Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/gSwU1itv8YmMEz2k-L27pD9GCyY.roa
File: gSwU1itv8YmMEz2k-L27pD9GCyY.roa (raw, json)
Hash identifier: efc2xr+EEUvA3AWtIvdG8+YSNG7AeMZisztXjHJkCxc=
Subject key identifier: 81:2C:14:D6:2B:6F:F1:89:8C:13:3D:A4:F8:BD:BB:A4:3F:46:0B:26
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4842
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gSwU1itv8YmMEz2k-L27pD9GCyY.roa
Signing time: Thu 19 May 2022 00:30:06 +0000
ROA not before: Thu 19 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18498 (0x4842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 19 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=812C14D62B6FF1898C133DA4F8BDBBA43F460B26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:9e:8e:68:da:7d:dd:c5:62:7c:89:91:88:
5d:57:ac:7a:13:8c:49:f4:e1:5e:58:fd:bf:a8:3d:
75:99:59:36:b4:ec:b9:91:bc:fa:1e:c4:12:c0:43:
b9:eb:a2:6a:11:d5:37:63:48:f9:17:f8:3e:36:91:
cd:3e:29:bf:83:a4:61:56:96:35:86:b3:84:f6:be:
7d:d7:17:95:41:c7:d5:bd:8f:97:92:f3:ec:2a:1e:
0e:46:2b:e7:bd:d6:bf:8c:58:4e:50:55:38:0b:3f:
d5:23:88:2d:19:ae:7d:d3:ac:27:b7:1b:cd:9d:e3:
13:04:38:e5:c5:e0:90:2a:da:2e:eb:f2:bf:0e:ba:
eb:58:84:65:0b:48:a9:bc:04:2f:1f:a8:c8:a0:3d:
8f:3a:d6:c4:3f:a5:32:41:b9:3b:53:11:ac:d5:ff:
09:d7:29:cd:4e:25:3f:71:aa:fe:03:cd:9b:7c:bb:
18:09:fc:fe:6b:d1:4e:73:3e:db:23:cf:45:23:c5:
16:0d:1a:12:14:e1:5d:1c:44:55:fd:37:a5:81:e5:
b6:1e:5b:32:98:63:71:83:a8:b4:4f:d1:4f:d4:7b:
fb:2f:62:c2:03:99:01:5f:8e:6a:a8:6a:63:b6:fe:
ba:66:83:97:e2:d4:84:8e:75:41:95:5f:00:1a:58:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2C:14:D6:2B:6F:F1:89:8C:13:3D:A4:F8:BD:BB:A4:3F:46:0B:26
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gSwU1itv8YmMEz2k-L27pD9GCyY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:41:7c:1a:37:6c:e4:ef:68:6b:e1:d6:d6:64:49:fd:f8:aa:
d9:d7:a4:f9:91:e4:2c:5e:0d:6d:65:3a:36:a7:5f:37:58:f3:
09:ca:4d:81:cc:86:00:63:9f:fb:82:1c:14:af:08:bb:fc:8b:
9c:c0:f4:00:39:c8:5c:01:e7:e0:0f:b5:b4:59:30:5e:a5:b3:
4b:04:e2:2b:db:67:00:8d:e0:88:aa:63:77:3b:00:d8:59:83:
9b:80:58:ef:1b:c0:c5:42:74:54:ec:1d:5d:7d:96:fd:0e:dd:
47:cb:74:f2:e7:bb:cb:60:8e:d0:cb:15:c6:6c:da:82:b6:4a:
e9:1e:d1:43:39:ec:ce:45:e7:63:c1:9f:a6:fa:98:ea:dc:41:
af:d6:6c:c2:63:4e:c6:68:24:e1:fb:22:8d:04:39:8f:b9:0c:
7a:6e:c3:bc:71:ea:b7:7a:27:6b:b3:66:a6:65:a7:13:e1:6b:
60:78:1e:28:00:64:d1:ed:46:00:d2:44:be:47:01:03:3d:08:
2b:7b:4e:47:6b:2b:dd:33:9a:0f:b8:eb:e7:e1:05:6a:86:a1:
29:39:e0:05:3c:0b:cf:84:1d:97:93:04:a0:d5:45:97:21:0a:
c3:2b:26:24:e1:9f:33:00:26:de:d1:2b:b0:43:f6:41:3e:dc:
8c:ff:53:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org