Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VsZj5ONl1VS-yCwc5jVPpYZbdTc.roa
File: VsZj5ONl1VS-yCwc5jVPpYZbdTc.roa (raw, json)
Hash identifier: /ImjI3FD06AW+gxH7LVcvtRecRH9SFMdhS5NjtleoVE=
Subject key identifier: 56:C6:63:E4:E3:65:D5:54:BE:C8:2C:1C:E6:35:4F:A5:86:5B:75:37
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45E8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VsZj5ONl1VS-yCwc5jVPpYZbdTc.roa
Signing time: Wed 06 Apr 2022 00:30:07 +0000
ROA not before: Wed 06 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17896 (0x45e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 6 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=56C663E4E365D554BEC82C1CE6354FA5865B7537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:79:c1:a4:e9:9f:bc:be:f3:d0:f0:a5:a2:
ec:cc:51:8f:93:17:17:ae:09:3b:8f:97:6a:2b:53:
32:9e:de:a9:f9:cf:88:bd:15:bd:a2:04:c4:e6:32:
2e:29:06:56:78:f7:d2:31:24:57:02:3d:85:c7:15:
00:e6:64:e5:4f:5a:88:00:66:ab:70:56:b5:1c:f7:
f2:d1:cb:1a:cc:10:72:2b:6e:a0:f1:ac:30:d6:5c:
65:6e:8a:53:2b:ac:fc:6d:78:bf:73:1b:aa:9a:af:
df:3d:c5:6c:cc:8a:67:61:a8:7d:3d:71:67:d9:30:
04:ed:37:97:9d:94:52:fd:3d:49:a7:0b:6e:4c:37:
3c:3e:cb:9c:ae:54:d0:df:09:f3:27:0f:c0:77:b7:
40:bc:f4:10:b8:ed:d3:ef:c9:2f:cd:38:3d:db:f4:
ee:93:ab:89:10:7c:51:ee:18:60:eb:44:81:42:65:
7f:d1:71:f1:e9:03:77:cf:b3:f1:73:49:14:5a:85:
fe:fb:f6:a6:20:46:57:7b:da:87:ea:9b:e6:c7:03:
d6:15:36:af:80:fc:28:21:4a:70:44:03:7f:95:a1:
86:82:63:62:5c:80:54:aa:2c:84:b3:83:59:47:6d:
97:0a:ba:f2:6b:1c:64:b2:16:3e:01:c0:49:61:30:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C6:63:E4:E3:65:D5:54:BE:C8:2C:1C:E6:35:4F:A5:86:5B:75:37
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VsZj5ONl1VS-yCwc5jVPpYZbdTc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6d:cf:08:6e:7d:1f:6c:ce:cc:10:75:51:bc:cc:40:ad:59:
14:9a:1f:d1:61:6f:ac:b3:e8:0a:e0:ee:b4:56:6d:89:97:7f:
dd:78:98:de:e2:65:1b:a6:4a:10:0b:94:6b:e9:e8:ca:16:9e:
2a:92:8e:49:57:79:67:9b:e6:36:17:1c:ef:d5:33:3c:cc:e5:
c2:c5:c2:03:63:6e:65:10:fa:9e:55:cb:09:31:65:3f:81:61:
9a:cd:dc:8f:a0:38:fd:9c:a6:b0:aa:a9:e5:ef:23:c8:69:b1:
ad:44:0b:9d:e5:63:fe:c1:9e:b4:83:e5:6b:28:a6:08:9b:88:
a1:a4:06:cf:a5:62:b0:1e:91:23:e4:de:05:13:07:a2:74:88:
f8:4f:7c:a3:a9:8e:4c:59:ca:af:9d:de:ff:ef:2e:4f:82:30:
40:b3:ac:97:33:be:78:0b:28:9d:47:ec:dc:62:58:47:34:c1:
a5:91:07:63:d1:ba:7d:4e:54:59:84:68:8d:5d:6e:8f:ba:49:
6b:0f:57:10:55:26:78:5c:46:0a:f8:c2:72:45:87:df:76:b7:
7f:44:e0:8b:0a:71:fe:dd:fa:4b:d0:d6:ef:2f:3d:21:e7:4a:
23:e3:56:c2:cd:38:e0:a8:2b:02:c6:05:26:3d:a4:18:a0:a4:
bb:48:ca:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org