Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/W7W5jGmcYRe6lpkXqrFapU6y0T8.roa
File: W7W5jGmcYRe6lpkXqrFapU6y0T8.roa (raw, json)
Hash identifier: +LYAdHxYysaEWRD84yHM5ML/Ql7VPYzvJe9kt03c5Eg=
Subject key identifier: 5B:B5:B9:8C:69:9C:61:17:BA:96:99:17:AA:B1:5A:A5:4E:B2:D1:3F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4429
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/W7W5jGmcYRe6lpkXqrFapU6y0T8.roa
Signing time: Sat 05 Mar 2022 00:30:08 +0000
ROA not before: Sat 05 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17449 (0x4429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 5 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=5BB5B98C699C6117BA969917AAB15AA54EB2D13F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:c7:e1:b6:be:3f:74:2b:04:af:c6:98:59:
c5:97:6d:89:29:9b:1c:5d:6b:b4:87:13:0d:75:bc:
5c:28:f8:98:7f:28:26:0e:1a:e2:e9:46:e1:36:8e:
13:63:f1:1c:b2:ba:c1:5a:c7:6a:9e:d3:13:92:e2:
c5:af:19:fa:89:10:29:c1:b0:53:f9:b9:2c:fd:14:
9d:ae:4c:21:c3:0c:c6:e8:08:6e:ba:be:71:f4:60:
5e:63:38:67:21:e6:ac:42:24:c8:47:df:95:c4:27:
85:6a:78:d4:6b:c5:d7:78:0b:2c:20:29:8a:e2:42:
3d:54:72:e7:e1:d1:65:d2:4b:3d:5d:29:97:1c:3a:
06:5a:33:04:0d:d2:3f:46:f4:40:e9:cb:38:0a:3f:
35:92:a4:b1:aa:70:6d:30:35:90:49:30:83:c9:e5:
da:7c:0f:e4:82:06:43:51:1b:0c:0d:d5:bd:71:df:
25:3d:53:69:51:80:f4:3a:a4:39:e0:15:ec:9d:dc:
4b:bf:a1:9d:bd:79:8a:c7:a0:11:4c:07:cb:a8:3b:
8c:6c:14:80:91:0f:3c:a1:c5:08:9c:62:48:70:48:
93:03:e0:75:ce:78:43:ee:9f:04:37:d7:8f:1a:6e:
ac:d8:38:bd:12:0e:8a:49:c7:45:30:42:74:39:1d:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B5:B9:8C:69:9C:61:17:BA:96:99:17:AA:B1:5A:A5:4E:B2:D1:3F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/W7W5jGmcYRe6lpkXqrFapU6y0T8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
54:45:b5:de:8a:53:ae:58:15:bc:e0:9d:fd:45:b3:03:8e:7d:
9c:91:ca:bb:04:01:db:62:57:4d:e6:ef:cd:a1:cd:22:fc:87:
22:d8:cb:de:4e:a2:5c:8c:b5:6e:bd:c9:2d:0d:2a:a8:26:10:
72:ea:0e:41:16:3b:13:ef:aa:14:b6:40:2d:dc:4f:ab:0e:46:
b7:93:12:a8:e2:a3:b4:9c:27:65:de:d2:95:e4:22:bb:a0:df:
b9:6b:81:b8:8c:1a:7f:45:a5:ab:8a:68:a9:d9:bd:53:c7:71:
30:46:65:0e:bc:c6:c7:65:cb:4b:b4:0c:76:1a:d2:47:26:98:
39:87:50:a6:36:3c:a4:bb:8e:b4:c3:a5:10:26:41:56:6b:02:
d0:ca:85:5f:07:c8:31:14:6b:75:6d:86:e1:48:03:53:32:52:
80:5a:1e:a2:e2:27:54:82:34:28:20:07:3f:9a:55:5d:72:f2:
89:88:b8:3a:4d:eb:e3:c6:dd:b2:0a:8c:40:3c:04:61:79:74:
85:07:97:b1:a2:0b:f8:93:22:a0:90:2e:6e:3e:26:38:fa:50:
8e:60:6e:f6:ee:bd:fe:34:a0:ce:8d:cb:76:ea:c1:95:84:d4:
06:37:5a:db:34:eb:d1:6c:2f:b3:fb:a7:02:83:63:50:08:53:
00:54:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org