Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/_gzh49ut33oq4xKxmlfc0MDKj2E.roa
File: _gzh49ut33oq4xKxmlfc0MDKj2E.roa (raw, json)
Hash identifier: pymcAHNL4+6wRwcbO1/MwCLgUk5Ld2prSVaS6vgRhKE=
Subject key identifier: FE:0C:E1:E3:DB:AD:DF:7A:2A:E3:12:B1:9A:57:DC:D0:C0:CA:8F:61
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4979
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_gzh49ut33oq4xKxmlfc0MDKj2E.roa
Signing time: Tue 07 Jun 2022 00:30:07 +0000
ROA not before: Tue 07 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18809 (0x4979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 7 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=FE0CE1E3DBADDF7A2AE312B19A57DCD0C0CA8F61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:d8:d3:26:69:dd:fa:1c:c9:d5:7f:39:ef:
89:05:7e:00:e8:37:5d:1e:bc:c3:73:5e:28:d5:08:
3b:71:5f:2e:33:d3:7a:b0:38:2e:51:d9:14:76:be:
d4:e3:de:5a:84:72:67:08:70:ba:f8:54:cd:a3:b5:
85:04:9d:7d:25:24:46:bd:1f:03:75:ec:d9:93:ba:
35:49:37:c4:13:59:be:66:8a:33:90:02:ec:e2:78:
68:02:f8:41:5f:be:bd:50:13:64:5e:eb:02:01:b0:
9f:4d:6e:7b:34:a2:a0:6a:9a:1f:ca:dc:20:d7:13:
e5:6e:18:d8:64:a1:94:4a:98:df:e8:5e:6e:7a:e6:
c5:b2:a9:2a:b8:31:df:d8:4b:4e:42:25:af:00:6d:
f6:5b:49:e7:94:ff:64:9e:bf:7a:6f:c4:11:27:e6:
5b:05:90:9f:47:85:c1:ad:27:7c:cc:0d:10:d0:6d:
06:8b:e6:c5:21:77:89:0c:a3:5a:c8:63:af:93:4b:
3c:c1:29:b8:2c:90:03:c8:d3:b4:c3:ff:36:89:d9:
b2:72:a5:42:20:55:74:99:ae:59:e9:92:75:f1:82:
8e:7c:28:46:2d:2b:70:79:6c:4e:36:cd:92:b9:9c:
39:f6:7c:b7:89:50:fa:3c:70:d7:56:30:00:62:dd:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0C:E1:E3:DB:AD:DF:7A:2A:E3:12:B1:9A:57:DC:D0:C0:CA:8F:61
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_gzh49ut33oq4xKxmlfc0MDKj2E.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:83:37:2b:3e:1c:d4:5d:c0:81:da:23:ff:e6:25:ab:76:58:
a3:e4:9b:7e:3e:9f:d8:75:f7:e4:23:dd:9a:56:79:98:f7:b3:
c9:a5:81:bb:d5:75:20:bc:8e:27:13:97:de:7a:27:53:e8:80:
d9:ab:2d:88:6b:a9:47:d2:53:65:b5:ed:fc:1c:13:89:85:b8:
37:4e:ad:13:f9:d2:a2:d2:0d:f8:21:95:04:16:bf:31:9f:b9:
28:c7:72:34:b2:d6:a2:79:9d:8a:5e:35:e5:59:e3:1c:4f:c7:
f6:8c:cd:3c:f8:a7:1e:8a:b7:75:ba:7a:ff:77:f8:05:b7:47:
b2:87:e2:bf:42:51:c2:a5:b7:75:c8:6b:9c:d7:fd:b9:e5:2f:
df:8b:8e:23:09:b0:ec:f3:c2:4f:77:57:f2:d6:09:fc:dd:ed:
f0:ce:a5:f7:85:2e:e2:4c:fd:66:9a:fd:2b:58:f2:6d:64:38:
05:1b:28:46:3f:1b:ec:21:e9:ab:4e:53:62:b9:85:d6:ff:28:
39:08:dc:64:3b:2d:e8:0f:cb:52:7e:c7:61:e8:fa:2c:39:82:
62:88:d4:bf:2c:26:b3:0c:19:a2:3f:f4:ab:e9:d6:d7:1f:8b:
83:e0:02:e1:b3:bc:9c:c3:de:a3:09:4e:31:2b:c5:0e:c0:d0:
47:e9:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org