Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/V25LuxeW_s5eUgPX3N-anvaodwI.roa
File: V25LuxeW_s5eUgPX3N-anvaodwI.roa (raw, json)
Hash identifier: 7qfSYkFhGz90xVl9UgfXIVnuzAoEWJ0DCH9RA4N2Uog=
Subject key identifier: 57:6E:4B:BB:17:96:FE:CE:5E:52:03:D7:DC:DF:9A:9E:F6:A8:77:02
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4950
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/V25LuxeW_s5eUgPX3N-anvaodwI.roa
Signing time: Sat 04 Jun 2022 00:30:10 +0000
ROA not before: Sat 04 Jun 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18768 (0x4950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 4 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=576E4BBB1796FECE5E5203D7DCDF9A9EF6A87702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:18:d5:91:c9:43:f9:f8:36:b4:20:83:37:d4:
f7:fe:c8:f8:7f:b8:73:05:4f:93:21:ab:35:f8:e2:
af:c9:10:bb:17:26:4a:88:35:c6:df:8d:e5:27:27:
97:d3:2a:44:c5:cd:32:8d:42:b4:1a:fe:db:39:c6:
8a:f0:a1:d1:e4:a8:38:33:d4:3f:33:0c:a3:c1:16:
63:db:b4:a6:af:70:85:42:01:75:98:26:cd:dc:ba:
0d:39:3d:28:cc:3e:3b:b1:59:ec:86:21:02:67:05:
e4:33:2f:33:5c:d3:ed:24:f9:0c:78:9e:0c:2c:84:
b9:54:c2:87:b2:ff:bf:8d:e3:82:22:db:ba:61:8c:
36:b1:e1:56:2d:d5:30:72:06:e4:95:f3:04:87:89:
1e:ab:e5:16:1a:e1:c7:9d:03:45:31:03:64:7a:41:
d5:35:3f:36:91:f5:c5:4c:96:84:c4:39:7d:ae:d0:
b8:18:ed:fa:3e:07:54:8c:5a:29:56:70:07:dc:2a:
a9:b3:21:56:66:27:44:c6:1e:c0:9d:a9:83:84:21:
9a:d1:0d:1d:b6:cd:e4:1c:70:4e:c9:d0:6e:df:fc:
a5:8e:2f:b8:94:91:2f:b6:25:31:ee:85:d8:0a:3d:
61:bb:9e:68:a9:b3:ef:a1:f0:3b:16:b7:96:6a:b5:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6E:4B:BB:17:96:FE:CE:5E:52:03:D7:DC:DF:9A:9E:F6:A8:77:02
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/V25LuxeW_s5eUgPX3N-anvaodwI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.190.0/24
Signature Algorithm: sha256WithRSAEncryption
69:59:77:10:55:f6:12:55:9e:4e:ad:eb:d7:b7:c9:5f:8d:ba:
2a:68:69:05:29:1b:f8:95:f5:64:11:e6:ad:df:af:98:57:a9:
a0:85:91:a3:a4:c7:6b:58:ad:79:02:dc:18:b7:90:28:0c:94:
89:d3:bb:4f:ce:dd:be:d3:53:e6:d6:c1:4e:2d:92:f1:5f:8a:
10:d4:f1:e3:29:4d:58:2d:c9:a6:29:e1:82:3c:b8:0b:33:aa:
8c:a5:dd:7e:aa:e4:97:88:e3:d2:29:27:76:7d:42:81:67:7d:
97:a1:70:d4:84:b6:7c:0c:12:0d:5c:a7:fd:75:29:22:ce:e0:
5e:54:19:89:85:d5:56:9d:d1:65:54:33:0f:57:0f:2f:0d:15:
6d:f8:86:77:38:9d:a8:ec:b1:d1:77:36:da:8b:a0:6c:33:c0:
4f:b6:54:81:9d:3d:c0:26:37:53:6e:e2:1f:6f:01:32:4f:f0:
eb:46:cf:50:3f:92:02:bc:79:49:39:56:0b:65:db:9c:2c:08:
b7:c9:c6:d1:29:e4:ff:90:ad:e8:9b:e2:5b:0b:05:e8:5e:28:
77:f6:f8:66:22:c3:0e:56:93:71:05:9a:f1:f8:77:19:fb:1d:
9e:1a:52:14:fb:e2:aa:ba:e7:a5:31:e1:28:36:05:a8:71:32:
13:5d:72:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org