Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/it1e-eBDFTKZlq8QQX7WpuTIyps.roa
File: it1e-eBDFTKZlq8QQX7WpuTIyps.roa (raw, json)
Hash identifier: NKNq4CgXZb605R/GhX9dXboenjCssey3DrY410Xga/A=
Subject key identifier: 8A:DD:5E:F9:E0:43:15:32:99:96:AF:10:41:7E:D6:A6:E4:C8:CA:9B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 472E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/it1e-eBDFTKZlq8QQX7WpuTIyps.roa
Signing time: Fri 29 Apr 2022 00:30:10 +0000
ROA not before: Fri 29 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18222 (0x472e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 29 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=8ADD5EF9E04315329996AF10417ED6A6E4C8CA9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:bd:24:df:6e:dd:64:35:f5:c0:ef:27:ce:
a3:42:73:4e:70:fe:a5:0b:e4:a2:66:75:68:2c:31:
b7:aa:bb:ba:c8:39:36:cf:bc:64:1c:f7:80:98:9a:
e1:9f:57:db:0e:87:7d:96:f4:a1:04:ea:b5:20:ec:
5c:32:04:a7:c2:4f:46:6a:5d:ee:b9:d3:cd:3f:ea:
f0:2d:c3:83:ee:65:d6:82:d2:d7:c8:14:6e:03:ec:
83:ee:9e:1d:a4:8a:5b:b4:60:86:60:20:c9:dc:37:
29:ad:32:e6:49:23:df:2a:ea:7b:81:b5:79:f0:cb:
a4:bf:3d:c2:63:a2:01:a7:78:be:ec:8b:b2:43:10:
ae:8e:46:15:c6:12:90:bb:52:e2:0a:6a:6b:bb:9d:
77:e5:8a:6a:e9:f6:14:24:2e:ad:c6:0f:c9:3b:f9:
84:1b:28:8c:aa:e3:54:48:f7:da:fb:5e:2d:5e:07:
bc:e8:b9:9a:61:ca:47:a7:62:70:6d:f0:b1:28:ef:
1e:f1:75:77:13:5b:22:e0:a2:0b:8a:7f:db:26:33:
6b:6e:74:23:82:15:49:8d:60:fa:f6:5b:d0:16:36:
34:fd:a5:97:4b:ca:80:f0:28:33:0e:d3:6f:74:9a:
17:1d:40:58:7b:d3:75:c5:6b:fa:48:80:f7:70:61:
f4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:5E:F9:E0:43:15:32:99:96:AF:10:41:7E:D6:A6:E4:C8:CA:9B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/it1e-eBDFTKZlq8QQX7WpuTIyps.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:15:02:a3:86:51:1f:1e:a2:57:87:63:a4:3d:3d:85:93:e9:
e4:ab:0a:db:ae:e4:73:4e:ae:7b:4c:3b:51:b3:20:bd:de:95:
93:f3:ee:22:c2:1c:69:30:aa:c7:6e:58:74:00:f1:ec:42:3a:
c8:ff:98:65:cd:b9:87:67:e4:3e:cf:31:d5:e3:cc:3f:4a:09:
78:ab:22:4c:74:f7:8c:6e:ec:e4:01:44:24:01:a8:df:ed:66:
1f:37:d6:74:7e:0f:e8:ad:80:a4:16:91:03:5c:a5:d3:9d:9f:
04:0e:26:ca:4e:52:c6:a7:ba:4f:b4:12:96:c6:c6:c3:39:1d:
09:db:b8:fc:6f:fe:ce:f6:97:13:9b:33:d5:fb:77:cb:1b:51:
b3:1b:3d:96:ea:9c:fc:62:5d:cd:7c:e7:ca:a6:19:3e:bc:30:
1f:ff:af:73:b3:d5:99:f6:d6:1a:14:fd:f8:65:5b:7f:e3:7e:
d3:c5:6a:6c:eb:3c:7c:f0:70:52:d2:58:d7:ba:5e:27:a9:c4:
3e:41:1a:a4:a6:1c:d4:3b:b6:65:dd:af:28:b5:f4:80:cc:49:
3e:49:d3:98:74:79:1c:43:e5:61:8d:60:57:6b:1c:2c:90:4c:
04:23:da:21:61:44:78:48:e9:71:e3:38:2f:05:e5:e3:97:e8:
ca:04:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org