Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GUoa7SlZJpGYmyEeWGTR1XvMCvY.roa
File: GUoa7SlZJpGYmyEeWGTR1XvMCvY.roa (raw, json)
Hash identifier: OLX7Xsv+ntz8tvhRbIviX4L9tNgO//rLmjtwgMxg/EA=
Subject key identifier: 19:4A:1A:ED:29:59:26:91:98:9B:21:1E:58:64:D1:D5:7B:CC:0A:F6
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4260
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GUoa7SlZJpGYmyEeWGTR1XvMCvY.roa
Signing time: Mon 31 Jan 2022 00:45:06 +0000
ROA not before: Mon 31 Jan 2022 00:45:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16992 (0x4260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jan 31 00:45:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=194A1AED29592691989B211E5864D1D57BCC0AF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:eb:7c:2c:60:e4:66:6c:72:a5:61:6e:d7:
db:e1:e3:51:c5:8e:75:bb:f7:14:a4:13:3a:94:dd:
dd:88:95:3d:1d:f5:51:ae:a9:e8:fc:6a:f3:43:56:
60:61:4a:46:01:c6:23:88:86:6c:da:b9:10:09:25:
18:2a:9b:81:10:13:04:c2:62:da:6e:6d:8b:42:b7:
4a:0c:97:7e:9d:74:db:64:2d:24:df:98:2a:07:75:
ac:ea:2d:4f:75:64:e1:ba:8c:46:90:bd:6d:44:a7:
c6:ed:47:8e:07:5b:d0:78:55:8c:f8:4d:8a:ef:b3:
f3:d1:ac:59:d0:74:33:00:27:e4:3e:bc:43:4f:67:
78:b6:40:7c:41:1c:37:54:cc:16:26:83:34:5f:f5:
ab:c0:37:9b:62:b7:56:bd:2b:b3:20:a8:13:b4:b5:
3e:61:d0:2d:65:58:87:dc:ad:f5:fd:de:03:79:dd:
a8:87:86:c9:49:a6:31:2c:a8:c4:96:f5:33:35:3e:
1c:1e:52:ea:6a:e7:45:1f:52:ff:f8:13:1b:d1:cf:
2f:fe:13:5c:b9:fb:7d:e5:61:29:e9:cd:69:64:1c:
a5:95:62:05:03:48:3d:05:57:7f:be:f8:8d:54:b7:
a7:36:d9:13:1a:bd:0b:28:ed:8c:87:cb:68:82:2d:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4A:1A:ED:29:59:26:91:98:9B:21:1E:58:64:D1:D5:7B:CC:0A:F6
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GUoa7SlZJpGYmyEeWGTR1XvMCvY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d0:63:6e:82:3e:53:5d:52:33:1a:92:ba:bc:c9:48:2d:7d:
c3:8c:04:fc:62:73:19:37:52:99:ea:bd:52:27:d7:7b:ad:7f:
a0:b9:fc:a4:b7:84:26:81:84:e2:8a:b8:e8:df:54:a0:af:d9:
de:b6:95:52:d3:94:a6:13:43:8d:c4:d5:77:22:08:37:54:bb:
d3:0d:dd:28:b0:54:9c:db:43:8a:a2:24:11:21:c2:d1:a8:98:
53:f2:9a:c5:2d:b5:23:5b:a1:e7:af:03:aa:99:a7:59:5b:6d:
a1:72:db:cd:ff:f9:31:5a:25:92:b7:40:04:62:64:8c:8f:db:
44:8a:67:75:4e:ee:4f:91:1a:9f:28:af:47:2d:6d:bf:f0:f0:
77:b3:1c:7c:48:80:ac:be:f3:3f:3c:f2:fa:a9:4c:0a:76:79:
cd:3e:b6:3b:fb:62:9d:32:0d:97:96:ff:4f:00:2a:a3:07:54:
b2:aa:b9:85:69:23:db:56:55:d8:fb:37:b7:3e:fd:c1:2c:4e:
51:98:b8:c3:cf:91:cb:83:2b:59:1e:c6:88:d9:fe:83:83:19:
4e:16:5a:d9:7c:10:07:45:1a:d9:be:18:ec:dc:c8:ad:17:b4:
5a:b2:bf:87:ea:df:2f:ed:c1:73:81:2c:ea:6b:6a:cd:7e:d4:
94:b8:25:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org