Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/TFdN0PKqaHFvcSwF8smbwjn2VmE.roa
File: TFdN0PKqaHFvcSwF8smbwjn2VmE.roa (raw, json)
Hash identifier: aNccsZzQFJGwSykid2NLda9+WIghWV4CwsydNaSIqgk=
Subject key identifier: 4C:57:4D:D0:F2:AA:68:71:6F:71:2C:05:F2:C9:9B:C2:39:F6:56:61
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45EC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TFdN0PKqaHFvcSwF8smbwjn2VmE.roa
Signing time: Wed 06 Apr 2022 00:30:08 +0000
ROA not before: Wed 06 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17900 (0x45ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 6 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4C574DD0F2AA68716F712C05F2C99BC239F65661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:c8:52:82:d6:e4:e9:c4:4f:f5:84:99:53:
45:e5:0d:61:e3:27:e7:27:fc:8f:8a:4c:3d:8a:11:
97:e4:5b:a6:22:b6:60:35:94:eb:85:83:8a:2a:81:
e9:32:01:1e:b1:b1:c7:17:0a:14:d9:83:61:16:21:
f9:fd:8c:d3:25:a9:1d:c8:74:3d:64:f6:c9:98:b6:
da:4c:5e:21:c1:cd:a6:ef:07:f2:95:39:ea:cf:61:
a5:30:6e:90:d0:db:1e:4a:5c:64:b9:9c:f7:7c:89:
de:1e:e7:56:ab:98:5f:00:21:7a:bf:95:90:3f:47:
db:0a:3a:f2:b6:ef:50:c8:f3:d2:cd:02:23:e9:05:
4f:90:8d:08:b8:2b:6a:b6:09:b5:a5:7b:17:f4:1e:
29:da:63:54:71:a1:78:2d:22:86:29:db:92:9c:ae:
cf:43:d5:a3:9e:67:14:89:c7:b0:42:0c:5d:b1:7b:
e8:7f:85:49:09:b5:ea:5d:fc:b7:6d:f2:61:21:0c:
ea:f6:ff:e3:ba:32:54:46:53:8d:33:e7:db:45:ab:
49:3f:74:88:9f:c9:9a:f2:1b:2e:3f:11:31:bf:64:
f3:9e:47:3e:73:5b:1e:aa:9e:f0:be:30:2d:f2:b0:
00:07:69:b6:b5:64:1e:f7:3e:7f:f3:47:78:82:34:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:57:4D:D0:F2:AA:68:71:6F:71:2C:05:F2:C9:9B:C2:39:F6:56:61
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TFdN0PKqaHFvcSwF8smbwjn2VmE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f2:43:45:55:6c:9a:70:c7:c2:e9:09:8b:da:e0:42:aa:45:
53:83:4c:a1:f4:a2:ef:23:90:fc:df:d7:1a:81:49:d3:d2:be:
1a:41:9e:29:17:91:0f:62:1c:6a:da:69:24:eb:ba:a2:80:f9:
b7:8b:ed:2a:2c:a4:ad:8d:0f:76:de:69:0c:77:35:c6:ce:7c:
e7:18:ec:60:7f:00:88:ac:25:64:f5:31:1f:f6:61:4c:78:b4:
d2:0c:82:af:a7:81:09:ca:44:d2:a8:c0:71:90:66:d2:a5:92:
0e:81:6d:32:a1:62:a9:9a:61:db:95:80:67:50:e0:b9:92:14:
ca:59:74:8c:27:f3:81:60:ec:80:43:ac:51:10:58:89:d4:19:
d7:58:4a:06:8f:9a:8b:02:cf:5b:2b:34:bb:0d:f5:c9:95:5c:
29:ee:6a:fc:3a:80:e0:1a:9e:e5:64:dc:74:0b:40:ae:1c:3a:
eb:74:69:50:4c:5d:50:df:76:ce:95:da:51:35:69:ae:d8:d9:
eb:c0:48:69:31:dc:c6:a2:c6:b4:9d:42:ed:f4:7c:8e:0e:ce:
9c:f1:c8:48:b3:7b:6f:be:ce:9b:1a:62:35:b5:0c:5f:bd:6c:
af:cf:22:e2:5c:af:e4:22:e0:0a:cc:47:ed:72:2d:48:c3:bb:
8f:90:4a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org