Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VINiuxbJbjVsIWmPSjqpIQCHIdI.roa
File: VINiuxbJbjVsIWmPSjqpIQCHIdI.roa (raw, json)
Hash identifier: I0gd6ip5MstG3h9XsR1PTzBNTCRM4Q8QI9EQzuFH6nQ=
Subject key identifier: 54:83:62:BB:16:C9:6E:35:6C:21:69:8F:4A:3A:A9:21:00:87:21:D2
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46AC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VINiuxbJbjVsIWmPSjqpIQCHIdI.roa
Signing time: Wed 20 Apr 2022 00:30:06 +0000
ROA not before: Wed 20 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18092 (0x46ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 20 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=548362BB16C96E356C21698F4A3AA921008721D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:26:57:45:a7:e3:e4:95:13:60:34:ea:19:
0f:93:fa:d0:0b:0d:2d:fb:93:69:6c:e3:2c:21:12:
d2:80:d1:82:3e:e6:4d:53:06:26:03:e8:3c:b0:41:
db:25:55:a9:be:6f:ad:f4:21:b4:fa:bd:68:6b:77:
6f:b5:d1:45:43:9e:3a:7e:b0:63:98:5d:a5:5b:96:
2e:dd:81:3e:69:a8:55:12:25:a7:ec:f1:ab:14:f3:
7f:70:7c:3a:b3:b8:17:81:22:27:65:03:e9:cf:6c:
78:bc:28:55:6a:1b:1f:27:57:bb:f9:62:d7:f3:fa:
8e:d5:03:a8:44:3b:49:3e:4c:a3:57:e1:1b:12:b9:
65:45:fa:c5:fb:f3:9e:e2:65:6b:da:10:e1:7d:97:
ff:50:f6:90:56:48:03:4c:c0:90:07:82:1e:39:f6:
54:e2:95:dc:4f:09:83:b0:c5:ba:4d:ff:17:a4:e7:
d6:df:20:da:9b:e4:0c:1a:fd:86:eb:a1:ca:91:ad:
f4:96:59:f3:43:80:96:9b:f3:a6:5e:26:8e:ca:c2:
d2:1f:49:d2:d4:a0:eb:8d:0a:c5:54:0a:de:9d:b5:
ee:bc:cb:4d:d0:88:a4:e7:b1:52:96:8f:45:83:e2:
a8:95:e8:63:64:5d:52:4f:5a:67:d3:4c:25:5f:e6:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:83:62:BB:16:C9:6E:35:6C:21:69:8F:4A:3A:A9:21:00:87:21:D2
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VINiuxbJbjVsIWmPSjqpIQCHIdI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2f:fd:a1:65:87:d7:5f:f8:c1:31:9f:53:f5:cd:35:06:56:
19:10:71:0b:47:cd:25:e2:d1:f6:bd:5c:c8:36:b3:e3:a3:1e:
34:b4:53:11:81:93:c1:7a:74:40:41:f6:bd:27:c9:d9:20:01:
13:0e:78:99:6e:ff:ef:c0:7b:a4:46:34:f1:5f:f2:56:a5:6b:
26:f6:01:13:b6:6b:1a:d4:5a:f8:eb:8d:3f:e5:49:23:a9:b9:
ec:03:9d:c8:7f:c4:4e:82:fd:0c:96:45:a8:a3:7a:81:a8:96:
dc:a6:eb:f6:f1:69:fa:6b:6b:a4:da:da:3e:88:86:43:f1:d0:
96:05:fa:5c:ec:b1:66:04:53:00:11:19:10:00:76:bc:74:7a:
f0:f4:c9:11:66:b8:26:03:39:a6:15:ef:9d:1f:09:69:fa:93:
cf:c5:11:81:05:8b:63:39:03:8e:90:77:7c:4a:d7:42:b2:bf:
f1:45:1b:ff:51:e9:2a:15:8b:24:43:c3:6a:66:30:a8:2b:dd:
8c:60:60:23:8c:6f:55:36:9d:e8:bc:d7:7b:2d:db:92:ec:1b:
12:af:70:2f:aa:c2:4d:a3:00:79:7c:78:92:38:77:85:18:ca:
d0:2c:5b:5d:7a:13:00:15:9d:6e:0c:84:0a:69:16:5b:88:a5:
b5:82:03:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org