Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/bh10OkJ1-dMd3KP2YQMvcE6ZHvU.roa
File: bh10OkJ1-dMd3KP2YQMvcE6ZHvU.roa (raw, json)
Hash identifier: CQdErUJM3rpUUjwmyPfvtTNMz0KwtSesfJu9xUJ7pL8=
Subject key identifier: 6E:1D:74:3A:42:75:F9:D3:1D:DC:A3:F6:61:03:2F:70:4E:99:1E:F5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48F2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bh10OkJ1-dMd3KP2YQMvcE6ZHvU.roa
Signing time: Tue 31 May 2022 00:30:10 +0000
ROA not before: Tue 31 May 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18674 (0x48f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 31 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6E1D743A4275F9D31DDCA3F661032F704E991EF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:fb:67:ba:f8:87:79:fa:1d:ca:10:c0:a8:
12:2b:bd:d9:b5:09:53:bc:e5:5e:bd:2e:4f:78:7e:
df:12:18:56:d3:6b:50:5b:68:b4:2c:6b:b2:bb:11:
b9:5a:c5:7c:e3:67:cd:27:77:82:fc:ae:20:bb:fe:
1f:69:71:d0:38:23:3a:c8:11:81:40:f4:3a:39:8d:
66:ef:08:16:73:dc:de:68:31:cd:75:ad:fc:fe:92:
60:e1:d3:7b:27:a3:40:1e:be:b3:00:20:7b:0b:64:
22:34:a9:cd:dc:80:89:4d:ca:42:ae:66:91:48:86:
9b:f1:75:27:10:fa:04:a1:db:2f:dc:d3:3f:b6:8d:
16:64:9c:51:51:13:57:64:3f:94:cb:f0:a4:1f:73:
0d:5b:d3:d5:13:40:86:eb:c1:83:5a:a8:5c:11:41:
03:bf:84:01:75:06:31:c0:5c:5f:04:41:f7:e0:90:
7d:57:64:7c:1d:aa:a0:20:e4:c6:50:87:b1:23:4a:
c2:ce:c8:b1:8e:67:20:74:2b:f8:1e:df:74:4f:db:
a2:62:34:8c:5f:d4:3a:35:d2:7e:8a:ae:60:2c:ea:
cd:68:fd:67:ef:7e:3b:50:b3:6f:f2:71:fd:ed:2d:
bc:c1:a0:08:e7:f4:29:de:e8:d9:b5:89:92:36:9a:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1D:74:3A:42:75:F9:D3:1D:DC:A3:F6:61:03:2F:70:4E:99:1E:F5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bh10OkJ1-dMd3KP2YQMvcE6ZHvU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:43:d2:86:a0:1e:d3:55:69:a0:47:01:4d:09:24:80:1f:41:
b9:59:a4:e4:2b:3d:60:42:ce:28:aa:c6:ae:93:1c:08:6d:49:
88:99:98:22:84:e8:ab:80:e4:c5:91:cd:1d:20:cf:f2:ae:0d:
20:46:d2:f1:4f:78:2e:da:e5:c3:bb:8f:46:11:1e:11:a2:74:
42:8c:e8:49:a2:05:21:06:ca:82:e8:bb:07:3c:bd:dd:09:ce:
a2:a3:87:25:84:65:2d:0e:ae:4f:2f:78:6d:df:bd:ee:ac:9c:
6c:2c:02:1d:29:d7:99:20:f6:5a:33:68:44:84:8a:c3:6c:47:
55:ad:ea:34:1d:dd:0e:fb:a4:de:14:c2:a5:d1:11:f4:49:a4:
2c:50:48:90:a3:35:da:ec:c9:f1:eb:6e:c1:34:e7:1c:e8:a3:
af:88:61:c0:df:e6:a6:21:9b:89:5d:61:a1:bd:a3:3d:e9:75:
fe:1d:89:22:08:ce:f9:2e:da:07:0b:02:66:53:62:a5:6b:53:
98:f7:93:27:4a:1c:e5:f6:f5:c6:9e:b7:95:35:53:36:78:03:
fc:f2:b0:12:8a:c4:05:38:fc:ae:e6:7e:17:c8:77:8c:aa:d4:
b9:6c:5b:95:e5:04:6f:d0:e8:1d:70:ef:25:37:f4:05:7b:ba:
01:7c:5a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org