Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ULpR30VvRNqrg6ggghtU9dZ-1lA.roa
File: ULpR30VvRNqrg6ggghtU9dZ-1lA.roa (raw, json)
Hash identifier: TwZrA7AwwO36pX481eg4EmCKAXQ019hN8xsp2JFc10M=
Subject key identifier: 50:BA:51:DF:45:6F:44:DA:AB:83:A8:20:82:1B:54:F5:D6:7E:D6:50
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43E4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ULpR30VvRNqrg6ggghtU9dZ-1lA.roa
Signing time: Mon 28 Feb 2022 00:30:08 +0000
ROA not before: Mon 28 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17380 (0x43e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 28 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=50BA51DF456F44DAAB83A820821B54F5D67ED650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:4b:ed:68:45:6f:75:ce:a3:78:5f:58:4a:
10:23:d4:02:7b:91:6d:e1:d3:c6:e4:8a:0b:98:e0:
c9:b5:dd:a5:7a:fd:24:fb:59:14:cc:21:ed:f6:7c:
2b:d7:e3:6e:e8:9d:c6:1e:71:12:5b:d3:01:5a:b5:
6e:85:e7:30:bc:8b:13:b7:e4:37:be:dd:f3:89:c1:
a0:a8:8f:69:72:6b:ec:e5:e0:ee:a3:9b:d8:76:70:
88:fb:c9:5d:8f:d1:ef:2c:a9:56:61:53:2e:a8:02:
ea:21:29:c5:84:e5:6f:3a:cc:3f:89:11:a8:de:7a:
23:9c:57:f5:c6:cb:c7:fe:fd:20:b7:b9:5a:81:af:
08:a9:77:d9:54:ea:1b:13:0d:a5:28:f6:4a:35:71:
cd:5e:f5:0d:22:a3:04:97:9e:45:4b:3b:65:81:9e:
2d:5d:19:a2:d6:17:d6:36:2e:99:90:99:c7:13:7c:
cc:6a:1d:ee:8a:68:6d:0f:6f:73:fb:5b:84:37:80:
67:f3:44:8b:45:72:22:ea:b2:90:84:2c:a4:f6:cb:
fb:be:40:0b:5e:24:91:69:8b:be:69:f9:c8:1a:b5:
e7:33:45:96:2f:ee:d6:c3:fa:a5:4e:f6:94:92:e9:
67:2e:05:0d:8f:ab:6d:56:2c:0c:bc:fd:06:47:ff:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BA:51:DF:45:6F:44:DA:AB:83:A8:20:82:1B:54:F5:D6:7E:D6:50
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ULpR30VvRNqrg6ggghtU9dZ-1lA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:44:fa:7d:58:17:8f:53:f1:ba:27:c1:fd:7a:f5:3a:b7:73:
2a:1e:db:e9:0f:06:36:26:e6:8f:78:51:47:29:d0:92:96:0c:
c1:fb:30:94:22:36:c9:05:55:9a:5e:3e:bb:57:d0:ca:87:b7:
4b:a5:08:d8:4e:53:00:1c:6d:a4:62:e0:33:6d:81:ec:7e:6d:
26:54:e3:1f:06:38:4d:d3:08:77:66:39:34:e4:b4:30:91:df:
1d:a1:32:d2:1b:8c:b6:0c:a0:6f:c5:b0:1c:f7:12:fd:af:a9:
8d:c1:83:39:73:a5:9c:8c:80:ee:34:87:04:e8:9b:0a:46:f6:
93:23:2a:4e:17:8d:5e:38:ce:17:b3:40:41:26:90:c4:0d:78:
52:6f:d9:ad:c3:a1:9e:e9:f6:d4:82:06:79:1e:34:54:dd:5f:
84:9f:e7:91:d4:cf:55:c3:7b:e0:67:42:2a:b2:21:d0:bf:e2:
46:b6:01:1c:24:c6:f1:f9:1c:2c:30:7b:67:dc:12:fb:15:a8:
09:0c:f5:cd:46:04:6c:1a:ec:d3:f0:c5:d2:21:e6:bc:fd:d7:
1e:a3:a4:13:bc:2c:41:77:ef:77:55:07:95:2a:fe:53:36:fd:
0b:f4:21:35:27:dc:6c:d2:96:0b:b2:ee:de:d5:33:5a:98:83:
e3:53:33:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org