Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ZEDhZXibqg50Pc5SQN_uF8_1JrQ.roa
File: ZEDhZXibqg50Pc5SQN_uF8_1JrQ.roa (raw, json)
Hash identifier: gLyVOAcPUpLVe7nrOzJtGNZrdDdV8uXwmH3WqwM83M0=
Subject key identifier: 64:40:E1:65:78:9B:AA:0E:74:3D:CE:52:40:DF:EE:17:CF:F5:26:B4
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4770
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZEDhZXibqg50Pc5SQN_uF8_1JrQ.roa
Signing time: Wed 04 May 2022 00:30:11 +0000
ROA not before: Wed 04 May 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18288 (0x4770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 4 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6440E165789BAA0E743DCE5240DFEE17CFF526B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:8a:a7:87:5f:db:e5:5d:f1:81:ab:f0:78:
b3:bb:61:86:60:e3:46:a6:83:18:e2:78:93:1c:26:
dc:39:ee:75:c7:2e:c9:63:7c:e9:40:11:8e:b9:4c:
f9:d8:a2:31:2f:aa:bf:49:ae:1d:e8:cf:e8:95:99:
8c:ea:41:7e:60:d6:b5:d0:ce:3f:d6:31:7d:e1:26:
ca:8f:ab:81:33:34:70:c2:06:89:0f:6f:09:bb:68:
83:09:43:d1:4b:4b:3d:50:9b:3c:01:92:43:b6:3f:
c0:21:c8:ee:20:33:42:4c:cb:93:d7:48:de:35:54:
59:b5:c8:ef:cf:36:91:43:47:73:50:9c:09:b1:41:
f1:1f:5f:2a:b5:0a:6f:bf:3f:15:9a:b8:97:ae:c5:
a7:b0:95:17:ba:52:50:29:7f:20:b1:5b:3e:2e:5d:
ce:87:0b:ba:12:dc:d7:1e:34:2f:3c:03:ef:57:3d:
2b:7f:8b:82:10:dd:63:c2:1c:16:64:27:ee:73:f7:
9b:f9:85:00:ce:b7:53:0b:2d:f0:09:95:32:71:31:
0a:d9:2c:8a:92:0a:6a:6f:a2:e7:d4:b3:8d:4e:c4:
c9:7b:9c:35:77:b5:b8:28:e0:b1:41:71:6b:ec:18:
d5:e9:02:32:23:4c:83:12:ff:c1:6c:07:55:7a:0e:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:40:E1:65:78:9B:AA:0E:74:3D:CE:52:40:DF:EE:17:CF:F5:26:B4
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZEDhZXibqg50Pc5SQN_uF8_1JrQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:28:20:28:97:44:fc:43:8f:2c:60:90:35:e8:91:f6:71:8c:
d5:45:58:2a:11:e9:22:a4:31:ba:00:fc:59:6f:8f:07:bf:c1:
c2:2f:ef:e9:aa:4d:af:8e:8d:e5:6f:47:c4:30:b9:cd:2d:c9:
3c:eb:5c:e7:a4:78:61:2a:47:cb:40:2a:4f:8e:8e:f0:ec:b5:
2b:f2:6b:8f:1d:c5:71:f0:e9:61:1c:e6:1a:1a:7a:d2:c8:f0:
20:8f:24:db:f3:e7:32:e5:e5:77:cb:2c:e4:e8:67:0a:9a:58:
32:8f:58:6d:60:5a:b2:83:66:07:52:ce:cc:3a:e1:ed:d2:85:
5e:88:ca:63:4d:60:cd:6b:67:7e:85:1a:9a:e2:ef:c0:13:6c:
9a:c6:c0:46:18:a9:79:7e:e0:86:5e:a6:cb:3b:b0:51:e4:6c:
df:25:1e:32:99:59:0d:96:2c:f7:cf:4c:43:ee:f9:aa:a4:12:
bb:e3:c7:61:27:85:35:f6:f9:93:ff:35:d7:ff:5d:21:b1:66:
6b:dd:9e:e2:79:b3:79:f6:e7:57:3e:ca:f0:6b:4e:b2:d1:9c:
9e:ae:7a:97:7d:8e:cd:78:60:87:aa:75:a0:43:7d:cc:4b:b1:
3c:4f:f1:99:3b:be:d6:df:d3:18:7b:91:15:5f:86:97:dd:b7:
88:50:42:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org