Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/YhQPkt1erN7RxpV6sKitZ5mGPmU.roa
File: YhQPkt1erN7RxpV6sKitZ5mGPmU.roa (raw, json)
Hash identifier: qt2/wiwfckYIbaXDHQ4ZItCFGMIyoxXbV9AIgvzpJzk=
Subject key identifier: 62:14:0F:92:DD:5E:AC:DE:D1:C6:95:7A:B0:A8:AD:67:99:86:3E:65
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44C4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YhQPkt1erN7RxpV6sKitZ5mGPmU.roa
Signing time: Wed 16 Mar 2022 00:30:09 +0000
ROA not before: Wed 16 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17604 (0x44c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 16 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=62140F92DD5EACDED1C6957AB0A8AD6799863E65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:1c:44:19:cf:ab:fa:e3:77:df:08:fc:20:
ae:7c:53:fc:21:9b:00:02:1a:9a:a2:ea:78:39:7c:
fc:b2:fe:bc:81:fd:3a:3d:19:3a:6a:bf:a6:13:54:
cc:88:73:6f:2e:59:4a:62:bb:01:eb:3f:d6:ab:56:
50:a2:af:d2:71:05:65:fd:0e:5e:07:9e:0f:2b:4c:
0c:46:dc:40:75:36:65:59:30:5f:ce:74:13:c8:d3:
5f:73:51:f3:f6:33:4c:72:89:65:b2:b6:e1:84:13:
00:34:5b:fb:4f:80:57:4b:3a:5a:b2:ce:2f:a2:0b:
90:c5:b8:0a:39:64:fc:4f:f5:15:d2:b6:0b:26:17:
e1:27:a2:86:13:19:dc:f3:8c:c4:ab:1a:41:41:e8:
6a:64:48:52:bb:87:32:c4:02:ba:20:e2:df:85:ef:
37:aa:32:58:81:89:1f:1a:52:ac:b3:37:a8:c9:9c:
e5:6d:35:33:fd:3b:b0:58:7e:07:9b:c4:1e:3a:a4:
fb:a7:21:df:d0:cd:16:82:ae:da:d7:f4:c5:81:4a:
d7:a2:16:4f:91:08:26:b6:ba:a1:43:c0:7a:46:9f:
e3:97:b2:e3:46:b3:43:0e:08:71:3c:fc:27:64:f4:
bc:64:ee:82:60:1a:9d:d4:2b:e9:58:6a:ef:d4:dd:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:14:0F:92:DD:5E:AC:DE:D1:C6:95:7A:B0:A8:AD:67:99:86:3E:65
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YhQPkt1erN7RxpV6sKitZ5mGPmU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e4:72:7a:f1:53:34:1c:2f:1d:df:e5:b6:10:25:80:e1:32:
8c:62:54:a1:1d:e9:07:66:79:da:7a:2f:d5:a4:f9:c5:95:8f:
7e:d7:5c:c1:da:65:30:3f:95:9d:1d:2e:47:d0:a9:75:70:1e:
d1:f6:85:cf:ed:f5:ad:2a:1e:fd:d2:fc:c4:23:b3:65:a0:07:
b8:98:f7:10:a6:9d:53:80:35:55:68:51:6e:ac:c7:00:3c:0d:
d4:8d:5a:50:04:46:61:4d:2b:7b:56:3d:05:5d:a6:57:7a:eb:
7d:56:fc:a0:90:c2:93:90:77:56:6b:fc:c1:8a:0f:4f:70:83:
94:43:c1:af:54:29:75:e0:f3:e5:a0:ca:2c:86:9a:ec:85:07:
95:b0:6e:a4:11:20:05:89:4d:3c:f9:be:0f:06:1e:7c:19:d2:
da:52:a9:db:1e:d2:4a:5f:14:7f:d8:a6:f2:ad:6e:d7:f2:e9:
5d:6d:8c:08:b4:61:81:a5:c1:ae:7f:4a:c3:29:92:38:1f:57:
0e:26:5b:c3:68:c9:2a:9e:36:7b:8e:32:5a:9b:ac:0d:42:2d:
66:c6:7e:85:f0:46:11:8a:e4:b8:b7:7f:71:10:68:15:d9:0a:
dd:95:e3:6b:55:b1:cc:77:82:11:d8:18:9f:4d:8c:d0:d8:bb:
64:f2:e7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org