Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/a0vzlbOfjUjn6EG52jh_m2160wA.roa
File: a0vzlbOfjUjn6EG52jh_m2160wA.roa (raw, json)
Hash identifier: 64C2G2INeaKJ95GsG5w5c53TMP8JrwvET/Gk4WNV/pg=
Subject key identifier: 6B:4B:F3:95:B3:9F:8D:48:E7:E8:41:B9:DA:38:7F:9B:6D:7A:D3:00
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4252
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/a0vzlbOfjUjn6EG52jh_m2160wA.roa
Signing time: Sun 30 Jan 2022 00:30:06 +0000
ROA not before: Sun 30 Jan 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16978 (0x4252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jan 30 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=6B4BF395B39F8D48E7E841B9DA387F9B6D7AD300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:a7:6f:02:41:c4:78:85:95:a0:3f:6a:a5:
83:71:a8:ae:81:a1:8d:e4:29:29:dc:c3:89:33:06:
20:4f:f1:80:7c:89:34:43:e1:e3:45:9b:a7:e2:8c:
a2:db:bf:33:16:f2:15:aa:2c:f5:60:9c:0d:b8:93:
c8:6b:db:cc:28:4a:e9:28:19:28:8e:76:c3:31:e1:
83:e5:8c:22:e1:e7:eb:ed:c5:d1:43:27:b6:a5:2b:
6b:8c:df:a3:a0:9f:1e:5e:48:45:bc:de:f1:fc:38:
62:7b:71:aa:c6:31:05:dd:aa:c3:e2:1d:a2:b5:b6:
c8:48:ce:57:49:74:46:7f:38:05:03:12:38:1c:07:
fd:6d:fe:8e:41:eb:58:94:97:34:17:60:b7:e8:fd:
52:36:9d:44:ab:12:3a:b1:21:50:ea:30:2c:d3:fd:
cf:06:75:60:ec:1e:c5:4c:51:f7:08:b9:9c:9d:85:
82:c5:a9:23:c8:29:9b:af:9d:d7:12:c6:b1:30:36:
b2:33:11:2c:23:81:f3:44:9b:c0:2d:5b:e0:78:59:
dc:55:92:b6:cb:b8:5b:e4:e8:27:a4:5e:9e:c9:54:
71:5c:88:af:62:46:18:d3:ed:36:92:58:be:a8:9c:
6b:f3:43:81:aa:b7:8a:af:cf:74:56:d7:13:8a:03:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4B:F3:95:B3:9F:8D:48:E7:E8:41:B9:DA:38:7F:9B:6D:7A:D3:00
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/a0vzlbOfjUjn6EG52jh_m2160wA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:fd:91:e1:22:09:c6:f8:80:02:9a:46:9b:fa:01:cd:79:a1:
66:57:84:a4:2c:e0:e8:91:35:e1:74:7b:8e:16:db:77:13:fc:
c6:a7:77:07:35:f3:72:04:84:f0:cc:b6:9c:54:1b:1d:25:22:
8e:ec:6c:18:9e:a3:f2:ad:fd:48:c9:d8:cf:95:73:38:ec:b6:
40:1a:98:4b:70:22:4a:ca:07:12:f5:f8:67:af:e8:ea:67:53:
95:16:9d:53:32:1c:7d:63:b3:3f:ea:c3:9f:f1:bb:0c:62:32:
72:3a:e7:53:05:2e:e8:49:0d:a0:e2:a9:a9:44:1c:7c:cf:33:
2f:1c:a3:1b:9b:41:c3:a5:ac:89:13:17:30:04:63:7a:3a:f6:
27:1e:87:b2:3e:d4:45:84:85:88:52:ef:a9:29:e8:8a:be:87:
f9:fb:5a:3e:1e:7f:e3:2f:f1:f6:e1:04:ba:e0:a6:2d:3e:50:
d0:40:45:d1:66:8c:e4:19:2b:ee:ad:57:52:d8:4a:50:88:28:
70:02:95:6e:05:25:07:73:99:ae:0b:86:26:9b:96:55:68:6a:
70:72:7e:4a:6c:18:4b:a9:10:70:03:02:93:5f:3c:18:54:3c:
6f:80:1f:9f:23:b7:7d:e6:95:9f:8e:03:b3:c8:6b:c8:49:09:
2e:b0:19:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org