Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/nqqJFrK1brjW0mn2C9q5gRnpbOU.roa
File: nqqJFrK1brjW0mn2C9q5gRnpbOU.roa (raw, json)
Hash identifier: 8aRHv0/ySvgvJCGdSA5lSPMgaaIW9sSCaYBM1QABB6E=
Subject key identifier: 9E:AA:89:16:B2:B5:6E:B8:D6:D2:69:F6:0B:DA:B9:81:19:E9:6C:E5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 455B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nqqJFrK1brjW0mn2C9q5gRnpbOU.roa
Signing time: Sun 27 Mar 2022 00:30:07 +0000
ROA not before: Sun 27 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17755 (0x455b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 27 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=9EAA8916B2B56EB8D6D269F60BDAB98119E96CE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:5f:2b:00:a7:ce:fa:52:c6:1d:b7:8b:18:
51:54:31:b0:80:60:90:74:f1:42:da:0e:07:b4:ea:
b7:9c:01:e5:72:50:00:76:7e:f0:fe:cc:ce:c6:22:
63:8f:8e:77:d7:7d:6b:b5:03:66:b2:36:d2:b5:40:
62:5e:0f:a6:9b:68:e3:41:82:4c:6c:5d:19:d9:87:
17:c1:b6:6f:6e:45:49:42:00:d4:e5:c3:50:18:9e:
eb:fd:d8:d3:b2:fa:ef:61:3c:d9:4e:95:32:9b:1f:
d0:71:6d:09:3e:a2:d7:ef:2c:f5:36:89:b0:ff:a5:
e0:4f:e1:a1:b2:a8:e9:7b:25:25:89:a8:c2:03:95:
6c:d0:1d:50:7b:3e:3a:24:b9:84:8a:a5:a1:d9:6d:
e6:22:cb:56:9b:5b:fd:98:4f:d8:c1:c6:7c:0b:97:
62:3d:95:d8:1b:9d:00:41:82:b9:5b:f1:45:73:94:
07:d6:10:25:58:9c:f7:95:b2:35:e5:b5:98:db:09:
8e:20:d6:92:b7:e5:b9:5e:ce:6d:25:4a:52:87:43:
9f:9b:91:91:e9:b0:44:b1:9b:f6:2d:a0:1e:a3:5b:
95:f9:2e:1b:17:89:67:ef:cb:b9:1a:01:17:ac:42:
83:e8:3e:47:73:94:6e:3f:0f:aa:57:bf:9f:54:89:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AA:89:16:B2:B5:6E:B8:D6:D2:69:F6:0B:DA:B9:81:19:E9:6C:E5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nqqJFrK1brjW0mn2C9q5gRnpbOU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c0:cf:ac:25:6d:f1:8a:4b:0d:24:64:b4:ce:34:77:35:5f:
56:9b:64:41:04:ac:9f:60:b1:13:2b:e9:7b:ce:af:6a:94:54:
55:61:22:f8:8c:4e:fc:52:a2:c6:b1:72:4b:93:75:24:dc:b7:
6a:39:f0:a9:bd:26:4b:bd:cc:b1:5c:41:6e:1b:15:4c:6e:36:
64:2c:39:b0:6b:66:97:43:e6:ff:41:c1:a9:0d:54:29:bc:a2:
29:57:35:7f:86:83:58:0c:4f:28:0b:2a:ad:f8:4e:49:68:a3:
a1:57:af:89:90:9b:f9:3c:42:29:49:b4:2c:33:67:ef:df:c4:
36:8a:08:1d:fd:d6:59:a2:ac:5e:a5:82:bd:88:87:47:6d:77:
8d:8e:8f:b1:0a:38:3b:88:cf:3b:57:12:59:ee:7e:73:8d:a4:
53:06:13:c6:04:86:7a:7e:24:4d:d1:f1:5f:e9:62:4f:a9:be:
2a:83:a6:45:3b:cb:73:66:26:80:a6:87:62:53:60:7e:55:6b:
da:05:d1:5c:35:f0:8b:c0:aa:3d:8f:2b:13:34:8b:c8:c0:69:
cd:31:fe:a1:46:8e:9b:53:be:4b:7d:d3:51:a9:60:f6:aa:b9:
02:29:71:21:3c:f7:58:55:dd:0a:24:43:2c:5b:fa:ef:e3:80:
f8:a3:0b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org