Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/aI-TtRNJT2mL4Pna4pDWA2sZzZY.roa
File: aI-TtRNJT2mL4Pna4pDWA2sZzZY.roa (raw, json)
Hash identifier: UWmZeBBZM0PlkgQAm2mulSkUluOGpWRk+JEkmH3HDdc=
Subject key identifier: 68:8F:93:B5:13:49:4F:69:8B:E0:F9:DA:E2:90:D6:03:6B:19:CD:96
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 464E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aI-TtRNJT2mL4Pna4pDWA2sZzZY.roa
Signing time: Wed 13 Apr 2022 00:30:08 +0000
ROA not before: Wed 13 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17998 (0x464e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 13 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=688F93B513494F698BE0F9DAE290D6036B19CD96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:e4:a1:95:3c:bb:dc:93:b1:85:6e:93:b8:
8c:2d:70:ee:67:18:f1:2a:5c:52:08:4e:92:b3:57:
d2:f6:b3:78:fd:c8:dd:68:d4:63:04:62:7e:6d:dc:
0c:9a:7b:78:54:d2:6c:4d:7a:74:90:ed:23:37:9b:
3d:0b:ef:54:3f:bd:6b:2c:2f:89:f2:a4:9a:78:25:
08:c7:7a:73:c4:3d:3f:0d:15:ba:00:05:23:87:37:
76:aa:45:f2:e8:98:16:1c:ab:c4:58:f6:af:57:fd:
5a:7f:46:ec:d1:e0:46:73:ee:ad:10:08:77:71:dd:
6f:3c:df:72:75:5a:bc:48:85:66:39:29:b4:f7:cb:
34:92:6d:d6:a5:68:79:a1:d3:2a:41:49:91:51:c4:
98:69:c9:3e:ee:cf:5f:af:b6:27:0a:cd:ac:92:96:
08:ca:bc:d1:d4:47:0e:4b:c9:b4:66:e2:7c:9b:fc:
ec:71:22:bf:44:ae:68:04:35:2c:e0:59:4d:59:7d:
4b:e2:9f:fe:71:1d:2a:c3:80:01:4d:f6:b5:83:b4:
a0:17:fb:77:fd:71:10:7c:8d:ef:66:c8:5e:47:20:
e5:9b:f0:83:7a:bd:9f:74:b9:a8:eb:8a:0f:5a:cc:
8a:e8:3f:bb:78:b8:57:d4:ec:6f:73:4c:06:88:d6:
c8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:93:B5:13:49:4F:69:8B:E0:F9:DA:E2:90:D6:03:6B:19:CD:96
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aI-TtRNJT2mL4Pna4pDWA2sZzZY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d5:0a:92:aa:3b:7a:26:8d:2a:0c:09:d6:c0:b9:1e:61:96:
77:d1:be:1b:be:8b:c2:af:ef:75:c0:ce:e1:5c:b6:5b:fe:b6:
70:d0:c6:3b:0c:2f:9a:e5:62:26:05:08:6e:9b:19:a3:41:d0:
8f:97:40:50:07:10:25:c5:2d:60:4f:e7:82:20:e6:5c:76:d3:
02:7c:31:a1:94:47:d3:ca:5b:f8:15:b3:b9:2f:60:44:62:db:
d8:a4:21:8e:aa:75:90:3f:f9:db:82:65:81:a8:f9:71:5b:22:
c8:13:59:a1:6c:f7:13:43:a7:dc:76:38:75:a8:be:90:54:8e:
eb:7c:7b:af:f1:40:e2:a3:27:8f:50:02:fb:ad:9c:e6:a1:b3:
09:3f:bf:6e:af:d2:06:00:81:04:f8:31:8e:00:75:eb:84:c1:
3b:c6:33:71:28:f9:e6:f8:9b:9a:40:90:a9:c9:37:4a:cd:d1:
1e:44:ba:81:86:c4:da:8b:3e:be:df:95:76:f5:2a:30:88:03:
c9:13:d7:91:b7:01:a7:b0:3e:bd:1c:d3:a2:cd:59:02:42:eb:
e2:7a:77:df:d5:2b:13:3d:cf:8b:fb:c4:08:87:c7:09:5e:8f:
74:6f:64:bf:54:4c:fd:22:1b:fa:08:d1:a2:97:14:60:02:ae:
ef:29:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org