Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/R_D1bSXcsIwCUkM6cW6tpCG8UZQ.roa
File: R_D1bSXcsIwCUkM6cW6tpCG8UZQ.roa (raw, json)
Hash identifier: QH8XruJKtXhYcql8g3/qA6kiV8WO+nMKrWI1xmlTSaU=
Subject key identifier: 47:F0:F5:6D:25:DC:B0:8C:02:52:43:3A:71:6E:AD:A4:21:BC:51:94
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4577
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/R_D1bSXcsIwCUkM6cW6tpCG8UZQ.roa
Signing time: Tue 29 Mar 2022 00:30:08 +0000
ROA not before: Tue 29 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17783 (0x4577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 29 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=47F0F56D25DCB08C0252433A716EADA421BC5194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:72:e0:79:f1:46:f6:57:0e:0d:fa:b9:ca:
79:18:4b:6d:37:dd:24:b4:d4:7f:e9:28:be:34:c3:
3d:5e:7e:f2:3d:e9:86:63:c0:00:53:7d:3c:b7:1d:
3e:5c:0b:7e:3e:da:7b:c3:56:95:92:6f:b3:fb:ab:
36:a8:eb:d2:1d:8d:46:4e:38:d7:e6:55:47:2b:f1:
d4:c2:8b:29:e5:16:70:53:1b:56:e3:43:d0:b6:c3:
b8:7e:71:74:41:da:79:97:e1:cf:e3:fd:b5:2b:5a:
6e:dc:8e:ec:fe:ad:f5:05:83:d9:9f:2f:b2:44:f0:
b6:cf:65:40:87:7d:bc:1e:7d:28:48:0a:82:9d:17:
02:f8:fd:f7:3a:fd:5c:60:94:6e:f2:d7:87:e5:93:
50:27:41:b5:fc:51:5c:cf:18:d7:d3:62:db:ac:9c:
3f:2f:ce:b9:33:ca:32:ec:56:33:3a:d6:34:25:29:
db:08:03:a4:83:d8:42:d6:15:ca:50:bc:8e:11:a4:
8f:64:32:44:c9:43:2a:19:df:1b:78:d5:9d:74:de:
b5:b6:12:62:8f:8e:ea:97:c2:2a:05:bc:56:dc:1e:
2e:f1:a5:83:58:fb:eb:64:45:0a:f1:41:56:ec:2e:
ab:b8:92:8f:5f:78:dc:17:1b:15:cd:ac:ed:a5:72:
d5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F0:F5:6D:25:DC:B0:8C:02:52:43:3A:71:6E:AD:A4:21:BC:51:94
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/R_D1bSXcsIwCUkM6cW6tpCG8UZQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b1:c9:25:d0:b5:c1:9c:6c:6a:a3:2f:dc:a4:b9:61:76:0b:
82:0f:8f:95:3d:c8:16:bc:c9:f6:a5:80:ef:99:73:78:23:ee:
c3:fa:3d:bd:d0:3b:38:01:e2:18:6a:10:1e:5b:51:f9:ec:2e:
b5:92:b7:c5:6e:7e:66:1d:fd:83:af:9b:da:e4:fd:35:48:8a:
f3:29:e4:29:c7:8a:6b:84:85:c9:b3:4a:e2:50:6b:9d:5a:d6:
62:63:dd:0a:fc:f5:6f:e1:c5:1e:23:a8:20:12:5a:7b:ca:f5:
b5:0e:0a:47:d7:df:39:c3:52:64:3e:d0:91:82:33:b7:87:02:
69:8e:d1:3e:75:5f:ca:85:e1:f4:fb:c0:e1:dd:48:c1:e6:1e:
db:7b:d7:72:bd:b8:b9:c8:9c:b7:d4:32:44:52:af:19:39:95:
39:49:3a:fc:3b:93:f1:5a:bc:69:73:6a:88:31:cd:89:42:1a:
33:a2:eb:b7:81:66:08:43:f1:f9:59:e0:38:0b:e1:fc:75:d7:
f2:b4:ea:55:54:85:43:76:d8:0f:bf:58:29:eb:17:82:06:ee:
8d:53:77:a2:43:fc:64:df:47:91:d9:f4:cd:f5:2d:ae:83:74:
60:79:a3:46:f9:76:6e:14:2d:db:57:ab:ab:67:af:54:31:15:
5b:dd:98:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org