Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/PyrmZkx3OydJwM_HDhBQ-EDyGoM.roa
File: PyrmZkx3OydJwM_HDhBQ-EDyGoM.roa (raw, json)
Hash identifier: lIejt5eOmnzLiVMNv82Ky7xi/VhrUp749aVTVP5K9+8=
Subject key identifier: 3F:2A:E6:66:4C:77:3B:27:49:C0:CF:C7:0E:10:50:F8:40:F2:1A:83
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4523
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PyrmZkx3OydJwM_HDhBQ-EDyGoM.roa
Signing time: Wed 23 Mar 2022 00:30:06 +0000
ROA not before: Wed 23 Mar 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17699 (0x4523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 23 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=3F2AE6664C773B2749C0CFC70E1050F840F21A83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:c6:92:30:d1:dd:39:d9:4e:2d:99:89:f6:
d0:28:0d:65:f9:1f:47:08:05:89:8a:43:12:4a:57:
6a:78:24:ac:f7:3a:40:5e:4e:b3:d0:6b:2b:86:47:
a9:dc:9c:0f:42:df:d1:a6:ed:23:b2:8e:c2:6b:fc:
fb:02:46:12:be:b4:8f:f2:ea:96:84:1c:db:e1:c7:
a3:b4:c8:0d:33:87:9c:30:de:99:fd:c5:bd:43:b5:
bf:d7:0d:be:af:83:97:1d:78:f4:a1:e0:53:f0:c0:
7e:d7:03:36:81:ee:88:94:ff:97:12:f0:de:5d:ca:
2b:53:cf:72:be:a2:e3:71:fe:87:de:96:73:0b:f9:
c0:f9:22:63:f8:af:b2:57:9c:9c:b6:81:54:5d:d4:
7d:bc:1f:36:9d:49:ad:f6:03:98:56:b9:c7:bc:3f:
05:f1:8b:c1:ca:63:87:05:c4:80:79:9a:da:d8:70:
39:dd:4e:f0:46:19:2d:1b:4a:24:df:a7:0a:ea:90:
98:6f:88:87:92:cb:42:80:97:7a:f7:43:06:2d:07:
76:ea:2e:66:90:3b:0e:64:ae:66:8b:4e:35:d9:54:
27:71:93:f1:ac:a7:76:2c:11:f5:e2:73:e5:8f:0e:
a1:55:8e:cc:e5:8c:ef:f4:d0:0a:95:7b:7a:b8:57:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2A:E6:66:4C:77:3B:27:49:C0:CF:C7:0E:10:50:F8:40:F2:1A:83
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PyrmZkx3OydJwM_HDhBQ-EDyGoM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b4:86:30:35:71:4a:2c:51:2b:5d:65:1c:fe:fa:44:82:d4:
99:32:4a:1c:57:86:00:18:70:f9:6d:ed:7a:cf:a8:cd:00:06:
9d:88:b7:20:cb:7e:f8:5d:54:80:15:e8:cd:67:a5:89:6a:06:
2b:81:bb:12:1c:ff:54:d3:43:60:48:a4:c7:e5:b9:ba:b0:59:
1b:b0:db:54:e5:2a:89:2a:a1:00:29:19:af:ca:75:c4:55:76:
81:06:43:2a:ec:a4:26:7a:95:bb:3c:15:50:bb:3c:89:32:fd:
2d:c0:4a:e7:69:3c:eb:a4:31:19:fc:c4:cf:a2:94:59:a2:e2:
6b:62:5c:c3:63:e9:e2:b7:83:f1:6b:c4:9c:ad:60:6d:7b:d5:
b8:de:79:27:00:01:b5:11:f6:e2:99:9a:f6:c4:f4:dc:d3:0c:
a1:d9:d6:69:89:2b:92:f6:6b:07:bf:cb:1d:71:f8:20:5c:8e:
c8:cb:38:33:ae:6b:b7:26:c7:4d:d5:4e:0f:05:7c:3d:9f:27:
41:d5:78:68:9c:20:bf:a5:3f:ec:17:c2:cb:a0:3c:0c:f1:c4:
dd:40:10:02:d8:07:f4:6f:d1:0f:91:1c:64:16:90:b6:7a:1b:
fb:4e:70:f8:a1:98:6f:00:cb:33:f9:6f:d4:34:4b:c5:48:5f:
70:09:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org