Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/_UROqcn-m342PcoI_E25NAkpNIU.roa
File: _UROqcn-m342PcoI_E25NAkpNIU.roa (raw, json)
Hash identifier: KrFijuBaYe14Kv98wMcnwBbpmE2hWDfWo82HWMZBdhY=
Subject key identifier: FD:44:4E:A9:C9:FE:9B:7E:36:3D:CA:08:FC:4D:B9:34:09:29:34:85
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42B8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_UROqcn-m342PcoI_E25NAkpNIU.roa
Signing time: Sun 06 Feb 2022 00:30:07 +0000
ROA not before: Sun 06 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17080 (0x42b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 6 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=FD444EA9C9FE9B7E363DCA08FC4DB93409293485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:9e:e8:6e:f7:73:23:45:53:9c:a6:20:75:
92:ea:01:97:b8:ef:74:fd:08:65:95:d8:73:ba:8c:
94:67:eb:14:73:10:0b:41:45:5a:a3:68:90:25:0d:
06:f9:85:3a:08:25:5a:00:84:fb:d0:68:67:f4:fc:
81:ce:6d:e1:e9:9c:a5:e5:98:4d:36:37:a3:11:b7:
56:c2:13:2a:a7:9b:c9:f7:43:53:2f:7c:15:d3:81:
a8:10:05:4c:fd:cc:91:c6:4a:1e:7e:8e:07:cf:e1:
fe:0a:97:2d:09:d7:ec:f0:0c:56:be:44:4c:8d:52:
9a:0c:1a:f5:8a:08:0f:3d:8b:64:c6:46:d6:a6:d1:
e6:60:8d:0e:d1:cf:4e:7b:7b:11:69:58:77:c2:87:
5f:62:c0:53:8e:79:c3:3e:8c:60:f0:f9:e4:33:e7:
ef:fd:ca:2e:11:08:9b:42:23:f0:66:8d:af:09:85:
51:c1:4e:41:0a:2e:9b:97:13:f3:37:8f:63:a6:7e:
36:df:c8:59:e8:21:32:fb:c9:10:a6:fa:d5:66:d9:
2b:d8:2a:8a:84:ef:a5:e5:2e:45:7a:55:bf:9c:83:
e7:b9:bf:5b:b0:5a:8b:60:f4:c9:a8:15:cd:82:56:
ac:ba:a5:d7:5f:6e:07:80:17:14:7d:e5:e5:a6:cc:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:44:4E:A9:C9:FE:9B:7E:36:3D:CA:08:FC:4D:B9:34:09:29:34:85
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_UROqcn-m342PcoI_E25NAkpNIU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e1:8f:a9:f4:80:5f:cd:5d:76:68:06:31:4a:78:b7:2a:b5:
12:1a:40:4a:7e:5f:02:65:8c:fc:ec:10:5e:d6:c5:94:e6:91:
95:e6:28:93:f9:ec:5a:6a:38:32:9a:a7:cf:c1:c5:c9:18:e8:
4a:30:67:7e:86:9f:85:40:e4:8b:18:0c:4b:b3:e5:69:c1:cc:
7f:3d:c5:bd:d8:9d:05:0b:f5:89:7f:14:2d:29:b2:c9:e8:f1:
45:b1:6b:ab:1f:77:db:00:4b:1c:f7:ea:5c:76:bb:92:c7:ec:
b8:cd:4f:cb:62:e0:b9:0e:1f:60:3f:d7:7a:d4:40:31:a9:42:
64:b5:45:72:19:31:f6:06:97:dc:12:8e:f5:5d:98:12:94:cc:
a6:5a:bc:35:52:a2:56:12:6c:01:79:16:51:c1:68:13:ee:e0:
a3:c6:cd:44:db:d2:5e:c3:71:81:f7:5e:2b:72:42:da:36:d1:
d2:8a:53:a0:dc:92:73:84:12:a4:fa:d9:02:8a:cb:cd:7a:c7:
5b:5a:31:15:7a:e5:5f:d9:d0:55:a9:80:a1:94:68:18:c2:37:
82:b5:35:9d:4a:26:54:a5:88:40:eb:4b:58:65:82:f3:18:c9:
82:44:59:44:36:10:74:92:6c:e8:8f:17:63:59:eb:40:62:52:
65:99:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org