Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VayZWX9KAIHL4s4iVxVDasgQazk.roa
File: VayZWX9KAIHL4s4iVxVDasgQazk.roa (raw, json)
Hash identifier: wH487tznN05Tslb/pCotvVj2pDU8IRi6iVD3UfMut7s=
Subject key identifier: 55:AC:99:59:7F:4A:00:81:CB:E2:CE:22:57:15:43:6A:C8:10:6B:39
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44DC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VayZWX9KAIHL4s4iVxVDasgQazk.roa
Signing time: Fri 18 Mar 2022 00:30:08 +0000
ROA not before: Fri 18 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17628 (0x44dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 18 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=55AC99597F4A0081CBE2CE225715436AC8106B39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:6e:ad:ab:da:ee:fd:8c:b5:4b:67:28:a2:
a4:01:0d:6d:df:9b:71:33:26:5c:0c:4b:8e:fc:b6:
2f:94:9d:e6:f4:60:0a:3c:98:ef:92:3e:ec:c8:9a:
c8:f0:7b:37:da:1a:97:5f:51:71:49:85:1c:ac:e7:
05:83:8b:17:6c:eb:0d:2d:57:09:6a:64:07:10:8d:
5b:da:88:49:a4:e2:eb:76:c2:6d:a2:0d:c1:44:c2:
86:62:07:8f:36:d7:fc:1e:2d:9c:83:4c:49:eb:07:
2f:f5:bb:53:83:57:cb:4d:64:ea:d5:1c:3c:76:9c:
2b:b5:f7:2f:6a:6d:d2:b3:33:d8:53:8f:a6:b2:ef:
05:99:a0:ca:fb:4a:69:6e:a1:5b:32:01:a6:4c:1d:
45:3b:5c:0c:50:53:45:2c:1c:4d:b1:a0:fe:3c:da:
32:77:b1:1d:4a:08:de:35:ef:15:2b:4c:23:ff:d5:
4c:1c:a7:14:58:f4:32:9b:41:1c:98:fc:f1:e0:ee:
79:2a:29:08:2e:54:c3:b2:89:68:04:41:5a:f7:ba:
f6:b8:e1:dd:66:17:8b:13:20:ae:c0:66:4b:28:3f:
f9:1f:69:13:64:72:12:55:b3:7e:25:07:e8:75:1f:
b8:9b:87:c0:18:35:86:55:ea:92:a6:21:51:b5:7f:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AC:99:59:7F:4A:00:81:CB:E2:CE:22:57:15:43:6A:C8:10:6B:39
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VayZWX9KAIHL4s4iVxVDasgQazk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:2f:32:9a:3b:5a:82:da:e7:f4:90:31:0e:05:01:e3:5d:30:
56:a3:57:a6:c8:4a:a8:93:b9:10:2c:11:f5:29:58:f3:3b:dc:
e8:95:80:5a:f8:2e:65:72:0b:57:89:cf:14:af:3b:d1:4d:65:
3a:46:1a:9c:c6:25:ce:4c:e3:ed:ad:71:a1:ef:86:f4:a9:96:
1d:89:fe:36:6f:8f:26:60:14:49:75:2f:d8:77:35:a9:c7:17:
10:d0:f7:83:83:c6:6c:aa:d3:0a:7e:95:69:d2:e7:70:18:a8:
24:2f:6f:61:da:57:cc:0d:65:f0:7c:96:a9:ad:69:bd:f5:99:
b1:6c:16:ed:6f:4f:5c:db:b8:1d:58:20:ba:76:e5:11:e5:a2:
d5:ca:9a:ed:3b:25:c4:05:bf:88:1c:51:78:19:e5:38:f9:bf:
ab:01:72:e7:f6:ac:23:b9:78:18:36:be:3c:eb:d8:d7:2a:a9:
d3:d8:0d:70:e9:36:fd:28:32:53:10:f4:6b:34:76:90:ff:e6:
b6:ff:c3:6d:40:ff:07:75:26:c5:24:c9:21:f2:ee:6f:a2:cf:
42:26:14:5c:55:84:36:46:d4:c2:57:6e:a8:6b:ae:2c:f9:0b:
c4:dc:25:e5:4a:db:d9:b5:08:f9:1d:64:61:9b:60:cf:df:37:
cf:2d:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org