Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/MlpVVhPWHU0et0DGHxBWDI4Rybg.roa
File: MlpVVhPWHU0et0DGHxBWDI4Rybg.roa (raw, json)
Hash identifier: ymCJg+cGSu0vBNTEHaT9j0Lc7xJgwiZ3n2xrx/wX8fo=
Subject key identifier: 32:5A:55:56:13:D6:1D:4D:1E:B7:40:C6:1F:10:56:0C:8E:11:C9:B8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 428A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MlpVVhPWHU0et0DGHxBWDI4Rybg.roa
Signing time: Thu 03 Feb 2022 00:30:06 +0000
ROA not before: Thu 03 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17034 (0x428a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 3 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=325A555613D61D4D1EB740C61F10560C8E11C9B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:af:c7:87:be:3e:75:fe:38:a5:f3:de:fa:
6d:b7:4d:2b:18:e5:96:40:bf:63:9d:37:ff:05:01:
01:0a:85:ff:1f:b1:8a:53:07:8b:ad:fa:36:4b:a7:
d1:b0:0f:f8:00:ac:18:56:a0:94:c8:b9:dc:6d:ac:
36:fa:52:6e:3e:ff:10:ad:44:33:9b:a5:b6:8e:0b:
de:43:3a:90:65:15:29:03:2f:94:c1:4b:6b:10:cc:
29:a8:f5:57:cf:df:a8:e1:20:01:5f:8f:f7:94:bc:
06:79:f7:2a:2a:b9:72:02:93:77:7a:44:d1:1a:ba:
4e:c3:ff:ae:05:a8:34:e0:7b:93:4c:ec:46:3d:32:
19:98:68:66:c0:62:de:06:de:37:5e:08:e5:67:83:
d5:f4:27:55:b5:af:22:93:17:0a:3c:a5:90:96:f7:
cc:23:1c:fc:3e:95:36:a9:4e:6e:c1:ad:1a:19:52:
34:91:e6:fb:c3:0d:c5:9f:7e:88:65:35:14:53:d4:
5c:ca:43:2a:f5:7f:bb:7a:1d:bd:12:69:3a:1e:69:
38:80:01:f5:b5:3d:3b:8b:b1:dd:28:70:fa:cd:cd:
c2:fa:1a:61:60:65:ea:4c:0f:01:19:7e:f2:21:3e:
94:0d:47:b7:45:e4:a8:15:34:3d:77:c2:88:1e:47:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5A:55:56:13:D6:1D:4D:1E:B7:40:C6:1F:10:56:0C:8E:11:C9:B8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MlpVVhPWHU0et0DGHxBWDI4Rybg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
11:fd:89:b0:89:93:27:10:59:32:e0:c8:36:40:77:7e:04:3f:
c2:17:2f:80:ce:e3:67:5b:e9:ce:da:84:a4:f1:70:92:bb:89:
65:2e:e5:df:c8:b0:42:57:66:9f:de:e6:8c:a9:d1:c5:50:24:
5c:a6:26:82:db:c9:c9:a8:fd:45:24:51:04:6f:7d:46:21:d0:
b1:af:fb:63:8e:80:77:bb:03:7b:fb:61:f6:c0:af:5f:09:01:
0f:e0:b5:7e:9f:0c:76:70:00:83:56:a3:a3:81:7a:11:ab:90:
ac:d2:79:2c:fa:4a:0e:a9:44:c3:9b:a5:9e:b9:fc:85:53:a2:
98:3b:48:60:15:70:14:30:9d:74:67:0b:2f:18:ba:66:21:64:
a4:11:da:cf:10:6f:a3:97:a1:3d:07:ed:52:ba:cc:ed:5b:a7:
f3:5a:2a:67:c7:e0:45:b6:ea:d8:0d:a5:bc:fe:01:ae:5e:ac:
c7:fd:ce:21:c5:9e:1e:92:1f:d9:62:0a:ff:0b:3c:c3:e7:58:
ef:98:bd:42:81:de:31:88:a1:4d:33:a9:6f:f4:c0:11:99:f3:
48:5c:ad:19:cd:35:3c:77:06:42:8b:e5:c4:76:e8:16:e6:91:
2f:91:69:90:68:48:66:ac:e7:35:84:15:c4:4d:09:13:94:0e:
2c:e0:4a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org