd:31:82:25:94:
b0:e8:a5:5d:28:b8:1e:af:da:05:68:73:a6:b1:8d:a6:e2:ca:
01:77:62:d8:6b:c8:81:d0:70:fd:9b:8c:ae:82:de:89:7a:f9:
62:57:03:40:78:62:fd:af:25:7b:09:47:67:0e:8f:30:58:b4:
76:90:21:2a:83:53:4d:e8:38:f0:53:7d:09:be:6d:92:e5:73:
4d:f2:d8:a4:fe:a5:0b:f7:69:ed:6a:8b:26:f6:46:5d:ad:03:
5a:72:fa:f1:f1:f8:20:a1:46:e9:92:9a:95:6f:a0:42:b5:01:
b5:15:c7:01:88:11:dd:ba:5f:9b:59:be:24:88:4a:ef:9d:b9:
42:6d:5c:50:41:f1:12:50:e7:d5:40:3b:00:17:87:b1:78:15:
09:4d:a2:43:06:9d:27:bd:f6:2e:1d:44:d2:d6:69:3c:f1:c9:
67:20:c4:d1:42:61:9f:17:7c:3a:c8:8a:7d:ea:12:06:bd:db:
95:8d:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org