Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/hJhojRKcRhYWn5MDlHKwBdfjv2s.roa
File: hJhojRKcRhYWn5MDlHKwBdfjv2s.roa (raw, json)
Hash identifier: H0EPwkjOeWV/qa6Cm2jED1viWW/kJFbV8tclk1L0X3s=
Subject key identifier: 84:98:68:8D:12:9C:46:16:16:9F:93:03:94:72:B0:05:D7:E3:BF:6B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43F2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hJhojRKcRhYWn5MDlHKwBdfjv2s.roa
Signing time: Tue 01 Mar 2022 00:30:08 +0000
ROA not before: Tue 01 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17394 (0x43f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 1 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=8498688D129C4616169F93039472B005D7E3BF6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:59:d2:69:04:fb:44:81:7e:08:ad:5b:d3:
58:09:19:78:e5:3f:9b:d9:f5:bd:19:dc:eb:cf:b9:
67:38:ae:95:e7:bd:bd:4b:7a:13:0d:9a:fb:4e:dc:
20:35:99:00:86:a9:b8:2a:be:da:cf:b8:23:5b:9b:
b4:e0:86:7d:e8:f2:0f:34:29:6f:58:b1:a5:a9:43:
74:94:c7:cd:e0:f9:4c:9a:5f:e5:57:bb:10:e4:2e:
59:b8:71:20:bc:54:6f:2a:1b:04:e0:64:67:e1:b9:
51:89:88:9c:7c:a8:d2:8a:22:e8:8d:1e:a6:6a:f5:
31:c4:51:8d:12:f0:b3:f4:b1:42:9a:dc:de:0c:b6:
7e:28:ff:26:db:e9:89:2b:2e:cf:3e:0d:38:65:94:
1b:ee:b7:e3:22:0e:4e:4a:e9:36:81:e3:b1:17:ee:
36:80:04:91:e4:da:db:b5:63:23:00:f3:d3:6e:29:
58:49:a2:c7:9f:43:c6:ec:00:f7:66:81:ff:0b:eb:
cb:87:5a:9b:7e:70:cf:01:47:c5:55:49:cf:de:d9:
f9:c5:e5:78:bf:8e:85:7f:31:14:f3:19:15:10:56:
9f:27:93:7b:c7:38:c2:ec:9f:e9:6b:e9:53:de:be:
fc:80:2b:93:e2:a2:97:30:03:c4:b8:67:16:e3:c0:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:98:68:8D:12:9C:46:16:16:9F:93:03:94:72:B0:05:D7:E3:BF:6B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hJhojRKcRhYWn5MDlHKwBdfjv2s.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e7:ab:d2:d5:ec:e2:6e:f0:a2:85:2a:f9:ce:99:3c:67:24:
8b:cd:49:94:26:cf:ae:69:30:4c:66:8c:95:55:8e:5d:5f:49:
88:c1:eb:5a:43:d7:e4:93:dd:ce:dc:80:32:f6:c3:cd:dd:0a:
ad:ce:22:6c:7f:60:de:f2:c9:c3:5e:fb:15:67:b9:31:8f:b5:
f8:46:18:40:0a:c3:6e:ca:f4:1f:02:41:1b:e6:5e:6c:a0:f8:
76:13:2d:0b:c2:74:af:7f:5f:57:f3:47:b9:cc:c2:65:8c:aa:
56:a2:0d:ca:bd:94:a0:d0:55:00:a4:17:fc:93:97:3c:43:34:
7c:a3:93:48:ea:41:dd:f3:7b:b2:3d:31:90:64:1a:64:cc:0c:
38:91:09:dd:e2:fb:2b:85:7b:24:38:61:d0:f0:30:00:52:44:
fb:31:f1:84:f0:1f:7b:6e:84:54:e9:5d:ec:61:6e:62:83:47:
9e:60:60:19:82:29:bb:c8:2f:23:1c:a6:0b:c3:e4:8d:09:58:
ac:3f:6d:12:cf:74:d3:9b:4b:11:80:b5:cf:33:96:d3:67:c6:
a2:51:b8:78:18:33:d1:ad:2f:72:35:0d:97:e2:12:17:f3:50:
a2:22:9e:ab:d1:06:d7:72:75:3b:b0:f5:7c:e8:3d:ac:68:ca:
95:05:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org