Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/_VY0nCyHQUrMxDgoE_CuKCjgwK4.roa
File: _VY0nCyHQUrMxDgoE_CuKCjgwK4.roa (raw, json)
Hash identifier: gkdcik1JJXz+4hoDxKP+P1n8Qq3lw0g/Vh1CzvZxdrs=
Subject key identifier: FD:56:34:9C:2C:87:41:4A:CC:C4:38:28:13:F0:AE:28:28:E0:C0:AE
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42E2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_VY0nCyHQUrMxDgoE_CuKCjgwK4.roa
Signing time: Wed 09 Feb 2022 00:30:08 +0000
ROA not before: Wed 09 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17122 (0x42e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 9 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=FD56349C2C87414ACCC4382813F0AE2828E0C0AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:59:21:ff:22:d4:c5:4b:c7:ed:61:ef:86:
aa:96:1c:e5:18:40:dc:c6:0f:a0:c6:18:08:96:5b:
36:9f:81:a2:4c:8b:6a:b9:f8:c6:48:eb:82:c7:88:
2a:a7:3d:7c:b0:72:bd:cb:aa:9c:03:1b:14:71:fd:
68:24:2a:fd:a9:8b:5c:ad:c4:23:75:47:0f:d3:72:
6b:70:ba:79:45:68:bb:80:c6:3d:36:45:2c:4c:e5:
eb:aa:c5:a1:08:6b:be:ba:dc:b8:75:3c:76:a7:1a:
6e:f0:93:96:be:ee:bf:9c:22:09:54:58:12:9c:e7:
41:4d:93:42:15:c0:43:80:3c:c1:4c:f5:9b:5a:0f:
e4:10:60:f0:98:99:08:3a:03:52:69:42:b2:75:45:
22:c1:ed:d7:26:c7:16:21:aa:6d:b3:ba:a6:29:b9:
5d:ab:3e:10:04:db:ca:77:48:b2:db:78:60:a2:2f:
e5:b6:a8:6b:4a:72:ac:ae:3d:97:c7:b3:00:a3:65:
a1:0e:29:9c:4c:5a:44:2c:a9:4c:ab:dd:02:8c:a2:
79:f5:2a:8d:1a:e6:2a:e0:49:5b:50:7b:96:fd:95:
6c:28:e6:9d:11:8e:ff:fc:6a:e5:9f:32:ef:76:b9:
c0:2e:7d:9f:94:7a:b1:f5:eb:a5:b1:81:98:46:7c:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:56:34:9C:2C:87:41:4A:CC:C4:38:28:13:F0:AE:28:28:E0:C0:AE
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_VY0nCyHQUrMxDgoE_CuKCjgwK4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:05:e9:45:1f:91:56:1c:70:0e:78:89:dc:80:42:be:d7:27:
a2:bf:68:df:b2:a4:8f:5a:a6:3b:5a:ba:fd:33:99:27:5f:99:
08:73:67:06:1b:72:f9:27:f9:38:e9:df:32:88:34:3f:8e:15:
69:23:42:83:5e:9a:83:7d:4d:11:eb:49:ba:7d:57:02:f5:32:
7c:13:06:e9:eb:56:f1:c8:0a:5b:19:b8:aa:fc:ca:ad:94:10:
f0:a7:69:b5:9d:3f:ac:fe:ce:7c:af:03:3e:c1:14:7e:03:9a:
4f:d7:dc:f0:6d:d9:a7:aa:8b:2a:9a:14:fb:d6:df:59:95:b6:
d9:0f:d2:1f:4b:ff:92:10:fd:bf:69:3e:2a:05:a0:46:14:d7:
b1:df:6c:ab:15:80:3c:dd:13:e3:67:b7:a1:e3:0c:da:e7:2c:
e1:16:50:6b:af:d3:f5:1f:95:38:8e:e1:ac:d9:4f:8e:66:40:
5a:51:c3:d8:3b:09:ef:8c:a2:69:d9:87:bb:f0:5d:b5:2d:82:
e9:d8:95:28:30:34:d0:c6:4c:a6:e1:12:f0:f9:2d:bc:bc:f7:
1e:2a:7d:af:26:5e:ea:6b:8e:80:c9:da:53:70:da:23:31:70:
1b:d9:da:3c:c6:e0:84:d2:04:e4:16:5d:d8:d8:88:62:c7:68:
b3:59:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org