Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/kys7GaWiKkXKDhpg8ETzVHnZZE8.roa
File: kys7GaWiKkXKDhpg8ETzVHnZZE8.roa (raw, json)
Hash identifier: XS6UFOxgEFb2Ym0/QPeKcZNY+HmMp57OOOD70HzYZa4=
Subject key identifier: 93:2B:3B:19:A5:A2:2A:45:CA:0E:1A:60:F0:44:F3:54:79:D9:64:4F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 456D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kys7GaWiKkXKDhpg8ETzVHnZZE8.roa
Signing time: Mon 28 Mar 2022 00:30:13 +0000
ROA not before: Mon 28 Mar 2022 00:30:13 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17773 (0x456d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 28 00:30:13 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=932B3B19A5A22A45CA0E1A60F044F35479D9644F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:d2:f7:c1:9b:d8:78:09:05:ba:bb:40:a8:
eb:f4:1d:bc:fb:74:4f:90:0e:ed:a3:42:d5:df:31:
8a:e2:b8:cb:c9:99:2f:37:d5:2a:02:d9:22:e6:d9:
85:98:4a:aa:73:d7:59:77:8f:cd:4a:e2:e7:c1:55:
79:58:7b:01:6d:fc:9d:7f:94:2c:ac:24:2a:c6:13:
49:00:90:f1:e1:31:00:77:f5:5b:68:1e:c0:3f:ca:
4f:a9:35:84:6b:dc:cd:4c:f1:0c:a4:d9:64:47:b3:
6f:e0:b0:0a:8c:66:24:1b:34:2c:81:02:73:aa:d4:
4e:0a:80:50:5f:4b:4f:ad:9c:a0:fb:54:a3:cd:e0:
48:dc:64:96:f5:22:be:b2:b3:09:56:3d:bc:7e:9a:
47:a2:a5:66:bc:fa:2e:2c:23:bc:5a:c2:5b:5b:8e:
12:80:51:26:2f:a8:1a:cf:27:eb:7b:5f:c2:17:21:
88:4f:67:9f:cc:f6:a1:a9:13:8c:4d:f1:bb:d7:61:
c3:c4:0e:bb:4d:ab:03:83:f3:89:17:9e:1b:2e:bb:
47:d4:03:75:72:9e:f0:34:40:25:7d:39:d0:e9:54:
fa:e1:e0:52:eb:be:72:1e:4c:02:b5:c0:02:df:3c:
dd:ac:46:41:16:77:2f:fd:90:31:c4:dd:2e:06:d7:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2B:3B:19:A5:A2:2A:45:CA:0E:1A:60:F0:44:F3:54:79:D9:64:4F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kys7GaWiKkXKDhpg8ETzVHnZZE8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:4a:07:3a:6d:75:8f:ab:e6:e6:52:a0:5f:0a:09:e1:87:a8:
1f:58:03:3d:f1:2b:4d:99:50:8c:bd:c5:cb:e8:d6:7f:71:c5:
42:42:f0:cc:76:9b:18:6f:ab:56:52:fd:84:90:0d:bc:49:c8:
70:ca:c4:f3:8a:12:e4:bd:9d:6b:47:12:4f:e2:30:06:ba:4c:
27:ab:f5:b6:0a:39:e8:85:9e:cf:f5:98:c4:aa:cf:49:15:a9:
40:c8:5a:28:2f:94:55:45:22:54:38:40:fb:0c:8d:fa:73:63:
67:80:ff:54:fc:3f:3e:81:74:b2:86:55:2c:f2:a3:9c:ea:6e:
41:05:f5:54:e5:d2:2f:51:ec:33:21:0e:ad:14:3f:a8:ae:87:
a0:1c:80:ff:ac:92:ee:c3:3f:ae:52:f6:3a:ef:0e:c3:b1:12:
57:f0:40:f3:c2:d1:c4:6a:22:50:ba:ac:49:08:7a:ba:ae:42:
20:ea:ad:3a:d9:ad:81:38:16:72:98:85:e7:7c:de:09:a1:32:
23:7c:bc:f2:e4:26:47:d6:3e:ed:d0:9c:4c:ae:dd:25:43:e6:
d4:08:a1:03:9e:cf:8d:7b:3e:2a:eb:b0:62:6c:9a:20:36:97:
48:f2:ea:14:d1:93:2e:dd:8f:6d:c5:db:67:c3:a4:d2:1e:10:
93:db:49:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org