Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/cC2SGFs_8n5eNj2RPdBN6GpGJ4A.roa
File: cC2SGFs_8n5eNj2RPdBN6GpGJ4A.roa (raw, json)
Hash identifier: ofU6S9uwb0ihjzzjRTGVwmq8BVDExINLsAanwGFxsHI=
Subject key identifier: 70:2D:92:18:5B:3F:F2:7E:5E:36:3D:91:3D:D0:4D:E8:6A:46:27:80
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4666
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cC2SGFs_8n5eNj2RPdBN6GpGJ4A.roa
Signing time: Fri 15 Apr 2022 00:30:08 +0000
ROA not before: Fri 15 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18022 (0x4666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 15 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=702D92185B3FF27E5E363D913DD04DE86A462780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:45:8d:e0:75:29:d4:b9:ac:38:b8:34:f8:
75:89:9e:1f:59:ff:08:31:64:9c:de:ca:7b:61:8a:
7a:21:7f:db:59:a0:5e:f4:d7:f2:4d:f6:2f:1d:11:
47:e5:dc:44:54:8a:93:72:5d:03:03:91:bc:9c:28:
df:65:f8:30:1f:6d:a9:37:33:4b:dc:02:6a:c3:7b:
cb:3d:29:d8:0d:01:05:fc:d8:bb:f7:ff:34:31:0c:
5a:1a:73:aa:5e:8d:ec:93:f1:d5:66:b1:dd:fb:33:
ee:c9:bc:a8:ea:e4:88:3f:01:80:1b:09:5f:0f:ba:
c5:e7:d9:24:db:df:01:3f:c0:a4:ed:a2:99:24:a2:
f8:d7:ff:12:98:5d:84:12:bf:68:4c:e0:65:01:94:
9c:5a:79:b5:d6:60:2a:5d:75:96:03:d8:02:b2:ef:
68:ff:4f:b3:76:23:02:d6:eb:cd:17:00:ee:a2:1c:
84:65:e0:dd:e6:d4:94:04:9c:63:88:22:9c:5b:f8:
62:e3:ab:5b:41:37:22:ed:53:00:f7:e0:c3:d7:33:
9d:3d:69:4e:3c:03:0e:03:d1:df:0b:62:68:9a:6a:
6c:c4:6a:da:78:b1:60:66:6c:f7:f5:fe:dc:e5:f5:
3b:57:8d:09:b8:df:e8:b5:c1:ea:ef:94:ab:94:82:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2D:92:18:5B:3F:F2:7E:5E:36:3D:91:3D:D0:4D:E8:6A:46:27:80
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cC2SGFs_8n5eNj2RPdBN6GpGJ4A.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
85:94:6c:ff:63:5e:b8:45:d0:d0:4b:84:3d:17:7d:79:91:44:
d7:d4:6b:fb:60:3a:a0:16:90:59:47:ac:0c:bc:d1:dd:0a:e9:
8d:6a:c6:15:c0:5e:3b:a9:ef:e4:53:0b:7f:33:01:be:bb:7d:
fe:81:7a:54:6a:50:a1:c8:ed:f6:1d:d8:68:5c:24:e4:aa:04:
fc:b3:7d:da:00:b4:64:ab:1e:4b:be:52:3f:a1:f6:92:81:f0:
14:c6:47:2a:65:2a:1c:7a:82:00:67:af:00:1a:71:b0:61:58:
c5:83:9d:28:e4:b4:36:d8:d9:3d:ee:ec:02:c1:e1:2a:e1:ca:
63:6e:34:c1:98:9d:e9:1c:ba:f4:ce:47:da:c1:f8:60:7f:9a:
f3:21:13:5f:6f:0b:55:5d:08:83:ac:1c:74:03:09:fe:77:39:
0e:fd:2f:24:b5:21:a0:1a:94:fb:b0:ed:d9:eb:a1:21:9b:0c:
6a:8d:2b:ff:a8:d1:3d:8b:78:32:6a:ee:b4:09:e7:eb:ee:d4:
a4:5d:f1:a6:71:e1:82:24:9f:82:45:9e:76:8d:e7:e3:cc:c4:
54:b5:8c:22:37:22:5e:97:38:2c:df:13:85:87:aa:e6:e6:5b:
9f:01:b2:d7:10:ed:93:c1:3d:08:ef:75:2b:48:e5:63:a4:c6:
70:4d:75:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org