Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/YhAYa6433KumJy35v_tMD7Sakyo.roa
File: YhAYa6433KumJy35v_tMD7Sakyo.roa (raw, json)
Hash identifier: QdTNhmG04iuHZ6jhQ7iKVIjOQwl+6UiHmLDrQe7Vi+w=
Subject key identifier: 62:10:18:6B:AE:37:DC:AB:A6:27:2D:F9:BF:FB:4C:0F:B4:9A:93:2A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44B2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YhAYa6433KumJy35v_tMD7Sakyo.roa
Signing time: Tue 15 Mar 2022 00:30:08 +0000
ROA not before: Tue 15 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17586 (0x44b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 15 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=6210186BAE37DCABA6272DF9BFFB4C0FB49A932A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:a1:fb:17:aa:74:e7:1f:11:d9:eb:13:96:
e9:23:90:04:45:03:79:81:c1:3d:03:e8:15:41:88:
bc:b3:04:8f:ae:53:83:76:69:b3:37:a3:83:ce:a2:
47:a5:02:3f:26:62:a2:06:8d:49:7e:d2:04:00:49:
5f:60:f1:72:d9:df:5f:e9:7b:35:28:85:40:f8:8d:
b1:c4:71:1e:e3:6b:0a:73:b4:62:87:0e:06:da:46:
45:f2:52:66:82:1d:9e:a3:54:07:2f:bf:8c:d0:45:
a8:20:e0:a7:e2:03:c7:2f:88:20:f8:f1:48:59:df:
6f:a8:43:01:cd:3a:8d:0c:e1:1d:56:43:66:00:87:
f4:81:4b:8f:c6:f6:09:38:5e:d1:69:56:68:0a:a2:
8c:09:a3:6f:a3:c7:d9:a6:69:11:93:20:8b:03:46:
c9:0d:f4:da:47:e6:ed:91:04:0f:45:6f:f1:a6:35:
17:eb:a1:f2:e0:c6:28:fa:0d:08:d3:32:9b:dd:fc:
b3:b4:dd:a5:7c:be:3a:48:64:83:65:34:b3:4a:d6:
2a:a0:6b:f4:9b:f4:cc:3d:aa:3e:db:d0:d7:4d:d7:
2f:eb:38:cc:75:a6:9b:75:29:18:c0:c1:ee:95:24:
37:dc:cf:52:e1:24:36:51:3a:d4:ce:12:81:e0:38:
88:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:10:18:6B:AE:37:DC:AB:A6:27:2D:F9:BF:FB:4C:0F:B4:9A:93:2A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YhAYa6433KumJy35v_tMD7Sakyo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
92:bb:a1:f4:81:f4:29:eb:85:ff:b0:18:72:9b:ce:57:a0:cf:
bf:29:af:39:9a:df:cc:2e:0c:2c:fd:36:b5:fa:35:09:0b:af:
83:6e:db:65:e3:9e:a1:0c:52:14:a9:30:36:dc:89:da:25:fa:
fc:e6:40:37:aa:a2:af:2e:5b:6b:46:ef:98:f4:17:6b:b1:57:
6e:c1:17:8b:37:20:0e:ec:fb:52:d5:ec:64:d8:2f:39:a6:80:
6a:06:a1:58:4d:a8:3d:e6:34:37:46:03:28:a8:3b:b4:54:9a:
70:3e:85:ce:e3:3a:f4:52:aa:33:57:8e:7f:10:4d:f9:8b:b6:
e7:df:4a:c9:cf:6e:ba:2e:66:20:f4:07:b1:bd:5d:0b:ad:b6:
65:6e:f3:e2:39:b0:5f:6b:b4:c7:43:c7:ec:c0:df:59:1b:78:
5b:03:3f:c9:e4:b6:80:e8:36:6e:b3:d4:3e:f2:cb:d7:a2:99:
0c:1d:a8:f4:1a:d7:c2:e7:ab:af:d2:20:8d:75:45:f0:4d:9e:
36:d9:5f:00:f6:8d:fe:34:d9:79:a9:b6:65:c4:ff:4f:de:f9:
68:87:bd:b1:eb:c0:54:cc:93:d7:01:13:fe:66:0e:d3:5f:4a:
9d:6b:11:de:64:03:cd:2b:a0:22:51:ec:e9:f5:a0:ff:ac:42:
8b:59:1a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org