Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/jLua-U-Px1WPIcLucFYgvaDpqcM.roa
File: jLua-U-Px1WPIcLucFYgvaDpqcM.roa (raw, json)
Hash identifier: +2Sct5EYPRmOlylWaB12oFiEw23qBjRbpGNnC92LtpQ=
Subject key identifier: 8C:BB:9A:F9:4F:8F:C7:55:8F:21:C2:EE:70:56:20:BD:A0:E9:A9:C3
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 437B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jLua-U-Px1WPIcLucFYgvaDpqcM.roa
Signing time: Sun 20 Feb 2022 00:30:09 +0000
ROA not before: Sun 20 Feb 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17275 (0x437b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 20 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=8CBB9AF94F8FC7558F21C2EE705620BDA0E9A9C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:af:da:28:b8:e5:7e:80:5c:7a:0c:d3:8a:
fe:ba:06:14:c4:87:3f:74:22:ea:e0:0b:e8:50:2e:
37:87:ed:c2:3a:76:f3:77:b9:e1:7a:99:d3:85:bc:
d2:95:93:ae:57:b8:f8:35:9f:c6:f3:78:87:63:0e:
ef:3a:97:f6:9f:a3:46:da:95:d0:b5:5c:72:be:29:
d1:b5:a5:6d:dd:72:e6:d5:ef:3a:a0:ea:02:82:bf:
ae:fc:7b:bc:77:a4:bb:d7:3e:78:f6:27:0c:d1:54:
e4:b9:1b:1c:b2:c8:e5:2b:7e:4c:17:ce:17:85:ca:
e8:5b:bb:7d:b1:36:7e:7d:60:be:94:6e:78:3b:7c:
d0:5c:f7:7f:ce:f0:e0:23:2c:fc:0c:80:fd:8d:b4:
ba:88:f2:97:8c:ef:29:af:3e:e2:3d:9c:9a:4c:af:
de:2e:32:0c:2a:45:93:58:55:22:8d:86:45:14:97:
58:cb:c5:47:be:0f:59:4a:83:a5:92:a3:9b:86:34:
c4:7d:53:af:9d:e7:04:8a:3f:5a:fd:67:8a:40:a1:
20:a5:95:2f:92:e2:7d:e0:36:ab:55:c8:1f:b1:18:
23:cb:81:df:03:88:eb:1d:50:26:f1:47:05:bd:db:
2b:d5:ad:c5:ce:14:b2:3c:01:a5:e1:3e:6c:d0:40:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BB:9A:F9:4F:8F:C7:55:8F:21:C2:EE:70:56:20:BD:A0:E9:A9:C3
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jLua-U-Px1WPIcLucFYgvaDpqcM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
59:69:92:98:15:cb:c8:73:c1:c5:2c:d9:1d:30:65:ad:2d:41:
43:e5:b7:cf:64:a8:2c:33:0d:70:06:2f:e4:90:44:6a:17:ab:
c9:67:f5:45:33:2b:22:56:b1:c4:46:cf:98:e1:57:ba:38:ca:
e3:b6:47:9c:07:9d:59:e8:50:dd:9c:7d:cc:f6:0a:e6:44:3f:
b3:ed:a3:7a:99:c5:79:c6:73:3b:10:1f:22:9a:54:12:f6:4e:
91:b6:96:89:23:84:31:84:69:0a:bd:e5:89:e5:ef:de:22:50:
e0:f5:ea:1f:df:dd:f5:36:fe:a7:15:7d:81:cd:80:49:d4:d8:
48:85:ce:5c:ff:1e:af:0e:1e:99:bb:42:8b:91:b0:43:40:a0:
c7:1c:3e:b9:18:7f:bb:12:d6:c8:bb:00:5a:8a:0a:f0:82:bb:
ac:6c:62:53:25:6e:2c:84:5f:28:53:c0:c4:09:e1:61:85:ef:
ab:e3:4a:56:14:ec:99:a7:82:2d:14:8e:44:9e:4f:e5:41:c9:
59:6f:45:9c:71:a6:9a:3f:fe:9f:e9:6c:34:bd:3f:43:39:0c:
23:f2:a5:0f:e7:62:dc:88:be:b2:71:10:15:a3:96:d1:14:ec:
28:93:33:94:6e:5a:fe:72:0b:6a:d1:ba:85:a1:2c:9c:9a:95:
ca:fa:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org