Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/cPZw_foTYZPOkcLkleVpDBIwrsY.roa
File: cPZw_foTYZPOkcLkleVpDBIwrsY.roa (raw, json)
Hash identifier: bvWmAf6d22VpEZezvW/47vx+pwVXmOhghAkKSQXWWdY=
Subject key identifier: 70:F6:70:FD:FA:13:61:93:CE:91:C2:E4:95:E5:69:0C:12:30:AE:C6
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43D6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cPZw_foTYZPOkcLkleVpDBIwrsY.roa
Signing time: Sun 27 Feb 2022 00:30:12 +0000
ROA not before: Sun 27 Feb 2022 00:30:12 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17366 (0x43d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 27 00:30:12 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=70F670FDFA136193CE91C2E495E5690C1230AEC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:72:12:84:9a:27:1d:b6:cd:55:41:6a:c6:92:
9c:93:91:01:ed:ac:6f:ba:9f:38:65:2a:36:ff:c1:
68:58:cf:95:bf:62:33:aa:7b:f8:f8:33:df:ba:ca:
20:b9:9f:1c:a9:b7:aa:49:e0:05:7a:75:54:30:41:
41:9a:a6:56:04:d6:d2:a4:d6:e9:a9:67:b4:45:2c:
88:00:57:43:85:2c:17:e6:1f:59:16:78:1d:65:11:
f1:8e:0f:c9:ea:f0:1e:4b:2b:85:2d:c8:f4:2e:ef:
92:03:e2:00:6a:ef:83:45:0d:52:71:27:16:09:1b:
ef:6e:86:61:ab:81:2f:eb:67:93:59:b6:90:5b:60:
f7:fd:9c:3e:d2:5d:ed:72:07:6c:4d:98:d5:6c:26:
6f:bc:ed:42:b6:b9:16:29:10:b7:b2:32:b8:40:ce:
f4:b8:1b:4e:94:6a:7b:c3:93:41:06:33:3c:14:a0:
74:cd:4e:8a:d1:7e:e9:3a:95:c9:8b:5e:09:4f:0b:
78:57:f2:eb:9a:82:56:20:ec:f0:b1:1d:95:fb:63:
30:3a:b1:44:1a:35:90:00:45:72:29:fd:ac:e3:97:
94:f6:0b:8a:5d:cf:99:39:ca:55:ce:b4:80:44:c8:
62:a4:47:61:44:ab:72:3a:a2:1a:49:aa:3b:c0:dd:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F6:70:FD:FA:13:61:93:CE:91:C2:E4:95:E5:69:0C:12:30:AE:C6
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cPZw_foTYZPOkcLkleVpDBIwrsY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
49:38:37:d8:f1:3b:4b:72:50:c6:d9:84:eb:2a:9f:ff:a5:99:
ba:ea:c2:19:ba:f2:6d:39:98:a7:73:41:7c:b8:5c:75:28:65:
f4:d5:02:7e:08:2d:59:fa:70:63:bb:30:db:d2:7e:dc:d1:41:
79:df:c3:9a:0d:0b:4f:66:3c:c6:02:6b:81:21:1e:0c:5b:19:
17:cd:86:8c:4a:8d:6d:f2:03:d9:03:2f:2d:59:f6:5e:76:bb:
4f:5f:6e:98:40:fa:e5:e0:d4:06:6c:f3:d8:20:c9:72:8b:32:
5c:b8:6d:84:ce:4c:91:a7:04:76:3f:05:dd:70:e8:ec:42:d7:
8e:5a:22:dd:55:ff:b3:26:b3:c9:73:c5:87:d1:1a:3f:89:62:
1a:4e:4c:4f:d6:ed:de:d7:d0:dd:a9:fc:b3:c8:8b:02:bd:2f:
61:8c:9c:6d:47:f7:b1:6c:52:d4:05:76:7f:95:73:ba:04:e7:
d4:a1:a5:b4:06:0f:af:b7:3a:14:19:f5:b6:b4:fe:05:b3:ed:
70:f6:b8:74:8c:10:bc:a9:10:94:46:b6:f1:14:57:e5:8f:22:
00:b6:69:79:7d:03:f7:35:53:8b:6a:fc:10:b2:8a:54:f9:1d:
85:1b:2c:94:5f:23:49:10:e1:d1:68:8b:5d:55:52:fe:69:93:
b5:60:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org