Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/fQ_YbyHboIPuXyeP1KuNHOSCcRs.roa
File: fQ_YbyHboIPuXyeP1KuNHOSCcRs.roa (raw, json)
Hash identifier: QEFuXy3mlvmKJ/ewKl9b4xKrGTN65jmmbRgjkMhPO7I=
Subject key identifier: 7D:0F:D8:6F:21:DB:A0:83:EE:5F:27:8F:D4:AB:8D:1C:E4:82:71:1B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45A1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fQ_YbyHboIPuXyeP1KuNHOSCcRs.roa
Signing time: Fri 01 Apr 2022 00:30:05 +0000
ROA not before: Fri 01 Apr 2022 00:30:05 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17825 (0x45a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 1 00:30:05 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7D0FD86F21DBA083EE5F278FD4AB8D1CE482711B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:79:10:d7:18:ca:f0:ba:2d:f5:f4:01:a6:
1d:e0:b6:f9:e2:01:d1:6a:16:52:81:70:3e:49:7b:
e5:94:a4:2b:12:63:b2:97:fd:fa:29:c8:bd:cf:b1:
ac:41:aa:c2:f9:50:01:ca:13:a9:54:72:a1:4d:0b:
55:e5:94:09:7a:e1:97:df:c7:6c:4a:e1:1d:37:f5:
00:fa:9b:85:ae:b1:e6:94:f0:ce:93:33:7a:3a:cc:
ff:9d:6f:25:a1:60:e0:90:92:b1:78:f3:76:4a:a0:
df:06:e9:28:2e:8d:fe:be:7c:9f:23:37:39:f7:1d:
21:99:27:4c:34:3a:be:3d:21:73:92:f5:23:7d:3c:
2a:9b:b9:86:96:b7:94:d0:03:71:dd:51:54:ae:f0:
96:44:b2:17:24:2f:d3:d0:5d:b3:18:8c:a6:b6:b0:
90:da:5d:27:88:2b:56:12:74:e6:37:11:5a:57:dd:
ce:4d:7a:a6:ed:32:7d:bb:8b:50:96:6e:19:4f:a0:
f3:5a:a9:22:23:51:1d:62:c0:53:29:c7:e6:dc:17:
03:69:a5:82:09:5d:39:b1:bf:b8:2f:9a:d5:05:52:
51:c2:26:69:73:0f:32:0a:9f:6b:b3:0a:c1:34:2b:
ff:70:d8:4e:23:9a:82:82:af:bb:ab:3e:a7:35:51:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0F:D8:6F:21:DB:A0:83:EE:5F:27:8F:D4:AB:8D:1C:E4:82:71:1B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fQ_YbyHboIPuXyeP1KuNHOSCcRs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4b:a5:3f:62:1b:1b:29:80:51:ce:63:60:73:89:99:59:b0:
0a:76:0c:7d:68:8a:cb:fc:62:37:e7:bb:bd:73:cd:24:34:8a:
6b:33:16:df:21:33:43:b2:10:3a:40:59:6b:ad:95:00:ab:fd:
9c:3d:77:fe:31:14:03:e6:75:29:95:f4:2b:51:fe:d6:c9:c7:
6f:d1:2f:d5:dd:75:5a:9b:5e:64:f4:18:26:a1:ea:86:d9:33:
4d:0d:a7:f8:a7:a8:8d:1f:8b:0b:e1:ae:78:80:6c:7d:e9:b2:
00:28:85:13:0b:bc:8f:37:12:58:bb:64:23:18:f6:be:cb:af:
52:ed:f0:d9:3c:6b:2c:e9:c7:74:dd:66:9a:d7:7c:b4:be:e7:
96:1e:b2:72:31:3e:d5:95:c6:50:80:00:26:e1:db:64:34:e8:
72:94:b8:80:0a:66:32:4a:43:47:c3:7f:fa:cc:9a:f0:df:85:
84:ff:c2:9c:0c:14:25:29:53:07:cd:93:5d:b2:db:c8:32:57:
3d:3a:50:c4:45:06:8f:de:de:40:29:52:0b:68:82:71:0c:72:
27:ce:56:67:1f:18:72:a3:97:9d:ba:f2:82:7f:29:55:67:96:
cb:7c:e4:d4:88:cb:8f:12:f4:dc:0d:9d:ab:ec:05:ec:82:86:
01:2b:d4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org