Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/JNuQ7tx3OJvik61j1MTpid_dr4s.roa
File: JNuQ7tx3OJvik61j1MTpid_dr4s.roa (raw, json)
Hash identifier: a3V8FoP5Ru26lmfdD+3vgTz5NNYyIGot0tBQhRFZMdo=
Subject key identifier: 24:DB:90:EE:DC:77:38:9B:E2:93:AD:63:D4:C4:E9:89:DF:DD:AF:8B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 491A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JNuQ7tx3OJvik61j1MTpid_dr4s.roa
Signing time: Thu 02 Jun 2022 00:30:08 +0000
ROA not before: Thu 02 Jun 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18714 (0x491a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 2 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=24DB90EEDC77389BE293AD63D4C4E989DFDDAF8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:9c:66:78:ec:be:bb:0a:ec:b1:7d:bb:69:
d1:36:86:d6:bd:3c:73:7d:58:0d:a0:5b:93:3b:d6:
ec:4e:33:d8:73:30:a2:0e:83:9b:b2:c0:ca:9e:42:
63:b7:db:05:a2:e9:8d:97:a7:71:c8:f5:75:76:91:
49:3c:ef:be:9e:17:bf:c1:3b:5b:19:a1:e9:1d:05:
d7:de:d6:7b:16:52:80:7f:1a:9d:b0:ac:b4:6c:14:
2f:2b:65:91:19:4a:19:66:aa:2f:ce:0e:a6:92:f2:
f1:bc:0d:bf:f3:69:be:28:50:b5:c2:ff:4c:55:5d:
49:b4:bd:29:46:42:c4:27:47:25:63:22:d4:51:c3:
75:2c:3c:21:c8:c3:c6:db:55:68:6c:ea:f8:95:a5:
60:5b:45:6b:d7:10:f7:df:1a:94:c0:7f:d1:1d:46:
ad:a0:76:47:e5:46:26:bc:8b:06:68:7f:f5:23:2a:
83:ca:99:6b:9b:7d:f6:f2:50:d0:c8:0e:49:f7:2c:
ac:8c:e0:67:15:b6:36:81:61:d5:7f:6b:fe:c7:df:
40:0a:92:61:fe:a8:00:2e:b6:6d:83:c5:51:b6:2d:
cf:1e:fd:1d:ac:3b:06:0e:96:ce:e7:78:dd:6d:f5:
b5:88:5d:77:08:73:aa:76:cc:d1:9f:13:8f:6e:fd:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DB:90:EE:DC:77:38:9B:E2:93:AD:63:D4:C4:E9:89:DF:DD:AF:8B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JNuQ7tx3OJvik61j1MTpid_dr4s.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d7:0c:f3:37:a0:92:da:54:c5:23:dc:d2:82:94:29:0f:23:
17:94:c9:cd:81:65:d5:2d:a0:2c:36:e0:cc:82:6e:64:f6:b2:
49:11:cc:f6:68:dc:01:a5:59:64:07:89:ff:1f:f1:5f:11:4f:
d3:8c:45:c1:8e:88:62:84:79:c1:2c:c5:38:31:2e:8a:43:76:
ee:3f:31:82:5c:d4:00:36:7f:4d:6c:90:ca:db:ef:78:d9:5f:
13:db:c0:71:e5:7b:8e:5d:3e:c5:16:b2:b4:14:fa:c6:79:d3:
6f:2d:88:42:7f:e0:e2:8d:d5:06:04:9d:a8:36:cf:02:57:26:
13:e2:68:e0:1d:9c:7f:91:40:73:c8:a6:0a:3d:f5:73:72:40:
bf:b7:46:b2:b4:99:bb:3a:1b:f7:bf:ff:e2:6f:72:25:35:82:
2c:61:96:94:c2:7b:09:dd:c5:64:5a:96:ef:ff:2c:b5:c4:eb:
e4:18:b8:95:dd:76:9f:f5:e5:9c:fb:a7:32:df:a1:cf:72:b9:
45:60:aa:b0:21:d4:f9:8b:f2:34:f6:48:4f:7e:fa:2c:4e:d4:
3c:47:9b:40:86:ce:3c:e8:0a:49:2a:4e:70:f6:c0:6a:ff:00:
75:f4:db:9e:b5:fe:35:4a:36:62:b2:eb:60:0d:54:40:c2:66:
3a:36:db:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org