Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Y0hDWzlvw8KWbPuS7nBzSaCYeJM.roa
File: Y0hDWzlvw8KWbPuS7nBzSaCYeJM.roa (raw, json)
Hash identifier: Y3LuzMAnrwPRRMageR+fYEmlCRzByVRow2eU+7nXhZk=
Subject key identifier: 63:48:43:5B:39:6F:C3:C2:96:6C:FB:92:EE:70:73:49:A0:98:78:93
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4515
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Y0hDWzlvw8KWbPuS7nBzSaCYeJM.roa
Signing time: Tue 22 Mar 2022 00:30:07 +0000
ROA not before: Tue 22 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17685 (0x4515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 22 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=6348435B396FC3C2966CFB92EE707349A0987893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:5e:6a:e3:0c:ca:6c:75:6e:f5:be:6b:a1:
33:b1:25:0f:ad:3a:49:dd:79:d4:5b:6a:0b:b1:fd:
30:50:fe:a2:76:9f:48:e3:48:37:1c:06:d8:99:2a:
2e:10:ca:51:80:c3:cf:5e:6f:e6:4b:d1:84:67:8d:
34:35:30:e9:4e:b8:80:af:3c:38:e3:57:78:71:b8:
72:0d:75:32:32:6e:1b:63:6e:54:4f:bf:42:0c:15:
a3:ca:2d:b5:57:a3:ed:6a:b1:88:11:96:ff:92:79:
c6:93:8b:b6:f4:a5:3c:b9:2f:14:ae:47:e5:9e:14:
b2:b3:4b:0c:2e:08:2e:d5:84:8f:a7:14:cd:cf:87:
4a:73:88:97:be:74:9c:cb:20:27:fb:c9:35:d6:e1:
7d:22:9f:de:47:b5:d8:1a:92:0a:15:8a:46:3d:e1:
a9:34:bf:34:5e:1d:eb:43:7c:55:0d:d2:42:49:06:
b2:0e:1a:c3:98:a4:53:fd:36:91:71:2a:63:ce:1c:
ea:2d:ad:f8:a7:16:3e:1f:4e:0d:6b:37:bd:be:9b:
4b:f3:05:51:20:f4:5a:1a:bb:c6:00:46:89:03:6f:
71:9c:67:15:db:a7:ce:87:aa:1c:b4:d6:92:d1:8a:
47:f0:3f:8f:62:f1:c6:05:12:ab:2b:db:3d:b8:15:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:48:43:5B:39:6F:C3:C2:96:6C:FB:92:EE:70:73:49:A0:98:78:93
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Y0hDWzlvw8KWbPuS7nBzSaCYeJM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:20:64:e6:d0:84:32:cc:d5:2c:1c:32:6a:c0:54:49:fa:65:
34:a2:7b:35:70:d3:df:1f:55:fa:61:ea:bc:a0:5d:c7:92:ca:
31:31:ae:00:72:b3:d5:aa:e4:1b:f9:f1:6d:d1:36:b5:a6:28:
15:90:d6:db:52:a2:f8:92:df:af:94:3e:ec:e3:ab:c1:44:14:
b9:18:03:dc:8e:b3:4d:38:90:b2:10:27:73:fc:6d:fc:bd:f8:
c7:5c:ce:b5:51:c3:bc:ab:70:5b:07:ce:dc:64:a0:d7:e0:36:
e9:5c:72:19:0c:80:46:b5:5b:52:37:25:39:29:79:99:2f:e1:
c4:6b:57:39:29:e2:bf:2f:fc:21:38:87:71:4c:21:78:e6:e0:
1b:d3:98:ac:30:24:2a:23:91:fa:e3:cd:0c:05:75:f2:b2:1f:
a7:b4:50:d2:df:db:b6:63:1a:b8:82:4b:95:6a:e1:90:7c:21:
87:53:b6:44:af:99:b3:83:04:35:2b:61:d1:74:5f:c3:1f:e5:
03:19:eb:e1:52:2d:73:6d:b2:b3:54:89:34:ba:21:a6:13:af:
69:81:e3:9b:cb:fa:fb:19:ab:ef:19:e4:1a:f0:0e:d9:b2:e2:
bf:59:af:0e:7a:fd:63:2d:f0:36:42:8d:af:ff:d0:e8:ad:17:
7e:83:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org