Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GonhBOjn0ansTGkH4anmdQG0bvk.roa
File: GonhBOjn0ansTGkH4anmdQG0bvk.roa (raw, json)
Hash identifier: kXHszCnV/s+NF6Z5a4pOVTgeLneuYAwHbDIyACcfKoM=
Subject key identifier: 1A:89:E1:04:E8:E7:D1:A9:EC:4C:69:07:E1:A9:E6:75:01:B4:6E:F9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4452
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GonhBOjn0ansTGkH4anmdQG0bvk.roa
Signing time: Tue 08 Mar 2022 00:36:41 +0000
ROA not before: Tue 08 Mar 2022 00:36:41 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17490 (0x4452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 8 00:36:41 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=1A89E104E8E7D1A9EC4C6907E1A9E67501B46EF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:62:32:79:31:64:ad:f8:e5:cf:a7:36:4d:
be:64:0f:31:ec:77:90:ed:f6:5f:0d:af:1d:8b:3a:
2f:fa:67:be:c9:42:8b:09:14:89:fb:d7:3d:7e:64:
ec:48:ec:df:62:98:4c:88:0f:80:c8:4c:26:4b:55:
73:20:b8:38:9f:c7:d1:95:af:bc:b2:2a:90:bb:9e:
71:9e:1f:5a:cf:c2:a1:53:f6:b7:f6:58:19:2e:13:
37:35:cc:e9:93:01:be:2e:9c:d1:d2:6a:68:fe:ea:
42:3f:5b:c0:0d:c8:3f:a2:36:55:a0:01:16:0c:8d:
5d:09:0f:58:ad:4c:d2:a0:3f:db:93:a6:a7:50:cd:
26:5e:97:3a:48:91:21:e3:28:6a:90:51:41:38:69:
eb:9a:de:d4:e8:2d:16:8a:90:74:98:cf:ee:c1:ee:
2a:a8:b1:8f:08:c9:22:0e:49:34:ad:f0:61:88:58:
e8:8b:7d:96:e0:89:34:06:5e:ef:ce:69:f3:b7:01:
05:14:84:55:01:e7:1c:e6:33:35:14:bf:d5:b3:55:
33:d2:d6:db:48:2a:e6:ed:24:f0:33:b1:87:f0:37:
a7:b7:e7:cf:33:55:5b:ea:dd:3c:94:23:4d:79:a0:
d7:ee:e9:54:47:c1:7c:a5:6f:8b:c7:60:19:b5:88:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:89:E1:04:E8:E7:D1:A9:EC:4C:69:07:E1:A9:E6:75:01:B4:6E:F9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GonhBOjn0ansTGkH4anmdQG0bvk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
21:64:7e:04:0c:bf:c4:88:a0:91:1e:3f:73:93:10:37:01:2b:
f5:d2:a9:df:d5:94:fb:b4:48:42:62:44:2d:e0:28:f4:60:1e:
a4:fc:0b:74:96:86:14:43:22:73:d3:97:b4:a8:6a:1f:51:af:
b7:2f:0d:25:29:65:77:8c:05:2e:4f:34:75:76:17:e5:a7:d5:
11:28:fe:90:54:28:8b:4b:64:01:be:28:28:d7:65:3f:3d:f1:
c4:b6:84:8b:85:25:04:da:98:74:bc:d5:b9:f2:a1:0f:2f:b5:
80:6a:6e:cd:70:89:6a:a3:cf:51:2f:66:f2:6a:31:3a:cf:d9:
ab:70:37:ae:56:47:54:9a:a0:a7:6b:be:02:8c:bf:a7:05:0b:
34:a2:c7:b5:fb:43:ec:59:e3:79:48:8c:0b:08:8b:fc:d7:c5:
a2:98:58:c1:40:de:a1:8f:4d:ad:74:14:c6:fa:9b:58:7b:b3:
2c:58:e6:32:df:90:3c:2f:75:6d:40:2f:5e:4b:6e:bf:87:dd:
db:d8:b6:ab:e2:3a:c9:0f:d8:5e:4d:35:6c:a0:0c:a9:63:5b:
19:7a:24:94:a9:70:dd:39:10:d4:3f:ae:ab:46:60:f5:7e:df:
f6:ba:eb:61:73:27:02:14:8a:23:a9:40:ef:56:57:d0:de:3e:
42:7e:2c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org